last executing test programs: 1m26.973425804s ago: executing program 0 (id=232): syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (fail_nth: 1) 1m26.826704037s ago: executing program 0 (id=234): syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1m26.603614831s ago: executing program 0 (id=237): socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xf06, 0x3ff}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xc4}}, 0x20050890) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) eventfd(0xfffffff9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0x38, 0x40044}}], 0x1, 0x4) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@nullb, r4, &(0x7f0000000080)='./file0\x00') 1m26.528894443s ago: executing program 0 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) (fail_nth: 7) 1m26.207548609s ago: executing program 0 (id=242): unshare(0x40020000) r0 = socket$inet6(0xa, 0x6, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000001000)={0x9, {{0xa, 0x4e24, 0x3, @empty, 0x9}}, {{0xa, 0x4e20, 0x2000, @mcast2, 0x1}}}, 0x108) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000011c0)=ANY=[@ANYBLOB="0c05000000000000c20400000004c910fc01000000000000000000000000dc0000c910ff01000000000000000000000000000100000000001928d87b9762f2f4559951cd50be2ec8d54c863e81a818336ac54f31d807980324ed4bfa31873454e62e233edeefa4537ed24955d838e1a0329af4a02688f005b5d273a688692f7a5375762555b3c6033b9dd437f311fbf7bc513051a3e0acdc4ff87b09f49ddebb1f000000000000008c1f29f6393d55c6b3943f6e9a1663a46b4ac045f0fb1c4291c6c9e9ba9ac1d684fa4d8039"], 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r2, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) 1m25.692912819s ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x87, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xffffff01, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x4, 0x10001, 0x68, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x4000928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x1, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb, {0x0, 0x5767c75e76152609}}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x0, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r13}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9f2f5c45e3896534eb010018000000000000000c0000000c00000004000000020000670c4bed33f037a588000020000800000000000061004daffd5abb66a21df436db4c5b7790254f5c386bc899ee22afbd84fa120884d3ac83b18881f7bbd758d6647fec5d42a00bc7caeba50008015e960114f3eed6626ce36b47fa007515fb9bb6b00a19610fad55e168bd2b00"/155], 0x0, 0x28}, 0x20) 1m9.921229828s ago: executing program 32 (id=247): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x87, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xffffff01, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x4, 0x10001, 0x68, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x4000928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x1, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb, {0x0, 0x5767c75e76152609}}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x0, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r13}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9f2f5c45e3896534eb010018000000000000000c0000000c00000004000000020000670c4bed33f037a588000020000800000000000061004daffd5abb66a21df436db4c5b7790254f5c386bc899ee22afbd84fa120884d3ac83b18881f7bbd758d6647fec5d42a00bc7caeba50008015e960114f3eed6626ce36b47fa007515fb9bb6b00a19610fad55e168bd2b00"/155], 0x0, 0x28}, 0x20) 8.066660941s ago: executing program 3 (id=963): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x40000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0xa, &(0x7f0000000000)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x18f9408, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x1, 0x376, &(0x7f0000000e00)="$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") r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000300)) 3.484582141s ago: executing program 4 (id=996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x100) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa86, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRES64=r4], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='spmi_write_end\x00'}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0xffff, 0x9, 0xfff8, 0x400, 0x8, 0x44700100}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYRESOCT], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfd9, &(0x7f0000001e00)=""/4057, 0x41100}, 0x94) r6 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r6, 0x409, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18002000030000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x44, &(0x7f00000003c0)=""/68, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000000)=""/24) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in=@initdev}}, {{@in=@initdev}}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) fcntl$getown(r0, 0x9) r8 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x80000001, 0x0, 0x3) 2.202804086s ago: executing program 3 (id=1004): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d9, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x20000000000003cc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(r3, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x8, 0x1, 0x22, 0x0, r4}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x1c, 0xe, 0xa1, &(0x7f0000001040)="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"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="04000000020000000100"/28], 0x50) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 2.126003948s ago: executing program 4 (id=1005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) timer_create(0x7, 0x0, &(0x7f0000000940)=0x0) timer_gettime(r3, &(0x7f0000000d40)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040003a9c6890000ff0f17000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") 2.00667393s ago: executing program 3 (id=1007): inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e61afb9fdd672bad09dfb6bc7699c74e891a0c70000000000000000000000000000000008000240000000000e0001004973797a32000000001c0000001100010000000000000000000100000a00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000440)="7800000018002507b9409b14ffff00000204be04020506050e020409430008000400790000000000000052164cbf0568d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a005a0a2a1ce000e200c523eb6ed538f2", 0x78, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r7, 0x0, 0x7) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r9, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) 1.858092293s ago: executing program 2 (id=1012): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x51f100, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) io_uring_enter(r3, 0x6579, 0xad19, 0x20, &(0x7f0000000180)={[0x4]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x2) 1.753162555s ago: executing program 2 (id=1013): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r5) 1.752390505s ago: executing program 2 (id=1014): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xf, 0x1, 0x10, 0x6, 0xea2, 0x6, 0x9, 0xb}}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_ACT={0x4}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000800)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r5, 0x0, 0x1000}, 0x18) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000095e000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) syz_clone(0xc0000, &(0x7f0000000bc0)="32260e7b37fd1daf7abcde2f2b1ffb3b3d34eb68e7940ae5ef74e8b3cf15dc0e803e6f875506e2c1f0230142ddf4a273c79e7275c6619f", 0x37, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000001480)="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") r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_WRITEV={0x2, 0x11, 0x4007, @fd_index=0x1, 0xf177, &(0x7f0000000a40)=[{&(0x7f0000000000)="2b7e5e94e5d842394fcfc53aead27f5c84efa0fd837b1560f0dd7034dffbe8a2981134a1a7d41f09f9f74e", 0x2b}, {&(0x7f0000000800)="f9c6d12f78ee8ea54d26576859689ed306f545834a76cbe70b750a12efbb2692f3197952a439136e9bc40a9a63d1874f7e6e66667e2260326c1d02ac5e2587b38d471bb7fa63c7a5d082d9b5ac6687ded47ec7c78896", 0x56}, {&(0x7f0000000880)="ddb0f331b1bb9ccc9dfc1125ec397d81a52d373a1f58665b3837af991f9a3d6cb184f625361a53cb12a6cc4881182792520822e0c8fda9d23b874a7dab10a2c3961d2ded96e99c5e66bf9ed969aae7933ae6f851cc8fc5f93edce18b7de43e7ee5b79f2f406d29526d269af67ab5fb728e4039608ddd4bba0684e902412fa240944d", 0x82}, {&(0x7f0000000940)="4e8a93d3f0ee3d931c186a666d7b0c32c242eeded846e69a83a3ba0e6331264786791cc87ebcacdc26fb2a9b042d703b359832321e6dba08988c3922d90b437cc0b6bedd8f8aa54e49c2872b35c37bc0f89f970c6f7dd857254233da77f62da58950064855c358af1a12004e63d6a4888204b654e91101f5c3dd928ec54b74d5bf16fa7dca7aa54204c128141fbf116b2a95016939f517b15f76329a879660458c76880e69916ee270f17d921162ce53547ad56c07df164fd2f0ede9c50e3e83ca6bd0c92936642468ba2e11d3d3e3142c32d472f85a35a0a1", 0xd9}, {&(0x7f0000000100)="3c26be86c2d31bfc3bc1b7692169c920235702bff4cb48255a9cfba0ba79c179a549168569f9b2479fec82535ab89769953481f5", 0x34}], 0x5, 0x14, 0x0, {0x1, r11}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.713000726s ago: executing program 1 (id=1015): msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02ea801081001900e8ead7d0638572e9f20af9155d6f4e4da12ed1a3cdaf636dcac8d87f3d72f2e7566dca37f3e2ac2590231f"], 0x8, 0x800) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1.632818988s ago: executing program 1 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r9, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x43}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.522807219s ago: executing program 1 (id=1018): r0 = semget$private(0x0, 0x2, 0x22) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/170) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f00000000c0)=""/45) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0xffffffffffffffff, 0x0, r1, r4, 0x68, 0x6}, 0x449, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @timestamp, @mss={0x2, 0x5}, @mss={0x2, 0x4}], 0x4) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000300)=@req={0x28, &(0x7f00000002c0)={'geneve1\x00', @ifru_ivalue=0x3}}) socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {r1, r2}}, './file0\x00'}) ppoll(&(0x7f0000000380)=[{r6, 0x82}], 0x1, &(0x7f00000003c0), &(0x7f0000000400)={[0x10001]}, 0x8) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000440)=0x8) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000480)={{0x3, r7, r2, r3, r4, 0x120, 0x3}, 0x7, 0x33, 0x0, 0x0, 0x0, 0x0, 0x3}) ftruncate(r6, 0x3) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) mq_timedreceive(r6, &(0x7f0000000500)=""/192, 0xc0, 0x8000000000000001, &(0x7f0000000600)={r8, r9+60000000}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x0, 0x3, 0x1, 0x1, {0xa, 0x4e21, 0xfffff800, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}}}, 0x3a) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000680)='\xff\xff', 0x0, r11) syz_clone(0x8000000, &(0x7f00000006c0)="6a0d4321b7a18122365958ec3fc0dfc31ed971fae9b217860ceab6d096865ac657a95f7481a302a96d4248d3b2a3d1b59e536bf2288ee16b5d76bf6d35eaa8074ccc7f93591a800ad079815a7b3a7e7e15dd9f095a3d0bb24d6b6fca7c1064293781eef7e0a42d97175bf2666f89225aab6ee037e1a2c8cf38cd974bc3e0e3", 0x7f, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="ef87b63e06121f6d27aa00782bfd66c23d1330f64048783264f7") getsockopt$inet_tcp_buf(r6, 0x6, 0xb, &(0x7f0000000800)=""/215, &(0x7f0000000900)=0xd7) io_setup(0x2, &(0x7f0000000940)=0x0) io_pgetevents(r12, 0x81, 0x5, &(0x7f0000000980)=[{}, {}, {}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x40]}, 0x8}) ioctl$AUTOFS_IOC_FAIL(r10, 0x9361, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000b00)=0x1e, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0xe, &(0x7f0000000b40)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa4}, @call={0x85, 0x0, 0x0, 0x70}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff95, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x3, 0x4, 0x356b, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x684}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x66, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001c00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001c40)={0x3, 0x9, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001c80)=[{0x1, 0x4, 0x10, 0x6}, {0x2, 0x3, 0xb, 0xc}, {0x0, 0x4, 0x10, 0x2}, {0x3, 0x5, 0x4, 0xb}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0xcadf8000}, 0x94) rt_sigprocmask(0x1, &(0x7f0000001dc0)={[0x7fffffff]}, &(0x7f0000001e00), 0x8) readv(0xffffffffffffffff, &(0x7f0000002fc0)=[{&(0x7f0000001e80)=""/12, 0xc}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/107, 0x6b}, {&(0x7f0000002f40)=""/125, 0x7d}], 0x4) 1.462004411s ago: executing program 3 (id=1019): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) kexec_load(0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="b75170fd2b1b08ffeeb2b4cb06c065c50c9ec598be6f0289eeed5363f01bf6fe2d897d31e2d1f276d5c3a456b21a377654bab60e1bec39aef4d48ff81007009527db4a732d0876bfef484d659fc0719575e38f0b7a38f75e4a910abd874fdc7cf8f6ddf5ffdbb27d48d998f850727d3f254e20355457e3266ad58eb023e00dee069efbb3b5409508", 0x88, 0x100, 0x6}], 0x280000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2, 0x0, 0x7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x82}, 0x18) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) close(r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) unshare(0x800) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffffc]}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) 1.398651352s ago: executing program 1 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) pwrite64(r1, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r3) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040), 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000040)=0x4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r7], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) close(r4) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r9, r9, 0x0, 0x800000009) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 1.398234792s ago: executing program 3 (id=1021): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x700, 0x7, 0x1, 0x7, {{0x1d, 0x4, 0x0, 0x3b, 0x74, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010102, {[@generic={0x44, 0xc, "5028015550a0efc49469"}, @lsrr={0x83, 0x23, 0xa3, [@local, @private=0xa010100, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @multicast2, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x33, 0x0, 0xe, [0x8001]}, @lsrr={0x83, 0xb, 0x81, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}]}, @end, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0xd, [{@private=0xa010100, 0x7}, {@local, 0x9}, {@multicast2, 0xffffffff}]}, @noop]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0x0, 0xd3e, 0x1824, r0, 0x7, '\x00', r3, r4, 0x2, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_CPUID(0x1011) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) geteuid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000003850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='qdisc_destroy\x00', r1, 0x0, 0x6}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r8, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000740)=ANY=[@ANYBLOB="563f00001800599c6d0e0000ded650492d"], 0xfe33) r10 = gettid() r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.056951749s ago: executing program 4 (id=1022): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xfa, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettfilter={0x64, 0x2e, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0x8}, {0x2, 0x10}, {0x1, 0x3}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x82}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) close(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.047635349s ago: executing program 1 (id=1032): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 1.047179019s ago: executing program 3 (id=1023): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) fcntl$setpipe(r6, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c776664b8ce9d3667c1568a3a87b962b13d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 935.666831ms ago: executing program 1 (id=1024): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) fcntl$setpipe(r6, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c776664b8ce9d3667c1568a3a87b962b13d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 729.562945ms ago: executing program 5 (id=1025): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close(r5) 681.677596ms ago: executing program 2 (id=1026): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x3}]}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x3}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000720001012cbd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="08000100005724600800000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x14) unshare(0x8000480) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000780)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000780)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) io_uring_setup(0x3a9f, &(0x7f0000000240)={0x0, 0x342f, 0x10, 0x0, 0xc1}) (async) r8 = io_uring_setup(0x3a9f, &(0x7f0000000240)={0x0, 0x342f, 0x10, 0x0, 0xc1}) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x25) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='fib6_table_lookup\x00', r11}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f1, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 679.056896ms ago: executing program 5 (id=1027): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xaef, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 525.042709ms ago: executing program 5 (id=1028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x28, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="c6618fc1d27b54294a9b9672ecbedc8be73a707c479271d7787da26d7bf45573f6af1d249bdfbe773d281ee0ddcaaa70dc7431", @ANYRES32, @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x20020006}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xbfb}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="653a1a20666a751c738aca2a30bf9c6eab0e8bba463a9da3030e8d309d6999c1495660c0a7edadf9a6dd738ee46089e7b7a3c9766295bd3e5e59f6a58ee318d1de397ad0482de916af67ff42a82364735b43b6e499117764aaafee337a5a6ce3594d1d92fd8bfb56871812e8e6e70bf82f023a5e84fbe483871784fbaf10f3a0ac9237c73d12b975204abb0736a0a26efda9a7f5af274bb05738db74534329d3f5b912de7c682371f6b45672cba1c67af3ba51d845a0b565477d7c0c9b2e", @ANYRES8=r1], 0x50) (async) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x3000203b}) r4 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x2, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x7) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x200}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r10}, 0x18) (async) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000002c0)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffff1f}, 0x18) (async) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f00000004c0)) (async) sendmmsg(r7, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000300)={0x4467f44f, "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"}) 524.510689ms ago: executing program 2 (id=1029): inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e61afb9fdd672bad09dfb6bc7699c74e891a0c70000000000000000000000000000000008000240000000000e0001004973797a32000000001c0000001100010000000000000000000100000a00"/176], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000440)="7800000018002507b9409b14ffff00000204be04020506050e020409430008000400790000000000000052164cbf0568d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a005a0a2a1ce000e200c523eb6ed538f2", 0x78, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r7, 0x0, 0x7) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r9, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) 524.169789ms ago: executing program 5 (id=1030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x240088c0}, 0x20008800) 403.620242ms ago: executing program 2 (id=1031): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xf, 0x1, 0x10, 0x6, 0xea2, 0x6, 0x9, 0xb}}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_ACT={0x4}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000800)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r5, 0x0, 0x1000}, 0x18) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000095e000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) syz_clone(0xc0000, &(0x7f0000000bc0)="32260e7b37fd1daf7abcde2f2b1ffb3b3d34eb68e7940ae5ef74e8b3cf15dc0e803e6f875506e2c1f0230142ddf4a273c79e7275c6619f", 0x37, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000001480)="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") r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_WRITEV={0x2, 0x11, 0x4007, @fd_index=0x1, 0xf177, &(0x7f0000000a40)=[{&(0x7f0000000000)="2b7e5e94e5d842394fcfc53aead27f5c84efa0fd837b1560f0dd7034dffbe8a2981134a1a7d41f09f9f74e", 0x2b}, {&(0x7f0000000800)="f9c6d12f78ee8ea54d26576859689ed306f545834a76cbe70b750a12efbb2692f3197952a439136e9bc40a9a63d1874f7e6e66667e2260326c1d02ac5e2587b38d471bb7fa63c7a5d082d9b5ac6687ded47ec7c78896", 0x56}, {&(0x7f0000000880)="ddb0f331b1bb9ccc9dfc1125ec397d81a52d373a1f58665b3837af991f9a3d6cb184f625361a53cb12a6cc4881182792520822e0c8fda9d23b874a7dab10a2c3961d2ded96e99c5e66bf9ed969aae7933ae6f851cc8fc5f93edce18b7de43e7ee5b79f2f406d29526d269af67ab5fb728e4039608ddd4bba0684e902412fa240944d", 0x82}, {&(0x7f0000000940)="4e8a93d3f0ee3d931c186a666d7b0c32c242eeded846e69a83a3ba0e6331264786791cc87ebcacdc26fb2a9b042d703b359832321e6dba08988c3922d90b437cc0b6bedd8f8aa54e49c2872b35c37bc0f89f970c6f7dd857254233da77f62da58950064855c358af1a12004e63d6a4888204b654e91101f5c3dd928ec54b74d5bf16fa7dca7aa54204c128141fbf116b2a95016939f517b15f76329a879660458c76880e69916ee270f17d921162ce53547ad56c07df164fd2f0ede9c50e3e83ca6bd0c92936642468ba2e11d3d3e3142c32d472f85a35a0a1", 0xd9}, {&(0x7f0000000100)="3c26be86c2d31bfc3bc1b7692169c920235702bff4cb48255a9cfba0ba79c179a549168569f9b2479fec82535ab89769953481f5", 0x34}], 0x5, 0x14, 0x0, {0x1, r11}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 402.704482ms ago: executing program 5 (id=1042): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdir(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a0500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) statfs(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = gettid() socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 297.229214ms ago: executing program 5 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) timer_create(0x7, 0x0, &(0x7f0000000940)=0x0) timer_gettime(r3, &(0x7f0000000d40)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040003a9c6890000ff0f17000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") 296.712454ms ago: executing program 4 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7804, 0x8004, {"910a400c9d00010000000000000000fc"}, 0x5, 0x7, 0x2000000000003}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="40100000", @ANYRES16=r5, @ANYBLOB="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"], 0x1040}}, 0x0) (fail_nth: 1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000380)={r7, 0x7}, &(0x7f0000000400)=0x8) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) 1.271099ms ago: executing program 4 (id=1035): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 0s ago: executing program 4 (id=1036): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@usrjquota}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAiIiIcdOwFS0IBAogAJiSaUxnaikEuMYiORKAIHoVCiSPSIEom/gAoaBFRItNCjSBFKQ6A6tL7d3CN359fZC9zvJ609szPrmc+zcze7exfAwBrLfiQRuyPi14gYqWdbK4zVf926eXnmr5uXZ5Ko1d76I1mu9+fNyzNF1eK4XXnmSBqRfpLEwQ7tLly8dHa6Wp27kOcnFs+9N7Fw8dKzZ85Nn547PXd+6sSJ48cmX3h+6rm+xHlP1tcDH84f2v/a29femDl57Z0fv06K+Nvi6JOxXoVP1Gp9bq5ce5rSyVCJHWFNKhGRDdfw8vwfiUo0Bm8kXv241M4Bm6qW61K8VAP+x5IouwdAOYo3+uz6t9i2bvVRvhsv1S+Asrhv5Vu9ZCjSvM5w2/VtP41FxMmlv7/ItljxPoQLawBg477N1j/PdFr/pXF/U72782dDo/mzlL0RcW9E7IuI+yKW6z4QEQ+usf22hyTbI6Jt/ZNeX19kq5Ot/17Mn221rv+K1V+MVvLcnuX4h5NTZ6pzR/P/yZEY3p7lJ3u08d0rv3zWrax5/ZdtWfvFWjDvx/Wh7a3HzE4vTm8k5mY3rkQcGOoUf3J7tZlExP6IOLDONs489dWhbmUrx99DH5bDtS8jnqyP/1K0xV9Iej+fnLgrqnNHJ4qz4k4//Xz1zW7tbyj+PsjGf2fH8/92/KNJ8/PahbW3cfW3T7te04yv6/xv7NiW//5genHxwmTEtuT1eqeb9081ji3yRf0s/iOHO8//vdH4TxyMiOwkfigiHo6IR/KxezQiHouIwz3i/+Hlx9/tVvZvGP/ZtvEfba3SNv6NxLZo39M5UTn7/Tetf7GRXN3r3/HaSNPhvV7/ivNhNf1a39kMAAAA/z1pROyOJB2/nU7T8fH6Z/j3xc60Or+w+PSp+ffPz9a/IzAaw2lxp2uk6X7oZH5ZX+Sn2vLH8vvGn1d2LOfHZ+ars2UHDwNuV6f5X6mX/V4pu3fApvOxMhhc5j8MLvMfBpf5D4Orw/zfUUY/gK3X6f3/oxL6AWy9tvnvsR8MENf/MLjMfxhczfM/KbEfwJZa2BErf0leQuKORKQ961zZeBPFOboF4SSbPAt2b0qf8yncWpQs1Xev5Q/WOhSV9IIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQZ/8EAAD//xL/3co=") (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async, rerun: 32) accept4$unix(r6, 0x0, 0x0, 0x0) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) syz_open_dev$MSR(0x0, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002180)=0x0) (rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0}, &(0x7f0000002200)=0xc) (async) r12 = getgid() getresgid(&(0x7f0000002240)=0x0, &(0x7f0000002280), &(0x7f00000022c0)=0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) sendmmsg$unix(r8, &(0x7f00000037c0)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="058fd23c8c85dde93508a2bc0c3f1164a8dde86d5c0a419c936f99cef4359a71dfc555f9630a963b816e918c21ad9d43bd8189e988d82825b1919c4f33dcd938eed2cba2367e12e0c921db05564c5dd69a16a053fe283244a04b7f0ccc631fb91170f486b0832bbed89976f76ece119347ac311957a994ee1c00afabdf00a9b86dc4457d70fb1fa35c2596e266c79c585323dfd925517da20ca9d7abb964e92caf3caa2a4a6ad9a01757b6d9eb07d41a05b6ebc4c34ef2622b278e1fade7d201773e00148ed8132feaf094379f17d3d45293304608dcabe69a3da6867e43ebf9f0", 0xe1}, {&(0x7f0000000b00)="9b8c681619ead44cbdfae68ca35ead763355c3005b91a4be6ea6b00f92df8d4627b3b81bb7484cfbfd1a4a6ca77e3e1051ad5684e4fffde0addb5842de152a977d75b23aeac06c71e119c1703361336f3c708e9d77863a9e4c34fc3be0dd22d090398fb01a3477d1d9c10d1b34c3e07dedd93adcfc3ffb68e223d710139a8e3bf16c5bbad396e5e8a12b872edd27d678a9c162660bdef79bba6a35e096f852fb26dc28a1a7a5052db40030210750c7e5ecb0cf34fb8f0d23622973d95fe3a5ca6e48186b6f17f47310dd3316574b863cc6897247e42323a5ee8f5b848ea90dfd8b85d78448fab1", 0xe7}, {&(0x7f0000000c00)="4c9a8167b7652c601b4035ab05c1cc85ea2c8ab26b97861d0a2f7c47e9fd7c09f17294a710c04b600c530c9dd6999552f282f30a69e2838414796f3b8623286e175379168f18fbfa3e1c617a9a4cb6a45eab5161ce180c87d00539a51ff70a99c11994f1146cf220d816ae73d0d071f14905b8bd40fde572be5794aa4e0955dec0ba518b697d405d6abc0e8c62bd9767a213aa06006c03cbc36fe59ffc07a7f38880eefc08eb453308ef296d64d91d3b9c66f332213a8340fce3d59d6a184957adf3611fe2dad34e01d93243f4390a8e", 0xd0}, {&(0x7f0000000d00)="d3f3fe63fe919856d7956370c0ff0df0ff36a3f2a08cb8b6ef24c1d62f9644874cd136c0f1484ae15b1a9174ff22a331bfc364a62074f384f8a59005fb88b95fc6e427614c037766cb8e6c8969de3e50698c91e903bf17d853f3a3616535a1ae3ed25b2a250023abc277c2a16a6cf738dfce2d3175e63fa1fd5a330bfb708e927a2b1df10e2a290cf5b23a648979b03e81a8d7f4b86e6b43e02c9e3bf592b1ceead8b0f95a37f10082c08ecb577eec6365337353a8721ae83968bcb006ee529aded29131f97921055b8860d8e1d34a91e9175119594fa76fe27faae30035669518948661f86ef2af96df46f2dfaccfc827a25daa", 0xf4}], 0x4, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r9, r4]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r0, r4, r8]}}], 0x40, 0x44000}}, {{&(0x7f0000000600)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000e00)="7bf723575328d9f7d4fca9dfb99b83bae940cec11b988a265a91361d8f0a26abd1d73080fe0773eef195fc423d22f534fad9016e2f2fcdc70380947c8ced357b99e49d6de447ce676651fdeffba045dc5ab309f92f395202ad045795f1f549e0587d0c4f5fd411b77ebf4eb60363aa192ef4ffe7ebb32cdda8a72d682659dfaa241005ae438fd71b56e0bdd971f6cd48b7f76722e1556e5d902bc75967692af7cd8c6f16da9ca0a73e05368d24ab600124d9ea5e894d8fda8a43a51ac957aa8486a6390e1c", 0xc5}, {&(0x7f0000000f00)="50383be4648d082587cf6968731eb91991950d01e41a3a0231cf7e1f0ca87067ad359c2b5474e34054ab9b0dc12cd458e76b0fc8be0fb069815c183d84ceb476f50189c452a68d9848bbf3072cf193f2402baa9d41d97d5d8e3742a8f35f8dc330e9c9551263", 0x66}, {&(0x7f0000000f80)="cf68c8d6d69dd75fb1940a323d59", 0xe}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="5dc53dbe91e44be1a5d354bb99f0416d660864bfe86ffc8e0ac355da55cf829a02661cee40ce5236eee4e9053ee2835e23a6", 0x32}, {&(0x7f0000002000)="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", 0xfa}], 0x6, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r14}}}], 0x40, 0x8000}}, {{&(0x7f0000002340)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f00000023c0)="a09ce329a41c3a8a2b4efedac2e19fefc3e9eccf00484495d24de102f9b04a64c076c8ac19ca98614922bf4cde6b", 0x2e}, {&(0x7f0000002400)="a5a4a920e79da7fec5ed8a505c07937e26ecce106b70257d1d45223c77efbdb4d2beff5048d4283cc556059acf226b91fc09591fc100d0939b03d360a44fc6f8dbfad8bf5e426597e7be9d4bb812ea33631650a1635781809a8e5a7dde9ffba9084b497dd59b8c183863d9ab01b15c259a77732962140fd460395ecbe11a67132aa7c55081f6d1d7f4e5980e661955d3c5fd2fe46d601bc34b", 0x99}, {&(0x7f00000024c0)="ca9b25eb3d7835df877aa302519e540bbc86b5489aeb62461f7aac6dcd842936a8e91ec9ffd3e5abf66697ebf53de92c8ecdd70e4d88af82820a9b76c54e11614039ea0d0ea2607cee51a7c9aa114e7726395a985b2b4807e9cd88617a5122cafdcae27dc2051553516e789890fbfdd2bddd2e6b3a6472e8c2e39334519014c449fecb748c6754dab396db48531c9853a316c97e97d554ec7402a5089ffa24caf8a989c57f", 0xa5}, {&(0x7f0000002580)="e150db7c039094835f1df69f2c447743dbc6c41e4c078bd0a0e5bb73115095f4c392ac5b92e47d7f11c23dd8d05abdccad44c999aedac6ad2be4233c103e0393a3bcf80eeb2b0168262c7f7b2c07067599053d591b", 0x55}, {&(0x7f0000002600)="b0553401d86ad8c9a2ee0c532163d79c12f1653e6a97cf61276fa0c9a5828799a85486a6064027ef3b44accbf1cd4cd9a7d3e64d130c0a23e1421656d8d1463d44a300eff2504f3c4989bc1f0efcb2a4226c8df4455f1f17ca164d769b1bcb6e10809477a86a5ddfcb515c290752d666caaccfd879c71b19a1ba6f08f66938e5d530fa05914bbf5015716f19f6280a0f45789e6757b50b71143ec129462edf79f393dab36b66d69d3009d5f2eaa2f3d4145c6aff8e2c57cced439afd3b4f6eff5bcdb79c44d6645fe082c48a0cd657e8d73464e25fe0610164e810c9a0b421f46fce771096d0ab05a0d5818fefb37596cf967520456a5dc494734f9312be8ba6b7ed245a7604c765b8fe9c2518b8980c309b899717280b3c21236ea7e27ce1b63c0d9b6d89b314a5fdb387d92d7f2d894b047a201d796989034a180d0450992df40ee611f4d95d8b19b21a0a3b70e0ac579a77c6ed2235bc9d654d0893e8a17d404757ca6d7a3fa7916d199f14f02788f5c5c92f620bb17d5978bf2aae30897f50e976ceab5f72117f39a66445e096c7b2ad3f478d41cd425bb1e83467088a4b482f86ad0ab832fac2bc086c3a95a505b34d2b35dfb46ebf6ab86b4f430c6cf19ff7da2d05a380a83a65db2af839222bdd8a39f100b6be274374b6161b209ba1e6a3a8f049b4ba14973f3163e53808c40b394c0ee5ebbc1f0745de2189147d6d40585bf55d46c03f156ff05323a642eac4ae8c519eed47a22b7d1ce92ca38939f2eb0e9ae8ad1dcfcfcd7e018c5ffcf27879e66cc84680c2e9c74d35b4f32c586d6f418a5f210d0c45fc59043806b8c05a738a1318fb4ef690570b35578f8e91028b9b5030c5ebd7aaaab96e6c6b84b36fa585c1623cdc67163137bf219b8ad0dc7b6cd06f89fbecc10643b0f8fb0a3052363689dbb5825354968f7e368b1ddb6bb39d3298dd7e17cc17d0f6311aacacb7d524cb0d29cffc101033a3880604b58647c5d4a03c933a11c7e272a21a73379d6ecf53f420bc2262a96ed294311ef85bd790ca3cc007d498b28dad3e252fe01a850bffa65425cf5359697891c4b2fb58e5ecb875bb88ec29dd38c8c37de992caaa58e921b412ae83af6d2ba391a69db87b4ad127034d2824f00829bf848c616d56ce6d7a4aae82b8df961fb6ad546bc1f0897d3c734b20976b563de92989fcefe28f87f5bde5a18095906bc3c4ac70ad7fcd0017e06007f52d7c23eeef9cbf2c8b23b3783c020cfb19519beb4e21c0c10a130f7577e2d91b9e0b643e4f24d5d5569c894ad913ff37da1348019228fe3f39472a6338409c066ea1cbef16387575e37a8a54ce9a1c7c192063dfd297edf40fa092464dd1606a2ab04794b08ef97b4f7627e051b9edb2d1f290a32c99c320143d7ab267323c5b090eb3b22af9d1a59a1f1e0c0a03628581e7f4b6c970770fa03315b8d94ee88c5bc5a40e37ca6649831acb6ce47bf3a4942c7cd5306e8889a4d75d8da15d4d135fda6665c5bd8328f16d4b88e62b909cdb0723495b26730415471721355f46c1ea437c58bf725fa40efe6f68f8925366758ce0516696c9544bd7eccdb6fcfb1170e9b41205af701e3ad16cee5f828c851216a9c777298eab3a260c60960cd1da7a1bddfbe7419a3aa777db56f639cca168d4bf586aa8924416e1fbab57e659fb91de4c4eb9528272c94c6025b12fd1f412a3f85a7ea83a011133ab5040a644c635888ccf638607937ad103ce22b4e892a2e9d2e31e806b74e720e6b1db3d7bf3f682ea8bae5decfa579e192f35bb86d2eb87443fd005648543cdb8fb8a22cf7a5577190f6275284d346b403f87d55ff9bfff4eaa12ed50ae0e58ba08ff1e8dbb8707cf9648670cf758f8cc7e49c3bff782316e9784be195bb8bca90b8fbbc44329894649783b40f91015ee6c4704b29f2b62d5410abbca4591c6732bf1e4bb309e3e505e3bf96074ad34f9a1e06480aa7e9c8c46b9a367ec680bf8703b87a77d8d3bd62e54d996e579a8a1560f18c4b07099d18b4f53028ac424b34ea216d137f8a5bde8e2669774d39dd7b890f866ef8cfca210fb2900023fca644086b924fe713592e8f73dd4c625c4ace7524da15e18d173dbf0244812a689467ab1fcd0869d06272108f355c210716abfc5da7555073e837cb4ad9c254282015270d2c1f473b6775b77457b47ffcd228695a69fe99ab957eca7506a37eec6b28e10e84089a90794ff380b68a02536380bc2ecd05ead18aafc2f0c882035d2aa33b1861fc80535e498905564b37ad7c8b40ff140452a1e400fbaf04be02c25cdc7ba30910e65cf710c0b71044e605c3258a6e489505d1b1380cdc482054c0bc19bfe2e78df85e40152033dcb5959b394df9bcc238384b1843154c7deab2c90cad6b555daaef4ecf190fdaff81089338dabe1f57d46c3d9f7247eacbbe24bc06b8db58c09d7d8410fa7bf6b483bd3acb8c3c2123f36151bfd0a1185e90fec312542f424271b79f6cc5b1c8b5ef08982df3cb47d9e385a5c5f91c99a386ca30b1dc1a51ed60634538c3ccf371f6672a2a8b38141c7d3986c11f503b2468c7aaa1e622cda6cd5712789bb72aee3e408f295d543f87be2727bebb27fa37f50c00be814493de0c6e198a359591b07e0be4e02e0ef37590a504a74b49ef5daa78132d253d6de6b96bd442ea384e23e7f4c6d64559d1a29500eb47983fa5c1f13a61a643176349f10572db15be8d9bbdafd188a0b5ebe25fa11f37c86101c98841603bf239a5f0f4d0dcafafd6d94c0eec11afd11db68f50511c92efc4bc7f489d6fd5e7f909d261c841437331ddf20681745614cf1353688746587c84b2758b047cc1cf44b6a90cc71ec4952e3a86a63b78d88355bb8d498b54b811baf1e1623153dd0815385b496de184541f8610f0b097bc4aeb90c0d6303d6638766d0395e30d6e32e6ca53f38092b550833d8786b50279270b0ce3985a6e5027adfbbc1896e4f6c46d2137f19e99a9cf3a6d56690c22acaadefbf93e70564155806f5414962bfa072b3b02ccdc1c7a6ecfa193dda74a3b968f976c806501430d5f3ef1a2d46fffb753edda3d257a2b3b28e63fd4449df26261e47934d280229e16870faf0aca84c3b927e862b2ff58c0ddb74d0125bdfb7ce14dba43a6c4dd9b5eeb875ed138ee1b7426c775ad482d6396d501554e5085505641aee8437989404f79fe56c73d9e05f7a6915bc6d76b78b051680b163dbabb7c16fed147df61d9d1ac15397f482643e8b3567c985a6dc7ecaa72f9f56a3e9b277d1cc786fd63cc3edb3445acb74097a3ac3e3e6a4137e22f3ae0b0d0be99aa641abdb55530735668e1de7659d76698694d8eab27b73411f053eab4b0b4e8c20c3704cda76482c668ede41099be0ec70ccc6c6c73a92a1e48f255bb3eb0a7322b37a84c539d2bda99e41a5b8849305e643664b392dd9cfa284d6d4231fdbd43e6dbac0164e425533560eb4be4f32f47064fe0e74e5cc5b83fd6f50b93fae883b73eb89d776a4aa2a02b61c51452e328ead8071617e9bf05e982c38c25a78e47ed16bbd850e4e06d0968c63bc6f4a3acb39042b45b1e8f47cdeb279e285fee53e1da06426afe9fcc8a79e9b97b422fe4517d0bdfade78f38b32daaf15b1f1933fa7803b7892b3a22846bf30069cb5227a4f9eed518ca6095aa30e1c5b9f2dc0faaf714c584b2bdbc9494b5f52d927dee510d1784d419d59180ff8809ff326abc43f69709ffefc8ef03e1b61c188dcd0e0a678072af2bb8a24c79dea4b85608ea67cd929ca9e9e1908b4c9848c8acf38dfc7f3b38ef08fdbf08216adf6df1703b6b47cebf21f3053af5e456042728b22a651edd3aab0eb36fc09bc9e76e91adfe32ff7e613d8fa2562793fb8b378e0213ceca0b84a9f1c90a544409091f4fe962b047586c175ae70e34db2597ec155ed225c753e1528c100953393d0ad9c96705812cd515448dbca5cedd8a3268ad13977bda4cc931b3cf7d73d78b1f7766bf11220bb0a2a47b82de143a7c8c3a393a8d6ab1eda10fb68ed0f785b14150ff1bb86943d2224e920ab00f9887a90357f8c3b64c52db9ce03b6e1e0cafdc22d84df9f55fee6f6435f3a73d9638f7421576436faa633f546da7b59976dbbb864718f47b172f076012e7f78d80bf8b6bf8edac86960bfcedd1cc00db6c0d78f7524757a8ba348079526f6690d6a7c4b6c489d988e9f2e6765604f58ed0a906c90fface5179dc74af3dc51c5da4ac63a57d58aaba9f5be20a57adfb587d5f2a4bdeb02d4b67066f21d5cc62ee6eaf81424fae4d99250afb49b4551f4ba21d5795996945bdc1d8c8c577ef556a3e75220df9006d55721413621a35fc7cc3e91e3d5130cad63467c4238c666f98e59caf625a8fa9e93921d89c53816c50e7b69223c87127a4169a4e95e0139849cdc18836049bdf58ac083d40ddd9d89b3736bff8e1bbeaadbc8ebdca2cacb5e807c61b1e52bcaf66f12f9c46e36ea6c4e89784165b5960cb7351fc5a9e802c118c874586e86ecdfe69ec37c1d0a882386f46798e380898a39b5b80bf9b8e60a591512b0b7530a854b04f08aa4ef3e05618d096f71180ddd02ff3f2c63f4518e744fcb194960df525d1ec8b9057d011962c5964b9ae57b0685d3c05dbebf82947f0c617d73f6cbcac76afe5681f84d484594e0d72b28b199557d43cee4eef4af3a1a6448047b3de649b0c73c788e7afe13425e3b3abf7435cc3d341a314606d80785f10ac4f64ff84d1c901b5fc96bab3a1eebbff4bcd4ff1419549337361b647868f92b7829aa6ef0807ecdab5f966c186d8ab419d0a2d0c2db14cbafd73a8b62579af5d1c8937c4ea85c071899a209d73173d81dd73eebb27a3c407d9c182e14164d1bd40e8b422a91451b2e96f87b1d2cdd834a290c801d08c2ac9dc80b82ac01849d1870bced4f666e870eb09ac6d556d83f3596f25f8431fa33eade621868f1022bc6d64f088335f48507df4de8fb30082f8bd8a891c54e95c9e884f5d9255a7c56d975ade56745a19d7a7fcc3854569cd7a1e970576e1071947c77615ab2c1df4d20c9c03f3884e4a82f3447e2b9cb87f448b161548410fabb19ca535549d97db510c56b1d2b8b5eda9410fb8eadf929aef6c6cb0669b30ead7725f7529532330fbad896664fc3ceefd8892ad5864de153c10c85868c7c0cd64ba0b63a546a8d6a441fa5faf10312356f0e9f06caf33b7009dd75f6c2caea94cd7f933163a12798801775d17ed0030178936227a97e3989a3e688cdaccf7ba41c671a945735b03dcd071e9741a0dcd08a3b52bff6170113b9d71a98b63a431152d90f1a423708be6bff8d62717df6696ad54bb1a2e03267e15de2063da3fb9d6e09a066b16f8876b577b78e2f88cbb2d471a87ccd8df35fd762ffe69b1f509b56608a264e6606532bac6fbc5b5e9b1683bb7cc3e8bc3151662da6c33e77b1489d80c2bc3185e4d0552704bf734ccaff381ae3b61adf24189a8cccf1f1ebe81d9916a47a9a0e769da5c2919370680a90a6c46e3de675095f376b71ece49291b2decd3965f0ea96e6cffef2ce3653b88564c59ec97db2a5c829b8557237261d437c75e7a68bbbfeff6758d6c21253e64a5d382acd4f4e601b5454168aebd2633b3794f8da90a3a9b1b34d55794d2a9c2603b3d43202e1e9c90e6fd8e173556c8ca7c4c6b517900cd2db4c53694013415babf5e3e64bb60f2595a9eb3fdcaebe730683035fc8effc07766da00d9883be29346684bd938ef3d2a0c2f8d597f235687be0f3547d522b", 0x1000}, {&(0x7f0000003600)="504f4c0aa65f4cf027607c27a63bea1d0bf3ee569285f4e6d4e5b5eae8f828b5362af933fcb827eb69beec39b46fa9feb9c90d0816b2842ef309109635fe8d477133369289629d664ff8d136e618861519ffa4e2fc8708081f21ffc6c32a29f8aaaa70c83bc0e725aff23077dfde98305376df310ed24fb81ae7a2fa68b58d95d681fd9500b254780494a0b56af4c6325f4076", 0x93}, {&(0x7f00000036c0)="6f558ac0ff835d1af4ebba664db9c23cc4626a7e2872f76bbd38d4e1f55a00e8c6b9ee299c8f4c2ee9b469c9e4858bdc9b47cb90a9520115af504216342ba80fdb3e264688724e903d0b7b6910e0af360768abaddd01789feeff3a4cdc", 0x5d}], 0x7, &(0x7f0000003880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r13}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r2, r2]}}, @rights={{0x24, 0x1, 0x1, [r4, r7, r15, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r13}}}], 0xa8}}], 0x3, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 123.589157][ T6485] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.737: mark_inode_dirty error [ 123.600785][ T6509] SELinux: failed to load policy [ 123.706451][ T6485] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.737: corrupted inode contents [ 123.743764][ T6485] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 123.752690][ T6485] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.737: corrupted inode contents [ 123.766472][ T6485] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.737: mark_inode_dirty error [ 123.778062][ T6485] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 123.788950][ T6485] EXT4-fs (loop1): 1 truncate cleaned up [ 123.795121][ T6485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.809262][ T6485] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.872211][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.888319][ T6515] FAULT_INJECTION: forcing a failure. [ 123.888319][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 123.901050][ T6515] CPU: 1 UID: 0 PID: 6515 Comm: syz.5.745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.901083][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.901098][ T6515] Call Trace: [ 123.901107][ T6515] [ 123.901117][ T6515] __dump_stack+0x1d/0x30 [ 123.901142][ T6515] dump_stack_lvl+0xe8/0x140 [ 123.901240][ T6515] dump_stack+0x15/0x1b [ 123.901276][ T6515] should_fail_ex+0x265/0x280 [ 123.901308][ T6515] ? rfkill_fop_open+0x3f/0x440 [ 123.901330][ T6515] should_failslab+0x8c/0xb0 [ 123.901391][ T6515] __kmalloc_cache_noprof+0x4c/0x320 [ 123.901431][ T6515] ? __pfx_rfkill_fop_open+0x10/0x10 [ 123.901472][ T6515] rfkill_fop_open+0x3f/0x440 [ 123.901502][ T6515] ? __pfx_rfkill_fop_open+0x10/0x10 [ 123.901528][ T6515] misc_open+0x1d6/0x200 [ 123.901640][ T6515] chrdev_open+0x2e8/0x3a0 [ 123.901676][ T6515] do_dentry_open+0x649/0xa20 [ 123.901793][ T6515] ? __pfx_chrdev_open+0x10/0x10 [ 123.901831][ T6515] vfs_open+0x37/0x1e0 [ 123.901892][ T6515] path_openat+0x1c5e/0x2170 [ 123.902043][ T6515] do_filp_open+0x109/0x230 [ 123.902075][ T6515] do_sys_openat2+0xa6/0x110 [ 123.902114][ T6515] __x64_sys_openat+0xf2/0x120 [ 123.902187][ T6515] x64_sys_call+0x2e9c/0x2ff0 [ 123.902215][ T6515] do_syscall_64+0xd2/0x200 [ 123.902273][ T6515] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.902401][ T6515] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.902437][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.902493][ T6515] RIP: 0033:0x7f4225caec29 [ 123.902509][ T6515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.902527][ T6515] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.902546][ T6515] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 123.902605][ T6515] RDX: 0000000000044040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 123.902695][ T6515] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 123.902707][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.902719][ T6515] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 123.902740][ T6515] [ 124.132999][ T6518] FAULT_INJECTION: forcing a failure. [ 124.132999][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 124.145711][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.1.747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.145749][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.145765][ T6518] Call Trace: [ 124.145774][ T6518] [ 124.145783][ T6518] __dump_stack+0x1d/0x30 [ 124.145809][ T6518] dump_stack_lvl+0xe8/0x140 [ 124.145965][ T6518] dump_stack+0x15/0x1b [ 124.145988][ T6518] should_fail_ex+0x265/0x280 [ 124.146094][ T6518] should_failslab+0x8c/0xb0 [ 124.146128][ T6518] kmem_cache_alloc_noprof+0x50/0x310 [ 124.146164][ T6518] ? skb_clone+0x151/0x1f0 [ 124.146283][ T6518] skb_clone+0x151/0x1f0 [ 124.146319][ T6518] __netlink_deliver_tap+0x2c9/0x500 [ 124.146352][ T6518] netlink_unicast+0x66b/0x690 [ 124.146376][ T6518] netlink_sendmsg+0x58b/0x6b0 [ 124.146428][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.146464][ T6518] __sock_sendmsg+0x142/0x180 [ 124.146508][ T6518] ____sys_sendmsg+0x31e/0x4e0 [ 124.146607][ T6518] ___sys_sendmsg+0x17b/0x1d0 [ 124.146728][ T6518] __x64_sys_sendmsg+0xd4/0x160 [ 124.146784][ T6518] x64_sys_call+0x191e/0x2ff0 [ 124.146875][ T6518] do_syscall_64+0xd2/0x200 [ 124.146918][ T6518] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.146951][ T6518] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.146991][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.147150][ T6518] RIP: 0033:0x7fbcdd43ec29 [ 124.147171][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.147194][ T6518] RSP: 002b:00007fbcdbea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.147218][ T6518] RAX: ffffffffffffffda RBX: 00007fbcdd685fa0 RCX: 00007fbcdd43ec29 [ 124.147235][ T6518] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 124.147251][ T6518] RBP: 00007fbcdbea7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.147268][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.147353][ T6518] R13: 00007fbcdd686038 R14: 00007fbcdd685fa0 R15: 00007ffdb2768f78 [ 124.147380][ T6518] [ 124.457740][ T6530] FAULT_INJECTION: forcing a failure. [ 124.457740][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 124.470595][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.2.753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.470629][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.470644][ T6530] Call Trace: [ 124.470650][ T6530] [ 124.470657][ T6530] __dump_stack+0x1d/0x30 [ 124.470750][ T6530] dump_stack_lvl+0xe8/0x140 [ 124.470769][ T6530] dump_stack+0x15/0x1b [ 124.470785][ T6530] should_fail_ex+0x265/0x280 [ 124.470874][ T6530] should_failslab+0x8c/0xb0 [ 124.470899][ T6530] kmem_cache_alloc_noprof+0x50/0x310 [ 124.470981][ T6530] ? radix_tree_node_alloc+0x8a/0x1f0 [ 124.471021][ T6530] radix_tree_node_alloc+0x8a/0x1f0 [ 124.471060][ T6530] idr_get_free+0x1fa/0x550 [ 124.471097][ T6530] idr_alloc_u32+0xca/0x180 [ 124.471175][ T6530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 124.471196][ T6530] idr_alloc+0x6e/0xd0 [ 124.471227][ T6530] loop_add+0x145/0x590 [ 124.471315][ T6530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 124.471339][ T6530] loop_control_ioctl+0xd0/0x3f0 [ 124.471363][ T6530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 124.471385][ T6530] __se_sys_ioctl+0xce/0x140 [ 124.471428][ T6530] __x64_sys_ioctl+0x43/0x50 [ 124.471450][ T6530] x64_sys_call+0x1816/0x2ff0 [ 124.471474][ T6530] do_syscall_64+0xd2/0x200 [ 124.471515][ T6530] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.471598][ T6530] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.471636][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.471664][ T6530] RIP: 0033:0x7faf43f7ec29 [ 124.471683][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.471733][ T6530] RSP: 002b:00007faf429df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.471756][ T6530] RAX: ffffffffffffffda RBX: 00007faf441c5fa0 RCX: 00007faf43f7ec29 [ 124.471770][ T6530] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 124.471785][ T6530] RBP: 00007faf429df090 R08: 0000000000000000 R09: 0000000000000000 [ 124.471800][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.471814][ T6530] R13: 00007faf441c6038 R14: 00007faf441c5fa0 R15: 00007ffeaccc8708 [ 124.471836][ T6530] [ 124.720339][ T6535] FAULT_INJECTION: forcing a failure. [ 124.720339][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.733678][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.1.754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.733712][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.733725][ T6535] Call Trace: [ 124.733732][ T6535] [ 124.733740][ T6535] __dump_stack+0x1d/0x30 [ 124.733764][ T6535] dump_stack_lvl+0xe8/0x140 [ 124.733786][ T6535] dump_stack+0x15/0x1b [ 124.733804][ T6535] should_fail_ex+0x265/0x280 [ 124.733882][ T6535] should_fail+0xb/0x20 [ 124.733906][ T6535] should_fail_usercopy+0x1a/0x20 [ 124.733934][ T6535] _copy_from_user+0x1c/0xb0 [ 124.734049][ T6535] ____sys_sendmsg+0x1c5/0x4e0 [ 124.734115][ T6535] ___sys_sendmsg+0x17b/0x1d0 [ 124.734164][ T6535] __x64_sys_sendmsg+0xd4/0x160 [ 124.734203][ T6535] x64_sys_call+0x191e/0x2ff0 [ 124.734249][ T6535] do_syscall_64+0xd2/0x200 [ 124.734282][ T6535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.734367][ T6535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.734408][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.734441][ T6535] RIP: 0033:0x7fbcdd43ec29 [ 124.734467][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.734489][ T6535] RSP: 002b:00007fbcdbea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.734511][ T6535] RAX: ffffffffffffffda RBX: 00007fbcdd685fa0 RCX: 00007fbcdd43ec29 [ 124.734526][ T6535] RDX: 0000000000000080 RSI: 0000200000000700 RDI: 0000000000000005 [ 124.734590][ T6535] RBP: 00007fbcdbea7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.734601][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.734614][ T6535] R13: 00007fbcdd686038 R14: 00007fbcdd685fa0 R15: 00007ffdb2768f78 [ 124.734636][ T6535] [ 124.993044][ T6549] FAULT_INJECTION: forcing a failure. [ 124.993044][ T6549] name failslab, interval 1, probability 0, space 0, times 0 [ 124.996013][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 125.005782][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.1.759 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.005820][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.005838][ T6549] Call Trace: [ 125.005854][ T6549] [ 125.005885][ T6549] __dump_stack+0x1d/0x30 [ 125.005914][ T6549] dump_stack_lvl+0xe8/0x140 [ 125.005944][ T6549] dump_stack+0x15/0x1b [ 125.006000][ T6549] should_fail_ex+0x265/0x280 [ 125.006034][ T6549] ? rfkill_fop_open+0x3f/0x440 [ 125.006064][ T6549] should_failslab+0x8c/0xb0 [ 125.006100][ T6549] __kmalloc_cache_noprof+0x4c/0x320 [ 125.006145][ T6549] ? __pfx_rfkill_fop_open+0x10/0x10 [ 125.006206][ T6549] rfkill_fop_open+0x3f/0x440 [ 125.006237][ T6549] ? __pfx_rfkill_fop_open+0x10/0x10 [ 125.006266][ T6549] misc_open+0x1d6/0x200 [ 125.006305][ T6549] chrdev_open+0x2e8/0x3a0 [ 125.006405][ T6549] do_dentry_open+0x649/0xa20 [ 125.006447][ T6549] ? __pfx_chrdev_open+0x10/0x10 [ 125.006530][ T6549] vfs_open+0x37/0x1e0 [ 125.006631][ T6549] path_openat+0x1c5e/0x2170 [ 125.006673][ T6549] do_filp_open+0x109/0x230 [ 125.006713][ T6549] do_sys_openat2+0xa6/0x110 [ 125.006824][ T6549] __x64_sys_openat+0xf2/0x120 [ 125.006871][ T6549] x64_sys_call+0x2e9c/0x2ff0 [ 125.006953][ T6549] do_syscall_64+0xd2/0x200 [ 125.006998][ T6549] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.007051][ T6549] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.007094][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.007124][ T6549] RIP: 0033:0x7fbcdd43ec29 [ 125.007227][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.007252][ T6549] RSP: 002b:00007fbcdbea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.007279][ T6549] RAX: ffffffffffffffda RBX: 00007fbcdd685fa0 RCX: 00007fbcdd43ec29 [ 125.007375][ T6549] RDX: 0000000000044040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 125.007392][ T6549] RBP: 00007fbcdbea7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.007409][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.007425][ T6549] R13: 00007fbcdd686038 R14: 00007fbcdd685fa0 R15: 00007ffdb2768f78 [ 125.007451][ T6549] [ 125.059201][ T6545] loop5: detected capacity change from 0 to 512 [ 125.093594][ T6551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6551 comm=syz.1.760 [ 125.160877][ T6557] netlink: 56 bytes leftover after parsing attributes in process `syz.1.760'. [ 125.163558][ T6555] FAULT_INJECTION: forcing a failure. [ 125.163558][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 125.274458][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.3.762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.274489][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.274505][ T6555] Call Trace: [ 125.274512][ T6555] [ 125.274520][ T6555] __dump_stack+0x1d/0x30 [ 125.274540][ T6555] dump_stack_lvl+0xe8/0x140 [ 125.274634][ T6555] dump_stack+0x15/0x1b [ 125.274653][ T6555] should_fail_ex+0x265/0x280 [ 125.274682][ T6555] should_failslab+0x8c/0xb0 [ 125.274711][ T6555] kmem_cache_alloc_noprof+0x50/0x310 [ 125.274744][ T6555] ? getname_kernel+0x3c/0x1f0 [ 125.274841][ T6555] getname_kernel+0x3c/0x1f0 [ 125.274880][ T6555] kern_path+0x23/0x130 [ 125.274916][ T6555] create_local_trace_uprobe+0x53/0x2c0 [ 125.274941][ T6555] perf_uprobe_init+0xc0/0x150 [ 125.275011][ T6555] perf_uprobe_event_init+0xc4/0x140 [ 125.275045][ T6555] perf_try_init_event+0xd9/0x540 [ 125.275080][ T6555] ? perf_event_alloc+0xb1c/0x1740 [ 125.275129][ T6555] perf_event_alloc+0xb27/0x1740 [ 125.275237][ T6555] __se_sys_perf_event_open+0x615/0x11c0 [ 125.275287][ T6555] __x64_sys_perf_event_open+0x67/0x80 [ 125.275326][ T6555] x64_sys_call+0x7bd/0x2ff0 [ 125.275374][ T6555] do_syscall_64+0xd2/0x200 [ 125.275411][ T6555] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.275470][ T6555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.275520][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.275547][ T6555] RIP: 0033:0x7fad85f8ec29 [ 125.275566][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.275589][ T6555] RSP: 002b:00007fad849ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 125.275608][ T6555] RAX: ffffffffffffffda RBX: 00007fad861d5fa0 RCX: 00007fad85f8ec29 [ 125.275631][ T6555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 125.275646][ T6555] RBP: 00007fad849ef090 R08: 0000000000000000 R09: 0000000000000000 [ 125.275662][ T6555] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 125.275742][ T6555] R13: 00007fad861d6038 R14: 00007fad861d5fa0 R15: 00007fff4a7fb6b8 [ 125.275762][ T6555] [ 125.322581][ T6545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.323407][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.340211][ T6545] netlink: 'syz.5.756': attribute type 21 has an invalid length. [ 125.340242][ T6545] netlink: 156 bytes leftover after parsing attributes in process `syz.5.756'. [ 125.434904][ T6570] netlink: 100 bytes leftover after parsing attributes in process `syz.5.767'. [ 125.579127][ T6573] tipc: Enabled bearer , priority 26 [ 125.592067][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 125.642999][ T6588] FAULT_INJECTION: forcing a failure. [ 125.642999][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 125.655776][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.4.773 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.655846][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.655862][ T6588] Call Trace: [ 125.655869][ T6588] [ 125.655877][ T6588] __dump_stack+0x1d/0x30 [ 125.655898][ T6588] dump_stack_lvl+0xe8/0x140 [ 125.655929][ T6588] dump_stack+0x15/0x1b [ 125.656014][ T6588] should_fail_ex+0x265/0x280 [ 125.656043][ T6588] should_failslab+0x8c/0xb0 [ 125.656074][ T6588] __kmalloc_cache_node_noprof+0x54/0x320 [ 125.656108][ T6588] ? __get_vm_area_node+0x106/0x1d0 [ 125.656147][ T6588] __get_vm_area_node+0x106/0x1d0 [ 125.656221][ T6588] __vmalloc_node_range_noprof+0x273/0xe00 [ 125.656264][ T6588] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.656391][ T6588] ? avc_has_perm_noaudit+0x1b1/0x200 [ 125.656428][ T6588] ? cred_has_capability+0x210/0x280 [ 125.656457][ T6588] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.656548][ T6588] __vmalloc_noprof+0x83/0xc0 [ 125.656579][ T6588] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.656613][ T6588] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.656741][ T6588] ? bpf_prog_alloc+0x2a/0x150 [ 125.656777][ T6588] bpf_prog_alloc+0x3c/0x150 [ 125.656807][ T6588] bpf_prog_load+0x514/0x1070 [ 125.656845][ T6588] ? security_bpf+0x2b/0x90 [ 125.656867][ T6588] __sys_bpf+0x462/0x7b0 [ 125.656900][ T6588] __x64_sys_bpf+0x41/0x50 [ 125.656924][ T6588] x64_sys_call+0x2aea/0x2ff0 [ 125.656947][ T6588] do_syscall_64+0xd2/0x200 [ 125.657055][ T6588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.657080][ T6588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.657291][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.657319][ T6588] RIP: 0033:0x7fe0c9c2ec29 [ 125.657337][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.657420][ T6588] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.657444][ T6588] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 125.657456][ T6588] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 125.657468][ T6588] RBP: 00007fe0c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.657479][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.657490][ T6588] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 125.657509][ T6588] [ 125.657539][ T6588] syz.4.773: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 125.757586][ T6593] netlink: 'syz.3.771': attribute type 4 has an invalid length. [ 125.761138][ T6588] ,cpuset=/,mems_allowed=0 [ 125.922597][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.4.773 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.922627][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.922653][ T6588] Call Trace: [ 125.922660][ T6588] [ 125.922728][ T6588] __dump_stack+0x1d/0x30 [ 125.922755][ T6588] dump_stack_lvl+0xe8/0x140 [ 125.922780][ T6588] dump_stack+0x15/0x1b [ 125.922800][ T6588] warn_alloc+0x12b/0x1a0 [ 125.922849][ T6588] __vmalloc_node_range_noprof+0x297/0xe00 [ 125.922932][ T6588] ? avc_has_perm_noaudit+0x1b1/0x200 [ 125.922970][ T6588] ? cred_has_capability+0x210/0x280 [ 125.923040][ T6588] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.923082][ T6588] __vmalloc_noprof+0x83/0xc0 [ 125.923133][ T6588] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.923200][ T6588] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 125.923249][ T6588] ? bpf_prog_alloc+0x2a/0x150 [ 125.923284][ T6588] bpf_prog_alloc+0x3c/0x150 [ 125.923334][ T6588] bpf_prog_load+0x514/0x1070 [ 125.923391][ T6588] ? security_bpf+0x2b/0x90 [ 125.923415][ T6588] __sys_bpf+0x462/0x7b0 [ 125.923478][ T6588] __x64_sys_bpf+0x41/0x50 [ 125.923508][ T6588] x64_sys_call+0x2aea/0x2ff0 [ 125.923536][ T6588] do_syscall_64+0xd2/0x200 [ 125.923577][ T6588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.923661][ T6588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.923699][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.923724][ T6588] RIP: 0033:0x7fe0c9c2ec29 [ 125.923740][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.923769][ T6588] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.923793][ T6588] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 125.923809][ T6588] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 125.923876][ T6588] RBP: 00007fe0c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.923893][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.923905][ T6588] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 125.923924][ T6588] [ 125.923943][ T6588] Mem-Info: [ 126.133899][ T6595] loop2: detected capacity change from 0 to 512 [ 126.135721][ T6588] active_anon:25770 inactive_anon:0 isolated_anon:0 [ 126.135721][ T6588] active_file:19798 inactive_file:3128 isolated_file:0 [ 126.135721][ T6588] unevictable:0 dirty:319 writeback:0 [ 126.135721][ T6588] slab_reclaimable:3452 slab_unreclaimable:28349 [ 126.135721][ T6588] mapped:29906 shmem:17641 pagetables:1690 [ 126.135721][ T6588] sec_pagetables:0 bounce:0 [ 126.135721][ T6588] kernel_misc_reclaimable:0 [ 126.135721][ T6588] free:1829170 free_pcp:34271 free_cma:0 [ 126.190294][ T6588] Node 0 active_anon:103080kB inactive_anon:0kB active_file:79192kB inactive_file:12512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119624kB dirty:1276kB writeback:0kB shmem:70564kB kernel_stack:3696kB pagetables:6760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.191689][ T6595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.217954][ T6588] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.218061][ T6588] lowmem_reserve[]: 0 2883 7862 7862 [ 126.218158][ T6588] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 126.218228][ T6588] lowmem_reserve[]: 0 0 4978 4978 [ 126.218295][ T6588] Node 0 Normal free:4352132kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103080kB inactive_anon:0kB active_file:79192kB inactive_file:12512kB unevictable:0kB writepending:1276kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:133444kB local_pcp:54864kB free_cma:0kB [ 126.218389][ T6588] lowmem_reserve[]: 0 0 0 0 [ 126.218416][ T6588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.218567][ T6588] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) [ 126.265646][ T6595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.291361][ T6588] 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 126.291501][ T6588] Node 0 Normal: 891*4kB (UME) 447*8kB (UME) 288*16kB (UME) 284*32kB (ME) 207*64kB (UME) 130*128kB (UME) 88*256kB (UM) 73*512kB (UME) 76*1024kB (UME) 37*2048kB (UM) 998*4096kB (UM) = 4352036kB [ 126.291869][ T6588] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 126.291885][ T6588] 40570 total pagecache pages [ 126.291894][ T6588] 10 pages in swap cache [ 126.291901][ T6588] Free swap = 124956kB [ 126.291907][ T6588] Total swap = 124996kB [ 126.291915][ T6588] 2097051 pages RAM [ 126.291923][ T6588] 0 pages HighMem/MovableOnly [ 126.291931][ T6588] 80446 pages reserved [ 126.382545][ T6599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6599 comm=syz.4.776 [ 126.410830][ T6595] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.500316][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.520910][ T6605] loop4: detected capacity change from 0 to 128 [ 126.566792][ T6605] FAT-fs (loop4): Directory bread(block 32) failed [ 126.596551][ T6614] netlink: 96 bytes leftover after parsing attributes in process `syz.1.783'. [ 126.596952][ T6605] FAT-fs (loop4): Directory bread(block 33) failed [ 126.605525][ T6614] netlink: 96 bytes leftover after parsing attributes in process `syz.1.783'. [ 126.654556][ T6605] FAT-fs (loop4): Directory bread(block 34) failed [ 126.665642][ T6605] FAT-fs (loop4): Directory bread(block 35) failed [ 126.672509][ T6605] FAT-fs (loop4): Directory bread(block 36) failed [ 126.679393][ T6619] FAULT_INJECTION: forcing a failure. [ 126.679393][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.693123][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.2.779 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.693151][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.693204][ T6619] Call Trace: [ 126.693212][ T6619] [ 126.693220][ T6619] __dump_stack+0x1d/0x30 [ 126.693243][ T6619] dump_stack_lvl+0xe8/0x140 [ 126.693293][ T6619] dump_stack+0x15/0x1b [ 126.693309][ T6619] should_fail_ex+0x265/0x280 [ 126.693400][ T6619] should_fail+0xb/0x20 [ 126.693420][ T6619] should_fail_usercopy+0x1a/0x20 [ 126.693447][ T6619] _copy_from_user+0x1c/0xb0 [ 126.693481][ T6619] ___sys_sendmsg+0xc1/0x1d0 [ 126.693567][ T6619] __x64_sys_sendmsg+0xd4/0x160 [ 126.693604][ T6619] x64_sys_call+0x191e/0x2ff0 [ 126.693629][ T6619] do_syscall_64+0xd2/0x200 [ 126.693668][ T6619] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.693711][ T6619] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.693744][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.693791][ T6619] RIP: 0033:0x7faf43f7ec29 [ 126.693809][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.693828][ T6619] RSP: 002b:00007faf429be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.693848][ T6619] RAX: ffffffffffffffda RBX: 00007faf441c6090 RCX: 00007faf43f7ec29 [ 126.693905][ T6619] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000005 [ 126.693918][ T6619] RBP: 00007faf429be090 R08: 0000000000000000 R09: 0000000000000000 [ 126.693964][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.693976][ T6619] R13: 00007faf441c6128 R14: 00007faf441c6090 R15: 00007ffeaccc8708 [ 126.694004][ T6619] [ 126.719534][ T6605] FAT-fs (loop4): Directory bread(block 37) failed [ 126.749891][ T6623] loop1: detected capacity change from 0 to 512 [ 126.792643][ T6605] FAT-fs (loop4): Directory bread(block 38) failed [ 126.891189][ T6605] FAT-fs (loop4): Directory bread(block 39) failed [ 126.897793][ T6605] FAT-fs (loop4): Directory bread(block 40) failed [ 126.904489][ T6605] FAT-fs (loop4): Directory bread(block 41) failed [ 126.911072][ T6623] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 126.929558][ T6623] EXT4-fs (loop1): invalid journal inode [ 126.938532][ T6623] EXT4-fs (loop1): can't get journal size [ 126.947201][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 126.991473][ T6623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 127.014179][ T6623] System zones: 1-12, 13-13 [ 127.020316][ T6623] EXT4-fs (loop1): 1 truncate cleaned up [ 127.026490][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.030483][ T6605] bio_check_eod: 102 callbacks suppressed [ 127.030501][ T6605] gtp: attempt to access beyond end of device [ 127.030501][ T6605] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 127.058292][ T6605] Buffer I/O error on dev loop4, logical block 1028, async page read [ 127.066635][ T6605] gtp: attempt to access beyond end of device [ 127.066635][ T6605] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 127.079469][ T6605] Buffer I/O error on dev loop4, logical block 41991, async page read [ 127.087687][ T6605] FAT-fs (loop4): Filesystem has been set read-only [ 127.094431][ T6605] gtp: attempt to access beyond end of device [ 127.094431][ T6605] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 127.107390][ T6605] Buffer I/O error on dev loop4, logical block 1028, async page read [ 127.115683][ T6605] gtp: attempt to access beyond end of device [ 127.115683][ T6605] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 127.128546][ T6605] Buffer I/O error on dev loop4, logical block 41991, async page read [ 127.154969][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.333997][ T6661] loop1: detected capacity change from 0 to 512 [ 127.374140][ T6661] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.790: error while reading EA inode 32 err=-116 [ 127.390600][ T6661] EXT4-fs (loop1): Remounting filesystem read-only [ 127.397210][ T6661] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 127.465069][ T6661] EXT4-fs (loop1): 1 orphan inode deleted [ 127.471509][ T6661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.500401][ T6661] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.558184][ T6648] netlink: 'syz.1.790': attribute type 4 has an invalid length. [ 127.571985][ T6666] loop4: detected capacity change from 0 to 512 [ 127.585045][ T6666] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.794: error while reading EA inode 32 err=-116 [ 127.627575][ T6639] loop2: detected capacity change from 0 to 256 [ 127.647283][ T6666] EXT4-fs (loop4): Remounting filesystem read-only [ 127.654328][ T6666] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 127.695827][ T6666] EXT4-fs (loop4): 1 orphan inode deleted [ 127.749733][ T6666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.843473][ T6666] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.858406][ T6711] FAULT_INJECTION: forcing a failure. [ 127.858406][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.871563][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.5.797 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.871594][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.871680][ T6711] Call Trace: [ 127.871689][ T6711] [ 127.871697][ T6711] __dump_stack+0x1d/0x30 [ 127.871773][ T6711] dump_stack_lvl+0xe8/0x140 [ 127.871795][ T6711] dump_stack+0x15/0x1b [ 127.871829][ T6711] should_fail_ex+0x265/0x280 [ 127.871853][ T6711] should_fail+0xb/0x20 [ 127.871927][ T6711] should_fail_usercopy+0x1a/0x20 [ 127.871966][ T6711] _copy_to_iter+0xd2/0xe70 [ 127.871996][ T6711] ? chacha_block_generic+0x218/0x240 [ 127.872037][ T6711] get_random_bytes_user+0x12d/0x290 [ 127.872152][ T6711] ? import_ubuf+0xe8/0x120 [ 127.872187][ T6711] __x64_sys_getrandom+0xcf/0x1a0 [ 127.872364][ T6711] x64_sys_call+0x1fa6/0x2ff0 [ 127.872387][ T6711] do_syscall_64+0xd2/0x200 [ 127.872419][ T6711] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.872473][ T6711] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.872513][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.872541][ T6711] RIP: 0033:0x7f4225caec29 [ 127.872558][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.872597][ T6711] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 127.872656][ T6711] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 127.872672][ T6711] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 127.872688][ T6711] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 127.872704][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.872719][ T6711] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 127.872738][ T6711] [ 128.091840][ T6666] netlink: 'syz.4.794': attribute type 4 has an invalid length. [ 128.214389][ T6722] FAULT_INJECTION: forcing a failure. [ 128.214389][ T6722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.227669][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.5.799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.227697][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.227712][ T6722] Call Trace: [ 128.227721][ T6722] [ 128.227730][ T6722] __dump_stack+0x1d/0x30 [ 128.227784][ T6722] dump_stack_lvl+0xe8/0x140 [ 128.227828][ T6722] dump_stack+0x15/0x1b [ 128.227848][ T6722] should_fail_ex+0x265/0x280 [ 128.227877][ T6722] should_fail+0xb/0x20 [ 128.227897][ T6722] should_fail_usercopy+0x1a/0x20 [ 128.227930][ T6722] _copy_from_iter+0xd2/0xe80 [ 128.228028][ T6722] ? __build_skb_around+0x1a0/0x200 [ 128.228145][ T6722] ? __alloc_skb+0x223/0x320 [ 128.228174][ T6722] netlink_sendmsg+0x471/0x6b0 [ 128.228216][ T6722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.228250][ T6722] __sock_sendmsg+0x142/0x180 [ 128.228289][ T6722] ____sys_sendmsg+0x31e/0x4e0 [ 128.228326][ T6722] ___sys_sendmsg+0x17b/0x1d0 [ 128.228410][ T6722] __x64_sys_sendmsg+0xd4/0x160 [ 128.228551][ T6722] x64_sys_call+0x191e/0x2ff0 [ 128.228572][ T6722] do_syscall_64+0xd2/0x200 [ 128.228608][ T6722] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.228639][ T6722] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.228678][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.228705][ T6722] RIP: 0033:0x7f4225caec29 [ 128.228771][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.228794][ T6722] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.228812][ T6722] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 128.228825][ T6722] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 128.228840][ T6722] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 128.228854][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.228869][ T6722] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 128.228938][ T6722] [ 128.439940][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 128.439958][ T29] audit: type=1326 audit(1758502568.563:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.470102][ T29] audit: type=1326 audit(1758502568.563:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.493715][ T29] audit: type=1326 audit(1758502568.563:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.517739][ T29] audit: type=1326 audit(1758502568.563:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.541866][ T29] audit: type=1326 audit(1758502568.563:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.565292][ T29] audit: type=1326 audit(1758502568.563:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.589469][ T29] audit: type=1326 audit(1758502568.563:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.613637][ T29] audit: type=1326 audit(1758502568.563:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.637023][ T29] audit: type=1326 audit(1758502568.563:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.661041][ T29] audit: type=1326 audit(1758502568.563:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 128.712149][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 128.764976][ T6744] FAULT_INJECTION: forcing a failure. [ 128.764976][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 128.778452][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.778486][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.778501][ T6744] Call Trace: [ 128.778507][ T6744] [ 128.778515][ T6744] __dump_stack+0x1d/0x30 [ 128.778536][ T6744] dump_stack_lvl+0xe8/0x140 [ 128.778554][ T6744] dump_stack+0x15/0x1b [ 128.778574][ T6744] should_fail_ex+0x265/0x280 [ 128.778604][ T6744] should_failslab+0x8c/0xb0 [ 128.778636][ T6744] kmem_cache_alloc_noprof+0x50/0x310 [ 128.778672][ T6744] ? mas_alloc_nodes+0x265/0x520 [ 128.778713][ T6744] mas_alloc_nodes+0x265/0x520 [ 128.778747][ T6744] mas_preallocate+0x33e/0x520 [ 128.778788][ T6744] mmap_region+0xbdd/0x1630 [ 128.778850][ T6744] do_mmap+0x9b3/0xbe0 [ 128.778891][ T6744] vm_mmap_pgoff+0x17a/0x2e0 [ 128.778925][ T6744] ksys_mmap_pgoff+0xc2/0x310 [ 128.778941][ T6744] ? __x64_sys_mmap+0x49/0x70 [ 128.778968][ T6744] x64_sys_call+0x14a3/0x2ff0 [ 128.778995][ T6744] do_syscall_64+0xd2/0x200 [ 128.779033][ T6744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.779064][ T6744] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.779107][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.779128][ T6744] RIP: 0033:0x7fbcdd43ec63 [ 128.779143][ T6744] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 128.779164][ T6744] RSP: 002b:00007fbcdbea6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.779187][ T6744] RAX: ffffffffffffffda RBX: 00000000000005ab RCX: 00007fbcdd43ec63 [ 128.779199][ T6744] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 128.779211][ T6744] RBP: 0000200000000182 R08: 00000000ffffffff R09: 0000000000000000 [ 128.779222][ T6744] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 128.779233][ T6744] R13: 00007fbcdbea6ef0 R14: 00007fbcdbea6eb0 R15: 0000200000000940 [ 128.779251][ T6744] [ 129.075934][ T6752] loop4: detected capacity change from 0 to 1024 [ 129.086939][ T6752] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.097951][ T6752] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.163947][ T6752] JBD2: no valid journal superblock found [ 129.169797][ T6752] EXT4-fs (loop4): Could not load journal inode [ 130.047337][ T6788] netlink: 96 bytes leftover after parsing attributes in process `syz.3.811'. [ 130.056360][ T6788] netlink: 96 bytes leftover after parsing attributes in process `syz.3.811'. [ 130.065951][ T6788] netlink: 96 bytes leftover after parsing attributes in process `syz.3.811'. [ 130.220170][ T6798] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 130.246790][ T6800] FAULT_INJECTION: forcing a failure. [ 130.246790][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.260656][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.260772][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.260788][ T6800] Call Trace: [ 130.260797][ T6800] [ 130.260806][ T6800] __dump_stack+0x1d/0x30 [ 130.260835][ T6800] dump_stack_lvl+0xe8/0x140 [ 130.260861][ T6800] dump_stack+0x15/0x1b [ 130.260883][ T6800] should_fail_ex+0x265/0x280 [ 130.260980][ T6800] should_fail+0xb/0x20 [ 130.261007][ T6800] should_fail_usercopy+0x1a/0x20 [ 130.261045][ T6800] strncpy_from_user+0x25/0x230 [ 130.261088][ T6800] ? kmem_cache_alloc_noprof+0x186/0x310 [ 130.261138][ T6800] ? getname_flags+0x80/0x3b0 [ 130.261176][ T6800] getname_flags+0xae/0x3b0 [ 130.261285][ T6800] user_path_at+0x28/0x130 [ 130.261325][ T6800] do_fchmodat+0x9c/0x180 [ 130.261353][ T6800] __x64_sys_fchmodat+0x42/0x50 [ 130.261453][ T6800] x64_sys_call+0x288d/0x2ff0 [ 130.261481][ T6800] do_syscall_64+0xd2/0x200 [ 130.261546][ T6800] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.261575][ T6800] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.261616][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.261645][ T6800] RIP: 0033:0x7fad85f8ec29 [ 130.261665][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.261820][ T6800] RSP: 002b:00007fad849ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 130.261840][ T6800] RAX: ffffffffffffffda RBX: 00007fad861d5fa0 RCX: 00007fad85f8ec29 [ 130.261856][ T6800] RDX: 00000000fffffffb RSI: 0000200000000000 RDI: ffffffffffffff9c [ 130.261872][ T6800] RBP: 00007fad849ef090 R08: 0000000000000000 R09: 0000000000000000 [ 130.261889][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.261904][ T6800] R13: 00007fad861d6038 R14: 00007fad861d5fa0 R15: 00007fff4a7fb6b8 [ 130.261927][ T6800] [ 130.289676][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.813'. [ 130.490716][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.813'. [ 130.545139][ T6807] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.724429][ T6807] loop5: detected capacity change from 0 to 4096 [ 130.738590][ T6813] netlink: 172 bytes leftover after parsing attributes in process `syz.3.820'. [ 130.786245][ T6816] FAULT_INJECTION: forcing a failure. [ 130.786245][ T6816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.790273][ T6807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.800213][ T6816] CPU: 0 UID: 0 PID: 6816 Comm: syz.3.821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.800250][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.800269][ T6816] Call Trace: [ 130.800279][ T6816] [ 130.800312][ T6816] __dump_stack+0x1d/0x30 [ 130.800340][ T6816] dump_stack_lvl+0xe8/0x140 [ 130.800366][ T6816] dump_stack+0x15/0x1b [ 130.800390][ T6816] should_fail_ex+0x265/0x280 [ 130.800425][ T6816] should_fail+0xb/0x20 [ 130.800468][ T6816] should_fail_usercopy+0x1a/0x20 [ 130.800504][ T6816] _copy_from_iter+0xd2/0xe80 [ 130.800543][ T6816] ? __build_skb_around+0x1a0/0x200 [ 130.800576][ T6816] ? __alloc_skb+0x223/0x320 [ 130.800609][ T6816] netlink_sendmsg+0x471/0x6b0 [ 130.800667][ T6816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.800706][ T6816] __sock_sendmsg+0x142/0x180 [ 130.800752][ T6816] ____sys_sendmsg+0x31e/0x4e0 [ 130.800866][ T6816] ___sys_sendmsg+0x17b/0x1d0 [ 130.800936][ T6816] __x64_sys_sendmsg+0xd4/0x160 [ 130.800981][ T6816] x64_sys_call+0x191e/0x2ff0 [ 130.801013][ T6816] do_syscall_64+0xd2/0x200 [ 130.801105][ T6816] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.801141][ T6816] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.801205][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.801235][ T6816] RIP: 0033:0x7fad85f8ec29 [ 130.801257][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.801310][ T6816] RSP: 002b:00007fad849ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.801335][ T6816] RAX: ffffffffffffffda RBX: 00007fad861d5fa0 RCX: 00007fad85f8ec29 [ 130.801353][ T6816] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 130.801371][ T6816] RBP: 00007fad849ef090 R08: 0000000000000000 R09: 0000000000000000 [ 130.801388][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.801405][ T6816] R13: 00007fad861d6038 R14: 00007fad861d5fa0 R15: 00007fff4a7fb6b8 [ 130.801502][ T6816] [ 131.338431][ T6807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.361073][ T6829] netlink: 172 bytes leftover after parsing attributes in process `syz.3.825'. [ 131.512972][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.616870][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.829'. [ 131.668980][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.829'. [ 131.869023][ T6853] FAULT_INJECTION: forcing a failure. [ 131.869023][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 131.881841][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.5.834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.881882][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.881898][ T6853] Call Trace: [ 131.881905][ T6853] [ 131.881912][ T6853] __dump_stack+0x1d/0x30 [ 131.881936][ T6853] dump_stack_lvl+0xe8/0x140 [ 131.881961][ T6853] dump_stack+0x15/0x1b [ 131.881981][ T6853] should_fail_ex+0x265/0x280 [ 131.882064][ T6853] should_failslab+0x8c/0xb0 [ 131.882095][ T6853] kmem_cache_alloc_noprof+0x50/0x310 [ 131.882133][ T6853] ? io_submit_one+0xb8/0x11d0 [ 131.882180][ T6853] io_submit_one+0xb8/0x11d0 [ 131.882241][ T6853] __se_sys_io_submit+0xfb/0x280 [ 131.882280][ T6853] __x64_sys_io_submit+0x43/0x50 [ 131.882308][ T6853] x64_sys_call+0x2d5d/0x2ff0 [ 131.882329][ T6853] do_syscall_64+0xd2/0x200 [ 131.882444][ T6853] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.882470][ T6853] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.882507][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.882569][ T6853] RIP: 0033:0x7f4225caec29 [ 131.882588][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.882611][ T6853] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 131.882630][ T6853] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 131.882642][ T6853] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f42246d3000 [ 131.882755][ T6853] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 131.882770][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.882782][ T6853] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 131.882802][ T6853] [ 132.100686][ T6851] loop1: detected capacity change from 0 to 512 [ 132.110864][ T946] IPVS: starting estimator thread 0... [ 132.137117][ T6851] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.833: error while reading EA inode 32 err=-116 [ 132.151936][ T6851] EXT4-fs (loop1): Remounting filesystem read-only [ 132.158473][ T6851] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 132.179566][ T6851] EXT4-fs (loop1): 1 orphan inode deleted [ 132.187991][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.209656][ T6858] IPVS: using max 2016 ests per chain, 100800 per kthread [ 132.253106][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.311214][ T6851] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 132.416120][ T6885] loop5: detected capacity change from 0 to 512 [ 132.423690][ T6887] FAULT_INJECTION: forcing a failure. [ 132.423690][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 132.436509][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.1.848 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.436537][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.436624][ T6887] Call Trace: [ 132.436632][ T6887] [ 132.436641][ T6887] __dump_stack+0x1d/0x30 [ 132.436741][ T6887] dump_stack_lvl+0xe8/0x140 [ 132.436766][ T6887] dump_stack+0x15/0x1b [ 132.436797][ T6887] should_fail_ex+0x265/0x280 [ 132.436821][ T6887] should_failslab+0x8c/0xb0 [ 132.436846][ T6887] __kmalloc_noprof+0xa5/0x3e0 [ 132.436920][ T6887] ? sock_kmalloc+0x85/0xc0 [ 132.436950][ T6887] ? iovec_from_user+0x179/0x210 [ 132.437037][ T6887] sock_kmalloc+0x85/0xc0 [ 132.437121][ T6887] ____sys_sendmsg+0xf8/0x4e0 [ 132.437202][ T6887] ___sys_sendmsg+0x17b/0x1d0 [ 132.437255][ T6887] __x64_sys_sendmsg+0xd4/0x160 [ 132.437426][ T6887] x64_sys_call+0x191e/0x2ff0 [ 132.437464][ T6887] do_syscall_64+0xd2/0x200 [ 132.437514][ T6887] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.437553][ T6887] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.437619][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.437645][ T6887] RIP: 0033:0x7fbcdd43ec29 [ 132.437664][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.437687][ T6887] RSP: 002b:00007fbcdbea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.437709][ T6887] RAX: ffffffffffffffda RBX: 00007fbcdd685fa0 RCX: 00007fbcdd43ec29 [ 132.437767][ T6887] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 132.437790][ T6887] RBP: 00007fbcdbea7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.437806][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.437868][ T6887] R13: 00007fbcdd686038 R14: 00007fbcdd685fa0 R15: 00007ffdb2768f78 [ 132.437892][ T6887] [ 132.674231][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.702978][ T6885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.747177][ T6885] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.838138][ T6899] vlan0: entered allmulticast mode [ 132.843354][ T6899] bond0: entered allmulticast mode [ 132.871096][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.968466][ T6906] FAULT_INJECTION: forcing a failure. [ 132.968466][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 132.981415][ T6906] CPU: 1 UID: 0 PID: 6906 Comm: syz.5.852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.981501][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.981529][ T6906] Call Trace: [ 132.981536][ T6906] [ 132.981545][ T6906] __dump_stack+0x1d/0x30 [ 132.981594][ T6906] dump_stack_lvl+0xe8/0x140 [ 132.981619][ T6906] dump_stack+0x15/0x1b [ 132.981640][ T6906] should_fail_ex+0x265/0x280 [ 132.981697][ T6906] should_failslab+0x8c/0xb0 [ 132.981738][ T6906] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 132.981776][ T6906] ? __d_alloc+0x3d/0x340 [ 132.981814][ T6906] __d_alloc+0x3d/0x340 [ 132.981918][ T6906] ? from_vfsgid+0x70/0xa0 [ 132.981950][ T6906] d_alloc_pseudo+0x1e/0x80 [ 132.981986][ T6906] alloc_file_pseudo+0x71/0x160 [ 132.982104][ T6906] hugetlb_file_setup+0x2a6/0x3d0 [ 132.982136][ T6906] ksys_mmap_pgoff+0x157/0x310 [ 132.982214][ T6906] x64_sys_call+0x14a3/0x2ff0 [ 132.982242][ T6906] do_syscall_64+0xd2/0x200 [ 132.982357][ T6906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.982434][ T6906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.982474][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.982501][ T6906] RIP: 0033:0x7f4225caec29 [ 132.982521][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.982595][ T6906] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.982615][ T6906] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 132.982631][ T6906] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 132.982646][ T6906] RBP: 00007f4224717090 R08: ffffffffffffffff R09: 00000000fffff000 [ 132.982662][ T6906] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 132.982677][ T6906] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 132.982703][ T6906] [ 133.477388][ T6919] netlink: 'syz.5.857': attribute type 1 has an invalid length. [ 133.486286][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 133.486374][ T29] audit: type=1400 audit(1758502573.603:3582): avc: denied { create } for pid=6918 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 133.513637][ T29] audit: type=1400 audit(1758502573.603:3583): avc: denied { write } for pid=6918 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 133.714871][ T6914] bridge0: entered promiscuous mode [ 133.794937][ T6914] bridge0: port 3(macsec1) entered blocking state [ 133.801516][ T6914] bridge0: port 3(macsec1) entered disabled state [ 133.808113][ T29] audit: type=1400 audit(1758502573.923:3584): avc: denied { lock } for pid=6927 comm="syz.5.859" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.840923][ T6914] macsec1: entered allmulticast mode [ 133.846285][ T6914] bridge0: entered allmulticast mode [ 133.901110][ T6914] macsec1: left allmulticast mode [ 133.906200][ T6914] bridge0: left allmulticast mode [ 133.935176][ T6914] bridge0: left promiscuous mode [ 133.960007][ T6937] FAULT_INJECTION: forcing a failure. [ 133.960007][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 133.972795][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.2.862 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.972829][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.972846][ T6937] Call Trace: [ 133.972853][ T6937] [ 133.972860][ T6937] __dump_stack+0x1d/0x30 [ 133.972960][ T6937] dump_stack_lvl+0xe8/0x140 [ 133.972986][ T6937] dump_stack+0x15/0x1b [ 133.973007][ T6937] should_fail_ex+0x265/0x280 [ 133.973033][ T6937] should_failslab+0x8c/0xb0 [ 133.973064][ T6937] kmem_cache_alloc_node_noprof+0x57/0x320 [ 133.973151][ T6937] ? __alloc_skb+0x101/0x320 [ 133.973186][ T6937] __alloc_skb+0x101/0x320 [ 133.973215][ T6937] netlink_alloc_large_skb+0xba/0xf0 [ 133.973242][ T6937] netlink_sendmsg+0x3cf/0x6b0 [ 133.973357][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.973390][ T6937] __sock_sendmsg+0x142/0x180 [ 133.973427][ T6937] ____sys_sendmsg+0x31e/0x4e0 [ 133.973519][ T6937] ___sys_sendmsg+0x17b/0x1d0 [ 133.973570][ T6937] __x64_sys_sendmsg+0xd4/0x160 [ 133.973615][ T6937] x64_sys_call+0x191e/0x2ff0 [ 133.973688][ T6937] do_syscall_64+0xd2/0x200 [ 133.973729][ T6937] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.973753][ T6937] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.973785][ T6937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.973827][ T6937] RIP: 0033:0x7faf43f7ec29 [ 133.973847][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.973868][ T6937] RSP: 002b:00007faf429df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.973886][ T6937] RAX: ffffffffffffffda RBX: 00007faf441c5fa0 RCX: 00007faf43f7ec29 [ 133.973897][ T6937] RDX: 0000000000004000 RSI: 0000200000001240 RDI: 0000000000000004 [ 133.973909][ T6937] RBP: 00007faf429df090 R08: 0000000000000000 R09: 0000000000000000 [ 133.973957][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.974013][ T6937] R13: 00007faf441c6038 R14: 00007faf441c5fa0 R15: 00007ffeaccc8708 [ 133.974032][ T6937] [ 134.030368][ T29] audit: type=1400 audit(1758502574.113:3585): avc: denied { getopt } for pid=6939 comm="syz.5.863" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.204445][ T29] audit: type=1326 audit(1758502574.113:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4225caec29 code=0x7ffc0000 [ 134.227865][ T29] audit: type=1326 audit(1758502574.113:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4225caec29 code=0x7ffc0000 [ 134.251925][ T29] audit: type=1326 audit(1758502574.113:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4225caec29 code=0x7ffc0000 [ 134.281138][ T29] audit: type=1326 audit(1758502574.223:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4225caec29 code=0x7ffc0000 [ 134.304655][ T29] audit: type=1326 audit(1758502574.223:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4225caec29 code=0x7ffc0000 [ 134.328139][ T29] audit: type=1326 audit(1758502574.223:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.5.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4225caec29 code=0x7ffc0000 [ 134.535225][ T6970] openvswitch: netlink: Message has 6 unknown bytes. [ 134.546820][ T6969] netlink: 'syz.5.873': attribute type 4 has an invalid length. [ 134.554804][ T6970] netlink: 'syz.5.873': attribute type 4 has an invalid length. [ 134.580858][ T6969] netlink: 'syz.5.873': attribute type 4 has an invalid length. [ 134.626418][ T6977] FAULT_INJECTION: forcing a failure. [ 134.626418][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 134.639201][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.4.874 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.639249][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.639261][ T6977] Call Trace: [ 134.639268][ T6977] [ 134.639277][ T6977] __dump_stack+0x1d/0x30 [ 134.639341][ T6977] dump_stack_lvl+0xe8/0x140 [ 134.639366][ T6977] dump_stack+0x15/0x1b [ 134.639385][ T6977] should_fail_ex+0x265/0x280 [ 134.639414][ T6977] should_failslab+0x8c/0xb0 [ 134.639446][ T6977] kmem_cache_alloc_node_noprof+0x57/0x320 [ 134.639526][ T6977] ? __alloc_skb+0x101/0x320 [ 134.639550][ T6977] __alloc_skb+0x101/0x320 [ 134.639579][ T6977] netlink_alloc_large_skb+0xba/0xf0 [ 134.639608][ T6977] netlink_sendmsg+0x3cf/0x6b0 [ 134.639714][ T6977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.639748][ T6977] __sock_sendmsg+0x142/0x180 [ 134.639810][ T6977] ____sys_sendmsg+0x31e/0x4e0 [ 134.639848][ T6977] ___sys_sendmsg+0x17b/0x1d0 [ 134.639964][ T6977] __x64_sys_sendmsg+0xd4/0x160 [ 134.640006][ T6977] x64_sys_call+0x191e/0x2ff0 [ 134.640033][ T6977] do_syscall_64+0xd2/0x200 [ 134.640067][ T6977] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.640163][ T6977] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.640200][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.640227][ T6977] RIP: 0033:0x7fe0c9c2ec29 [ 134.640246][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.640269][ T6977] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.640288][ T6977] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 134.640362][ T6977] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 134.640376][ T6977] RBP: 00007fe0c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.640392][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.640405][ T6977] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 134.640425][ T6977] [ 135.119706][ T6999] loop4: detected capacity change from 0 to 512 [ 135.126478][ T6999] msdos: Unknown parameter 'errorscontinue' [ 135.140605][ T6999] __nla_validate_parse: 5 callbacks suppressed [ 135.140623][ T6999] netlink: 276 bytes leftover after parsing attributes in process `syz.4.878'. [ 135.190585][ T7004] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 135.426133][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'. [ 135.469176][ T7023] FAULT_INJECTION: forcing a failure. [ 135.469176][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 135.482569][ T7023] CPU: 0 UID: 0 PID: 7023 Comm: syz.5.882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.482603][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.482619][ T7023] Call Trace: [ 135.482627][ T7023] [ 135.482637][ T7023] __dump_stack+0x1d/0x30 [ 135.482724][ T7023] dump_stack_lvl+0xe8/0x140 [ 135.482749][ T7023] dump_stack+0x15/0x1b [ 135.482770][ T7023] should_fail_ex+0x265/0x280 [ 135.482802][ T7023] should_failslab+0x8c/0xb0 [ 135.482897][ T7023] kmem_cache_alloc_noprof+0x50/0x310 [ 135.482924][ T7023] ? skb_clone+0x151/0x1f0 [ 135.482967][ T7023] skb_clone+0x151/0x1f0 [ 135.483042][ T7023] __netlink_deliver_tap+0x2c9/0x500 [ 135.483083][ T7023] ? netlink_attachskb+0x2d0/0x610 [ 135.483155][ T7023] netlink_sendskb+0x126/0x150 [ 135.483198][ T7023] netlink_unicast+0x2a2/0x690 [ 135.483237][ T7023] netlink_ack+0x4c8/0x500 [ 135.483273][ T7023] netlink_rcv_skb+0x192/0x220 [ 135.483303][ T7023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.483411][ T7023] rtnetlink_rcv+0x1c/0x30 [ 135.483523][ T7023] netlink_unicast+0x5bd/0x690 [ 135.483550][ T7023] netlink_sendmsg+0x58b/0x6b0 [ 135.483577][ T7023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.483652][ T7023] __sock_sendmsg+0x142/0x180 [ 135.483813][ T7023] ____sys_sendmsg+0x31e/0x4e0 [ 135.483889][ T7023] ___sys_sendmsg+0x17b/0x1d0 [ 135.483932][ T7023] __x64_sys_sendmsg+0xd4/0x160 [ 135.483973][ T7023] x64_sys_call+0x191e/0x2ff0 [ 135.484093][ T7023] do_syscall_64+0xd2/0x200 [ 135.484128][ T7023] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.484212][ T7023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.484248][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.484276][ T7023] RIP: 0033:0x7f4225caec29 [ 135.484295][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.484332][ T7023] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.484356][ T7023] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 135.484369][ T7023] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 135.484381][ T7023] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 135.484392][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.484404][ T7023] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 135.484427][ T7023] [ 135.853373][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.883'. [ 136.607105][ T7059] FAULT_INJECTION: forcing a failure. [ 136.607105][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 136.619931][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.619958][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.620034][ T7059] Call Trace: [ 136.620044][ T7059] [ 136.620054][ T7059] __dump_stack+0x1d/0x30 [ 136.620082][ T7059] dump_stack_lvl+0xe8/0x140 [ 136.620183][ T7059] dump_stack+0x15/0x1b [ 136.620204][ T7059] should_fail_ex+0x265/0x280 [ 136.620228][ T7059] ? __se_sys_mount+0xef/0x2e0 [ 136.620362][ T7059] should_failslab+0x8c/0xb0 [ 136.620396][ T7059] __kmalloc_cache_noprof+0x4c/0x320 [ 136.620457][ T7059] ? memdup_user+0x99/0xd0 [ 136.620519][ T7059] __se_sys_mount+0xef/0x2e0 [ 136.620551][ T7059] ? __bpf_trace_sys_enter+0x10/0x30 [ 136.620582][ T7059] ? trace_sys_enter+0xd0/0xf0 [ 136.620613][ T7059] __x64_sys_mount+0x67/0x80 [ 136.620690][ T7059] x64_sys_call+0x2b4d/0x2ff0 [ 136.620790][ T7059] do_syscall_64+0xd2/0x200 [ 136.620832][ T7059] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.620877][ T7059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.620917][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.620946][ T7059] RIP: 0033:0x7fe0c9c2ec29 [ 136.620965][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.621040][ T7059] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.621065][ T7059] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 136.621078][ T7059] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 136.621095][ T7059] RBP: 00007fe0c868f090 R08: 0000200000000600 R09: 0000000000000000 [ 136.621111][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.621127][ T7059] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 136.621162][ T7059] [ 136.976908][ T7062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7062 comm=syz.5.895 [ 137.258120][ T7073] FAULT_INJECTION: forcing a failure. [ 137.258120][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 137.270976][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.3.901 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.271012][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.271034][ T7073] Call Trace: [ 137.271042][ T7073] [ 137.271051][ T7073] __dump_stack+0x1d/0x30 [ 137.271128][ T7073] dump_stack_lvl+0xe8/0x140 [ 137.271155][ T7073] dump_stack+0x15/0x1b [ 137.271176][ T7073] should_fail_ex+0x265/0x280 [ 137.271288][ T7073] should_failslab+0x8c/0xb0 [ 137.271323][ T7073] kmem_cache_alloc_noprof+0x50/0x310 [ 137.271353][ T7073] ? skb_clone+0x151/0x1f0 [ 137.271465][ T7073] skb_clone+0x151/0x1f0 [ 137.271500][ T7073] packet_rcv+0x3c0/0x9a0 [ 137.271526][ T7073] ? __pfx_packet_rcv+0x10/0x10 [ 137.271551][ T7073] dev_queue_xmit_nit+0x3cf/0x680 [ 137.271646][ T7073] dev_hard_start_xmit+0xd3/0x3e0 [ 137.271680][ T7073] ? validate_xmit_skb+0x746/0x910 [ 137.271716][ T7073] __dev_queue_xmit+0x10f9/0x2000 [ 137.271751][ T7073] ? __dev_queue_xmit+0x182/0x2000 [ 137.271819][ T7073] ? __skb_clone+0x2a6/0x2d0 [ 137.271852][ T7073] __netlink_deliver_tap+0x3c3/0x500 [ 137.271966][ T7073] netlink_unicast+0x66b/0x690 [ 137.271999][ T7073] netlink_sendmsg+0x58b/0x6b0 [ 137.272029][ T7073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.272054][ T7073] __sock_sendmsg+0x142/0x180 [ 137.272097][ T7073] ____sys_sendmsg+0x31e/0x4e0 [ 137.272136][ T7073] ___sys_sendmsg+0x17b/0x1d0 [ 137.272187][ T7073] __x64_sys_sendmsg+0xd4/0x160 [ 137.272281][ T7073] x64_sys_call+0x191e/0x2ff0 [ 137.272310][ T7073] do_syscall_64+0xd2/0x200 [ 137.272353][ T7073] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.272386][ T7073] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.272434][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.272457][ T7073] RIP: 0033:0x7fad85f8ec29 [ 137.272472][ T7073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.272492][ T7073] RSP: 002b:00007fad849ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.272551][ T7073] RAX: ffffffffffffffda RBX: 00007fad861d5fa0 RCX: 00007fad85f8ec29 [ 137.272567][ T7073] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 137.272583][ T7073] RBP: 00007fad849ef090 R08: 0000000000000000 R09: 0000000000000000 [ 137.272596][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.272622][ T7073] R13: 00007fad861d6038 R14: 00007fad861d5fa0 R15: 00007fff4a7fb6b8 [ 137.272642][ T7073] [ 137.568197][ T7078] netlink: 154 bytes leftover after parsing attributes in process `syz.4.902'. [ 137.698046][ T7088] loop4: detected capacity change from 0 to 512 [ 137.730315][ T7094] FAULT_INJECTION: forcing a failure. [ 137.730315][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 137.743073][ T7094] CPU: 1 UID: 0 PID: 7094 Comm: syz.5.906 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.743183][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.743198][ T7094] Call Trace: [ 137.743207][ T7094] [ 137.743217][ T7094] __dump_stack+0x1d/0x30 [ 137.743240][ T7094] dump_stack_lvl+0xe8/0x140 [ 137.743259][ T7094] dump_stack+0x15/0x1b [ 137.743309][ T7094] should_fail_ex+0x265/0x280 [ 137.743417][ T7094] should_failslab+0x8c/0xb0 [ 137.743448][ T7094] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 137.743514][ T7094] ? kasprintf+0x83/0xb0 [ 137.743534][ T7094] kvasprintf+0x8a/0x110 [ 137.743625][ T7094] ? obj_cgroup_charge_account+0x122/0x1a0 [ 137.743665][ T7094] kasprintf+0x83/0xb0 [ 137.743723][ T7094] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 137.743826][ T7094] nf_tables_set_alloc_name+0xaa/0x4b0 [ 137.743895][ T7094] ? nla_strdup+0x78/0xc0 [ 137.743932][ T7094] nf_tables_newset+0xe24/0x14e0 [ 137.744038][ T7094] nfnetlink_rcv+0xb96/0x1690 [ 137.744092][ T7094] netlink_unicast+0x5bd/0x690 [ 137.744125][ T7094] netlink_sendmsg+0x58b/0x6b0 [ 137.744159][ T7094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.744278][ T7094] __sock_sendmsg+0x142/0x180 [ 137.744322][ T7094] ____sys_sendmsg+0x31e/0x4e0 [ 137.744360][ T7094] ___sys_sendmsg+0x17b/0x1d0 [ 137.744449][ T7094] __x64_sys_sendmsg+0xd4/0x160 [ 137.744482][ T7094] x64_sys_call+0x191e/0x2ff0 [ 137.744504][ T7094] do_syscall_64+0xd2/0x200 [ 137.744580][ T7094] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.744612][ T7094] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.744649][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.744674][ T7094] RIP: 0033:0x7f4225caec29 [ 137.744691][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.744713][ T7094] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.744736][ T7094] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 137.744751][ T7094] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 137.744802][ T7094] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 137.744818][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.744835][ T7094] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 137.744855][ T7094] [ 138.053146][ T7100] netlink: 76 bytes leftover after parsing attributes in process `syz.5.908'. [ 138.066166][ T7100] loop5: detected capacity change from 0 to 512 [ 138.110355][ T7100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.138226][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.153296][ T7100] ext4 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.173256][ T7088] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.228614][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.245080][ T7088] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.904: corrupted inode contents [ 138.261523][ T7088] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.904: mark_inode_dirty error [ 138.286658][ T7088] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.904: corrupted inode contents [ 138.306116][ T7088] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.904: mark_inode_dirty error [ 138.622972][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 138.622991][ T29] audit: type=1400 audit(2000000004.160:3916): avc: denied { create } for pid=7087 comm="syz.4.904" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.651364][ T7104] SELinux: Context system_u:object_r:xserver_misc_device_t:s0 is not valid (left unmapped). [ 138.702102][ T29] audit: type=1400 audit(2000000004.190:3917): avc: denied { mac_admin } for pid=7087 comm="syz.4.904" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.723985][ T29] audit: type=1400 audit(2000000004.200:3918): avc: denied { relabelto } for pid=7087 comm="syz.4.904" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xserver_misc_device_t:s0" [ 138.751744][ T29] audit: type=1326 audit(2000000004.200:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.775114][ T29] audit: type=1326 audit(2000000004.200:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.799412][ T29] audit: type=1326 audit(2000000004.200:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.823839][ T29] audit: type=1326 audit(2000000004.200:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.847203][ T29] audit: type=1326 audit(2000000004.200:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.871314][ T29] audit: type=1326 audit(2000000004.200:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.894778][ T29] audit: type=1326 audit(2000000004.200:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad85f8ec29 code=0x7ffc0000 [ 138.974258][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.034289][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 139.098794][ T7119] bridge1: entered promiscuous mode [ 139.181171][ T7124] bridge0: entered promiscuous mode [ 139.188080][ T7124] bridge0: port 4(macsec1) entered blocking state [ 139.195386][ T7124] bridge0: port 4(macsec1) entered disabled state [ 139.202309][ T7124] macsec1: entered allmulticast mode [ 139.207658][ T7124] bridge0: entered allmulticast mode [ 139.214046][ T7124] macsec1: left allmulticast mode [ 139.219137][ T7124] bridge0: left allmulticast mode [ 139.227757][ T7124] bridge0: left promiscuous mode [ 139.249964][ T7129] 9pnet_fd: Insufficient options for proto=fd [ 139.381111][ T7141] FAULT_INJECTION: forcing a failure. [ 139.381111][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.394360][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.5.921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.394400][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.394413][ T7141] Call Trace: [ 139.394476][ T7141] [ 139.394505][ T7141] __dump_stack+0x1d/0x30 [ 139.394532][ T7141] dump_stack_lvl+0xe8/0x140 [ 139.394557][ T7141] dump_stack+0x15/0x1b [ 139.394577][ T7141] should_fail_ex+0x265/0x280 [ 139.394608][ T7141] should_fail+0xb/0x20 [ 139.394634][ T7141] should_fail_usercopy+0x1a/0x20 [ 139.394685][ T7141] _copy_to_user+0x20/0xa0 [ 139.394725][ T7141] simple_read_from_buffer+0xb5/0x130 [ 139.394755][ T7141] proc_fail_nth_read+0x10e/0x150 [ 139.394792][ T7141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.394858][ T7141] vfs_read+0x1a5/0x770 [ 139.394884][ T7141] ? bpf_trace_run2+0x124/0x1c0 [ 139.394913][ T7141] ? __rcu_read_unlock+0x4f/0x70 [ 139.394939][ T7141] ? __fget_files+0x184/0x1c0 [ 139.395037][ T7141] ksys_read+0xda/0x1a0 [ 139.395064][ T7141] __x64_sys_read+0x40/0x50 [ 139.395092][ T7141] x64_sys_call+0x27bc/0x2ff0 [ 139.395132][ T7141] do_syscall_64+0xd2/0x200 [ 139.395184][ T7141] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.395208][ T7141] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.395364][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.395443][ T7141] RIP: 0033:0x7f4225cad63c [ 139.395462][ T7141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.395486][ T7141] RSP: 002b:00007f4224717030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.395544][ T7141] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225cad63c [ 139.395556][ T7141] RDX: 000000000000000f RSI: 00007f42247170a0 RDI: 0000000000000005 [ 139.395621][ T7141] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 139.395637][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.395652][ T7141] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 139.395686][ T7141] [ 139.735006][ T7154] FAULT_INJECTION: forcing a failure. [ 139.735006][ T7154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.748907][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.748939][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.748952][ T7154] Call Trace: [ 139.748960][ T7154] [ 139.748971][ T7154] __dump_stack+0x1d/0x30 [ 139.748998][ T7154] dump_stack_lvl+0xe8/0x140 [ 139.749090][ T7154] dump_stack+0x15/0x1b [ 139.749119][ T7154] should_fail_ex+0x265/0x280 [ 139.749150][ T7154] should_fail+0xb/0x20 [ 139.749175][ T7154] should_fail_usercopy+0x1a/0x20 [ 139.749206][ T7154] _copy_from_user+0x1c/0xb0 [ 139.749313][ T7154] smc_setsockopt+0x2ac/0x750 [ 139.749339][ T7154] ? __pfx_smc_setsockopt+0x10/0x10 [ 139.749363][ T7154] __sys_setsockopt+0x181/0x200 [ 139.749474][ T7154] __x64_sys_setsockopt+0x64/0x80 [ 139.749504][ T7154] x64_sys_call+0x20ec/0x2ff0 [ 139.749529][ T7154] do_syscall_64+0xd2/0x200 [ 139.749568][ T7154] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.749675][ T7154] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.749713][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.749736][ T7154] RIP: 0033:0x7fbcdd43ec29 [ 139.749753][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.749776][ T7154] RSP: 002b:00007fbcdbea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.749811][ T7154] RAX: ffffffffffffffda RBX: 00007fbcdd685fa0 RCX: 00007fbcdd43ec29 [ 139.749826][ T7154] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 139.749841][ T7154] RBP: 00007fbcdbea7090 R08: 0000000000000018 R09: 0000000000000000 [ 139.749856][ T7154] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 139.749871][ T7154] R13: 00007fbcdd686038 R14: 00007fbcdd685fa0 R15: 00007ffdb2768f78 [ 139.749968][ T7154] [ 139.942555][ T7155] loop5: detected capacity change from 0 to 512 [ 140.018321][ T7163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.930'. [ 140.058136][ T7159] loop1: detected capacity change from 0 to 1764 [ 140.146939][ T7173] FAULT_INJECTION: forcing a failure. [ 140.146939][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.160094][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.3.932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.160130][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.160147][ T7173] Call Trace: [ 140.160234][ T7173] [ 140.160242][ T7173] __dump_stack+0x1d/0x30 [ 140.160264][ T7173] dump_stack_lvl+0xe8/0x140 [ 140.160362][ T7173] dump_stack+0x15/0x1b [ 140.160378][ T7173] should_fail_ex+0x265/0x280 [ 140.160407][ T7173] should_fail+0xb/0x20 [ 140.160462][ T7173] should_fail_usercopy+0x1a/0x20 [ 140.160521][ T7173] _copy_to_user+0x20/0xa0 [ 140.160563][ T7173] simple_read_from_buffer+0xb5/0x130 [ 140.160591][ T7173] proc_fail_nth_read+0x10e/0x150 [ 140.160696][ T7173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.160724][ T7173] vfs_read+0x1a5/0x770 [ 140.160784][ T7173] ? __rcu_read_unlock+0x4f/0x70 [ 140.160860][ T7173] ? __fget_files+0x184/0x1c0 [ 140.160905][ T7173] ksys_read+0xda/0x1a0 [ 140.160967][ T7173] __x64_sys_read+0x40/0x50 [ 140.161043][ T7173] x64_sys_call+0x27bc/0x2ff0 [ 140.161148][ T7173] do_syscall_64+0xd2/0x200 [ 140.161197][ T7173] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.161230][ T7173] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.161271][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.161339][ T7173] RIP: 0033:0x7fad85f8d63c [ 140.161383][ T7173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.161408][ T7173] RSP: 002b:00007fad849ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.161433][ T7173] RAX: ffffffffffffffda RBX: 00007fad861d5fa0 RCX: 00007fad85f8d63c [ 140.161450][ T7173] RDX: 000000000000000f RSI: 00007fad849ef0a0 RDI: 0000000000000003 [ 140.161467][ T7173] RBP: 00007fad849ef090 R08: 0000000000000000 R09: 0000000000000000 [ 140.161483][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.161499][ T7173] R13: 00007fad861d6038 R14: 00007fad861d5fa0 R15: 00007fff4a7fb6b8 [ 140.161547][ T7173] [ 140.408102][ T7174] bridge0: entered promiscuous mode [ 140.415166][ T7174] bridge0: port 2(macsec1) entered blocking state [ 140.421706][ T7174] bridge0: port 2(macsec1) entered disabled state [ 140.499587][ T7174] macsec1: entered allmulticast mode [ 140.505022][ T7174] bridge0: entered allmulticast mode [ 140.564246][ T7174] macsec1: left allmulticast mode [ 140.569413][ T7174] bridge0: left allmulticast mode [ 140.590718][ T7174] bridge0: left promiscuous mode [ 140.778486][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 140.846898][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'. [ 140.890745][ T7208] loop1: detected capacity change from 0 to 1024 [ 140.901618][ T7209] loop5: detected capacity change from 0 to 512 [ 140.912693][ T7209] EXT4-fs: Ignoring removed orlov option [ 140.960978][ T7209] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.983592][ T7208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.015016][ T7209] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 141.056467][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 141.089106][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 141.100625][ T7209] EXT4-fs (loop5): 1 orphan inode deleted [ 141.106923][ T7209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.155203][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 141.175415][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 141.234525][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.256703][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.283658][ T7223] FAULT_INJECTION: forcing a failure. [ 141.283658][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 141.296473][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.5.951 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.296510][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.296523][ T7223] Call Trace: [ 141.296529][ T7223] [ 141.296538][ T7223] __dump_stack+0x1d/0x30 [ 141.296563][ T7223] dump_stack_lvl+0xe8/0x140 [ 141.296585][ T7223] dump_stack+0x15/0x1b [ 141.296626][ T7223] should_fail_ex+0x265/0x280 [ 141.296655][ T7223] ? ip_fib_metrics_init+0x64/0x470 [ 141.296684][ T7223] should_failslab+0x8c/0xb0 [ 141.296717][ T7223] __kmalloc_cache_noprof+0x4c/0x320 [ 141.296767][ T7223] ip_fib_metrics_init+0x64/0x470 [ 141.296804][ T7223] ? __kmalloc_noprof+0x1dd/0x3e0 [ 141.296850][ T7223] ? fib_create_info+0xbb1/0x1980 [ 141.296885][ T7223] fib_create_info+0xbe3/0x1980 [ 141.296928][ T7223] fib_table_insert+0x60/0xeb0 [ 141.297029][ T7223] ? __rcu_read_unlock+0x4f/0x70 [ 141.297056][ T7223] ? should_fail_ex+0xdb/0x280 [ 141.297157][ T7223] ? ip_rt_ioctl+0x724/0x950 [ 141.297185][ T7223] ? should_failslab+0x8c/0xb0 [ 141.297216][ T7223] ? __kmalloc_cache_noprof+0x189/0x320 [ 141.297245][ T7223] ? fib_new_table+0xad/0x1c0 [ 141.297309][ T7223] ip_rt_ioctl+0x38d/0x950 [ 141.297344][ T7223] inet_ioctl+0x33f/0x3a0 [ 141.297380][ T7223] sock_do_ioctl+0x70/0x220 [ 141.297463][ T7223] sock_ioctl+0x41b/0x610 [ 141.297497][ T7223] ? __pfx_sock_ioctl+0x10/0x10 [ 141.297530][ T7223] __se_sys_ioctl+0xce/0x140 [ 141.297607][ T7223] __x64_sys_ioctl+0x43/0x50 [ 141.297631][ T7223] x64_sys_call+0x1816/0x2ff0 [ 141.297658][ T7223] do_syscall_64+0xd2/0x200 [ 141.297698][ T7223] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.297795][ T7223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.297960][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.297987][ T7223] RIP: 0033:0x7f4225caec29 [ 141.298007][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.298030][ T7223] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.298052][ T7223] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 141.298064][ T7223] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000006 [ 141.298124][ T7223] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 141.298140][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.298156][ T7223] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 141.298176][ T7223] [ 141.620836][ T7232] FAULT_INJECTION: forcing a failure. [ 141.620836][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 141.633699][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.4.954 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.633726][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.633738][ T7232] Call Trace: [ 141.633757][ T7232] [ 141.633766][ T7232] __dump_stack+0x1d/0x30 [ 141.633793][ T7232] dump_stack_lvl+0xe8/0x140 [ 141.633818][ T7232] dump_stack+0x15/0x1b [ 141.633869][ T7232] should_fail_ex+0x265/0x280 [ 141.633896][ T7232] should_failslab+0x8c/0xb0 [ 141.633929][ T7232] __kmalloc_noprof+0xa5/0x3e0 [ 141.633964][ T7232] ? iovec_from_user+0x84/0x210 [ 141.634057][ T7232] ? mntput_no_expire+0x6f/0x460 [ 141.634096][ T7232] iovec_from_user+0x84/0x210 [ 141.634140][ T7232] __import_iovec+0xf3/0x540 [ 141.634174][ T7232] import_iovec+0x61/0x80 [ 141.634260][ T7232] ___sys_recvmsg+0x358/0x370 [ 141.634309][ T7232] do_recvmmsg+0x1ef/0x540 [ 141.634352][ T7232] ? get_timespec64+0xc9/0x100 [ 141.634446][ T7232] __x64_sys_recvmmsg+0xfb/0x170 [ 141.634481][ T7232] x64_sys_call+0x27a6/0x2ff0 [ 141.634508][ T7232] do_syscall_64+0xd2/0x200 [ 141.634545][ T7232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.634613][ T7232] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.634651][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.634676][ T7232] RIP: 0033:0x7fe0c9c2ec29 [ 141.634709][ T7232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.634730][ T7232] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 141.634751][ T7232] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 141.634763][ T7232] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 141.634848][ T7232] RBP: 00007fe0c868f090 R08: 0000200000003700 R09: 0000000000000000 [ 141.634865][ T7232] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 141.634891][ T7232] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 141.634910][ T7232] [ 141.857374][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.868628][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.922400][ T10] hid_parser_main: 22 callbacks suppressed [ 141.922418][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.936873][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.944434][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.951906][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.960153][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.967573][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.975067][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.982544][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.990670][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.998106][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.013356][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 142.050735][ T7241] fido_id[7241]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.817315][ T7253] FAULT_INJECTION: forcing a failure. [ 142.817315][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 142.830802][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.4.959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.830845][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.830862][ T7253] Call Trace: [ 142.830869][ T7253] [ 142.830879][ T7253] __dump_stack+0x1d/0x30 [ 142.830907][ T7253] dump_stack_lvl+0xe8/0x140 [ 142.830933][ T7253] dump_stack+0x15/0x1b [ 142.830954][ T7253] should_fail_ex+0x265/0x280 [ 142.830986][ T7253] should_failslab+0x8c/0xb0 [ 142.831019][ T7253] kmem_cache_alloc_noprof+0x50/0x310 [ 142.831056][ T7253] ? vm_area_alloc+0x2c/0xb0 [ 142.831097][ T7253] vm_area_alloc+0x2c/0xb0 [ 142.831137][ T7253] mmap_region+0xaa2/0x1630 [ 142.831205][ T7253] do_mmap+0x9b3/0xbe0 [ 142.831252][ T7253] vm_mmap_pgoff+0x17a/0x2e0 [ 142.831291][ T7253] ksys_mmap_pgoff+0xc2/0x310 [ 142.831307][ T7253] ? __x64_sys_mmap+0x49/0x70 [ 142.831332][ T7253] x64_sys_call+0x14a3/0x2ff0 [ 142.831359][ T7253] do_syscall_64+0xd2/0x200 [ 142.831399][ T7253] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.831430][ T7253] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.831470][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.831497][ T7253] RIP: 0033:0x7fe0c9c2ec29 [ 142.831516][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.831537][ T7253] RSP: 002b:00007fe0c866e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 142.831559][ T7253] RAX: ffffffffffffffda RBX: 00007fe0c9e76090 RCX: 00007fe0c9c2ec29 [ 142.831571][ T7253] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 142.831583][ T7253] RBP: 00007fe0c866e090 R08: ffffffffffffffff R09: 0000000000002000 [ 142.831597][ T7253] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 142.831609][ T7253] R13: 00007fe0c9e76128 R14: 00007fe0c9e76090 R15: 00007ffc15ba93f8 [ 142.831627][ T7253] [ 143.438653][ T7258] 9pnet_fd: Insufficient options for proto=fd [ 143.459656][ T7258] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.467390][ T7258] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.576014][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'. [ 143.592655][ T7258] bridge0: port 3(batadv1) entered blocking state [ 143.599209][ T7258] bridge0: port 3(batadv1) entered disabled state [ 143.606201][ T7258] batadv1: entered allmulticast mode [ 143.613482][ T7258] batadv1: entered promiscuous mode [ 143.870946][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 143.870966][ T29] audit: type=1326 audit(2000000009.390:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 143.901333][ T29] audit: type=1326 audit(2000000009.390:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 143.924870][ T29] audit: type=1326 audit(2000000009.390:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 143.949102][ T29] audit: type=1326 audit(2000000009.390:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 143.973307][ T29] audit: type=1326 audit(2000000009.390:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 143.996712][ T29] audit: type=1326 audit(2000000009.390:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 144.020742][ T29] audit: type=1326 audit(2000000009.390:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 144.044125][ T29] audit: type=1326 audit(2000000009.390:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 144.068243][ T29] audit: type=1326 audit(2000000009.390:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 144.090826][ T3321] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 144.092299][ T29] audit: type=1326 audit(2000000009.390:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.4.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c9c2ec29 code=0x7ffc0000 [ 144.100860][ T3321] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 145.199552][ T7292] FAULT_INJECTION: forcing a failure. [ 145.199552][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 145.212408][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.4.968 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.212435][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.212447][ T7292] Call Trace: [ 145.212455][ T7292] [ 145.212465][ T7292] __dump_stack+0x1d/0x30 [ 145.212488][ T7292] dump_stack_lvl+0xe8/0x140 [ 145.212511][ T7292] dump_stack+0x15/0x1b [ 145.212532][ T7292] should_fail_ex+0x265/0x280 [ 145.212561][ T7292] should_failslab+0x8c/0xb0 [ 145.212591][ T7292] kmem_cache_alloc_noprof+0x50/0x310 [ 145.212625][ T7292] ? vm_area_dup+0x33/0x2c0 [ 145.212661][ T7292] vm_area_dup+0x33/0x2c0 [ 145.212699][ T7292] __split_vma+0xe9/0x650 [ 145.212729][ T7292] vma_modify+0x3f2/0xc80 [ 145.212754][ T7292] ? _parse_integer_limit+0x170/0x190 [ 145.212787][ T7292] vma_modify_flags+0x101/0x130 [ 145.212823][ T7292] mlock_fixup+0x11d/0x210 [ 145.212859][ T7292] apply_vma_lock_flags+0x193/0x250 [ 145.212894][ T7292] do_mlock+0x3c6/0x520 [ 145.212926][ T7292] ? __bpf_trace_sys_enter+0x10/0x30 [ 145.212954][ T7292] ? trace_sys_enter+0xd0/0xf0 [ 145.212981][ T7292] __x64_sys_mlock+0x36/0x50 [ 145.213015][ T7292] x64_sys_call+0x18f8/0x2ff0 [ 145.213037][ T7292] do_syscall_64+0xd2/0x200 [ 145.213073][ T7292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.213103][ T7292] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.213141][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.213167][ T7292] RIP: 0033:0x7fe0c9c2ec29 [ 145.213186][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.213209][ T7292] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 145.213231][ T7292] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 145.213243][ T7292] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 145.213255][ T7292] RBP: 00007fe0c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.213266][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.213280][ T7292] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 145.213303][ T7292] [ 145.553072][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 145.623028][ T7308] loop5: detected capacity change from 0 to 512 [ 145.638655][ T7311] FAULT_INJECTION: forcing a failure. [ 145.638655][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.651822][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.2.973 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.651853][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.651869][ T7311] Call Trace: [ 145.651878][ T7311] [ 145.651887][ T7311] __dump_stack+0x1d/0x30 [ 145.651966][ T7311] dump_stack_lvl+0xe8/0x140 [ 145.651985][ T7311] dump_stack+0x15/0x1b [ 145.652001][ T7311] should_fail_ex+0x265/0x280 [ 145.652026][ T7311] should_fail+0xb/0x20 [ 145.652109][ T7311] should_fail_usercopy+0x1a/0x20 [ 145.652136][ T7311] _copy_from_iter+0xd2/0xe80 [ 145.652175][ T7311] ? alloc_pages_mpol+0x201/0x250 [ 145.652286][ T7311] copy_page_from_iter+0x178/0x2a0 [ 145.652325][ T7311] tun_get_user+0x679/0x2680 [ 145.652358][ T7311] ? ref_tracker_alloc+0x1f2/0x2f0 [ 145.652445][ T7311] tun_chr_write_iter+0x15e/0x210 [ 145.652465][ T7311] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 145.652483][ T7311] vfs_write+0x527/0x960 [ 145.652547][ T7311] ksys_write+0xda/0x1a0 [ 145.652578][ T7311] __x64_sys_write+0x40/0x50 [ 145.652608][ T7311] x64_sys_call+0x27fe/0x2ff0 [ 145.652639][ T7311] do_syscall_64+0xd2/0x200 [ 145.652750][ T7311] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.652897][ T7311] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.652930][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.652996][ T7311] RIP: 0033:0x7faf43f7d6df [ 145.653015][ T7311] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 145.653037][ T7311] RSP: 002b:00007faf429df000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 145.653056][ T7311] RAX: ffffffffffffffda RBX: 00007faf441c5fa0 RCX: 00007faf43f7d6df [ 145.653068][ T7311] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8 [ 145.653117][ T7311] RBP: 00007faf429df090 R08: 0000000000000000 R09: 0000000000000000 [ 145.653133][ T7311] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 145.653148][ T7311] R13: 00007faf441c6038 R14: 00007faf441c5fa0 R15: 00007ffeaccc8708 [ 145.653174][ T7311] [ 145.654793][ T7309] loop4: detected capacity change from 0 to 128 [ 145.874186][ T7308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.907369][ T7308] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.908091][ T7309] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.965941][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.978184][ T7309] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.046476][ T7321] FAULT_INJECTION: forcing a failure. [ 146.046476][ T7321] name failslab, interval 1, probability 0, space 0, times 0 [ 146.059269][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: syz.5.974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.059307][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.059334][ T7321] Call Trace: [ 146.059342][ T7321] [ 146.059351][ T7321] __dump_stack+0x1d/0x30 [ 146.059376][ T7321] dump_stack_lvl+0xe8/0x140 [ 146.059408][ T7321] dump_stack+0x15/0x1b [ 146.059426][ T7321] should_fail_ex+0x265/0x280 [ 146.059458][ T7321] should_failslab+0x8c/0xb0 [ 146.059485][ T7321] kmem_cache_alloc_noprof+0x50/0x310 [ 146.059515][ T7321] ? security_inode_alloc+0x37/0x100 [ 146.059570][ T7321] security_inode_alloc+0x37/0x100 [ 146.059639][ T7321] inode_init_always_gfp+0x4b7/0x500 [ 146.059678][ T7321] alloc_inode+0x58/0x170 [ 146.059771][ T7321] alloc_anon_inode+0x1e/0x170 [ 146.059805][ T7321] aio_setup_ring+0x91/0x760 [ 146.059904][ T7321] ioctx_alloc+0x2c4/0x4e0 [ 146.059935][ T7321] __se_sys_io_setup+0x6b/0x1b0 [ 146.059962][ T7321] __x64_sys_io_setup+0x31/0x40 [ 146.060066][ T7321] x64_sys_call+0x2eff/0x2ff0 [ 146.060152][ T7321] do_syscall_64+0xd2/0x200 [ 146.060188][ T7321] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.060242][ T7321] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.060320][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.060348][ T7321] RIP: 0033:0x7f4225caec29 [ 146.060369][ T7321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.060386][ T7321] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 146.060411][ T7321] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 146.060423][ T7321] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 146.060435][ T7321] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 146.060449][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.060464][ T7321] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 146.060488][ T7321] [ 146.302708][ T7322] 9pnet_fd: Insufficient options for proto=fd [ 146.397913][ T7324] dummy0: left allmulticast mode [ 146.415018][ T7324] bridge0: port 3(dummy0) entered disabled state [ 146.452782][ T7324] bridge_slave_0: left allmulticast mode [ 146.458495][ T7324] bridge_slave_0: left promiscuous mode [ 146.464844][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.512783][ T7324] bridge_slave_1: left allmulticast mode [ 146.518471][ T7324] bridge_slave_1: left promiscuous mode [ 146.525111][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.537111][ T7324] bond0: (slave bond_slave_0): Releasing backup interface [ 146.551243][ T7324] bond0: (slave bond_slave_1): Releasing backup interface [ 146.576136][ T7324] team0: Port device team_slave_0 removed [ 146.596293][ T7324] team0: Port device team_slave_1 removed [ 146.614772][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.623191][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.641951][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.650119][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.687063][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.711726][ T7328] gretap0: left allmulticast mode [ 146.716897][ T7328] gretap0: left promiscuous mode [ 146.722042][ T7328] bridge0: port 1(gretap0) entered disabled state [ 146.796164][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 146.831947][ T7334] FAULT_INJECTION: forcing a failure. [ 146.831947][ T7334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.845107][ T7334] CPU: 0 UID: 0 PID: 7334 Comm: syz.5.981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.845138][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.845151][ T7334] Call Trace: [ 146.845158][ T7334] [ 146.845165][ T7334] __dump_stack+0x1d/0x30 [ 146.845193][ T7334] dump_stack_lvl+0xe8/0x140 [ 146.845223][ T7334] dump_stack+0x15/0x1b [ 146.845244][ T7334] should_fail_ex+0x265/0x280 [ 146.845275][ T7334] should_fail+0xb/0x20 [ 146.845300][ T7334] should_fail_usercopy+0x1a/0x20 [ 146.845326][ T7334] _copy_from_user+0x1c/0xb0 [ 146.845475][ T7334] ___sys_sendmsg+0xc1/0x1d0 [ 146.845534][ T7334] __x64_sys_sendmsg+0xd4/0x160 [ 146.845643][ T7334] x64_sys_call+0x191e/0x2ff0 [ 146.845667][ T7334] do_syscall_64+0xd2/0x200 [ 146.845783][ T7334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.845866][ T7334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.845902][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.845985][ T7334] RIP: 0033:0x7f4225caec29 [ 146.846000][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.846023][ T7334] RSP: 002b:00007f4224717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.846046][ T7334] RAX: ffffffffffffffda RBX: 00007f4225ef5fa0 RCX: 00007f4225caec29 [ 146.846058][ T7334] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 146.846069][ T7334] RBP: 00007f4224717090 R08: 0000000000000000 R09: 0000000000000000 [ 146.846080][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.846182][ T7334] R13: 00007f4225ef6038 R14: 00007f4225ef5fa0 R15: 00007ffeb1be2fd8 [ 146.846251][ T7334] [ 147.157694][ T7340] FAULT_INJECTION: forcing a failure. [ 147.157694][ T7340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.170845][ T7340] CPU: 1 UID: 0 PID: 7340 Comm: syz.4.984 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.170959][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.170976][ T7340] Call Trace: [ 147.170984][ T7340] [ 147.170994][ T7340] __dump_stack+0x1d/0x30 [ 147.171017][ T7340] dump_stack_lvl+0xe8/0x140 [ 147.171039][ T7340] dump_stack+0x15/0x1b [ 147.171128][ T7340] should_fail_ex+0x265/0x280 [ 147.171192][ T7340] should_fail+0xb/0x20 [ 147.171252][ T7340] should_fail_usercopy+0x1a/0x20 [ 147.171283][ T7340] _copy_from_user+0x1c/0xb0 [ 147.171321][ T7340] ___sys_sendmsg+0xc1/0x1d0 [ 147.171368][ T7340] __x64_sys_sendmsg+0xd4/0x160 [ 147.171418][ T7340] x64_sys_call+0x191e/0x2ff0 [ 147.171440][ T7340] do_syscall_64+0xd2/0x200 [ 147.171486][ T7340] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.171524][ T7340] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.171560][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.171629][ T7340] RIP: 0033:0x7fe0c9c2ec29 [ 147.171644][ T7340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.171689][ T7340] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.171713][ T7340] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 147.171728][ T7340] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 147.171743][ T7340] RBP: 00007fe0c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.171759][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.171773][ T7340] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 147.171797][ T7340] [ 147.199958][ T7342] loop5: detected capacity change from 0 to 1024 [ 147.379785][ T7342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.386761][ T7342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.466164][ T7342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.897069][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.091836][ T7366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7366 comm=syz.1.994 [ 148.556993][ T7378] loop2: detected capacity change from 0 to 512 [ 148.583554][ T7378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 148.594322][ T7378] System zones: 0-2, 18-18, 34-34 [ 148.609439][ T7378] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.621106][ T7382] loop1: detected capacity change from 0 to 512 [ 148.629925][ T7378] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.997: bad orphan inode 13 [ 148.651529][ T7382] EXT4-fs: Ignoring removed nobh option [ 148.687097][ T7378] ext4_test_bit(bit=12, block=18) = 1 [ 148.692604][ T7378] is_bad_inode(inode)=0 [ 148.696805][ T7378] NEXT_ORPHAN(inode)=2130706432 [ 148.701756][ T7378] max_ino=32 [ 148.704970][ T7378] i_nlink=1 [ 148.721932][ T7378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.739989][ T7382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.998: corrupted inode contents [ 148.772500][ T7378] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.997: deleted inode referenced: 12 [ 148.772737][ T7382] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.998: mark_inode_dirty error [ 148.845871][ T7382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.998: corrupted inode contents [ 148.888616][ T7382] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.998: mark_inode_dirty error [ 148.925164][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.928952][ T7382] __quota_error: 204 callbacks suppressed [ 148.928976][ T7382] Quota error (device loop1): write_blk: dquota write failed [ 148.981326][ T7382] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 148.996919][ T7386] loop2: detected capacity change from 0 to 8192 [ 149.011368][ T7386] syz.2.999: attempt to access beyond end of device [ 149.011368][ T7386] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 149.026150][ T7382] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.998: Failed to acquire dquot type 0 [ 149.041777][ T7382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.998: corrupted inode contents [ 149.053926][ T7386] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 149.061912][ T7386] FAT-fs (loop2): Filesystem has been set read-only [ 149.070781][ T7386] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 149.071559][ T7387] tipc: Started in network mode [ 149.078835][ T7386] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 149.083794][ T7387] tipc: Node identity fe0f7d10fd63, cluster identity 4711 [ 149.083897][ T7387] tipc: Enabled bearer , priority 0 [ 149.083977][ T7382] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.998: mark_inode_dirty error [ 149.102459][ T7387] syzkaller0: MTU too low for tipc bearer [ 149.122956][ T7387] tipc: Disabling bearer [ 149.128789][ T7382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.998: corrupted inode contents [ 149.161806][ T7382] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.998: mark_inode_dirty error [ 149.194036][ T7382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.998: corrupted inode contents [ 149.229376][ T7382] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 149.244557][ T29] audit: type=1326 audit(2000000014.780:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.290311][ T7382] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.998: corrupted inode contents [ 149.309624][ T29] audit: type=1326 audit(2000000014.800:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.333969][ T29] audit: type=1326 audit(2000000014.800:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.357558][ T29] audit: type=1326 audit(2000000014.810:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.364961][ T7392] loop2: detected capacity change from 0 to 2048 [ 149.381835][ T29] audit: type=1326 audit(2000000014.810:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.411746][ T29] audit: type=1326 audit(2000000014.810:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.435424][ T29] audit: type=1326 audit(2000000014.810:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.458864][ T29] audit: type=1326 audit(2000000014.810:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf43f7ec29 code=0x7ffc0000 [ 149.484676][ T7382] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.998: mark_inode_dirty error [ 149.497671][ T7382] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 149.508513][ T7382] EXT4-fs (loop1): 1 truncate cleaned up [ 149.527888][ T7392] loop2: p2 p3 p7 [ 149.533175][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.591323][ T7382] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.680902][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 149.694130][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 149.743149][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 149.758869][ T7411] $Hÿ: renamed from bond0 (while UP) [ 149.768680][ T7411] $Hÿ: entered promiscuous mode [ 149.785008][ T7412] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1009'. [ 149.816346][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1007'. [ 149.847133][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.096664][ T7434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7434 comm=syz.1.1016 [ 150.127979][ T7434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=7434 comm=syz.1.1016 [ 150.208312][ T7441] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=7441 comm=syz.5.1017 [ 150.321337][ T7451] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1021'. [ 150.327905][ T7452] loop4: detected capacity change from 0 to 512 [ 150.351402][ T7449] loop1: detected capacity change from 0 to 512 [ 150.372489][ T7452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.391845][ T7452] EXT4-fs (loop4): 1 truncate cleaned up [ 150.405432][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.419901][ T7449] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.432448][ T7452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.597119][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.642239][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.664612][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 150.694561][ T7461] loop4: detected capacity change from 0 to 512 [ 150.698246][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.732035][ T7461] EXT4-fs: Ignoring removed nobh option [ 150.774855][ T7461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1022: corrupted inode contents [ 150.794705][ T7461] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1022: mark_inode_dirty error [ 150.796926][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 150.819622][ T7461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1022: corrupted inode contents [ 150.834316][ T7467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.841725][ T7461] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1022: mark_inode_dirty error [ 150.861956][ T7468] vlan2: entered allmulticast mode [ 150.865578][ T7461] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1022: Failed to acquire dquot type 0 [ 150.867217][ T7468] bond0: entered allmulticast mode [ 150.895134][ T7461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1022: corrupted inode contents [ 150.907342][ T7461] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1022: mark_inode_dirty error [ 150.920255][ T7461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1022: corrupted inode contents [ 150.932833][ T7461] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1022: mark_inode_dirty error [ 150.946212][ T7461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1022: corrupted inode contents [ 150.978837][ T7461] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 150.993630][ T7473] vlan0: entered allmulticast mode [ 150.998884][ T7473] bond1: entered allmulticast mode [ 151.006978][ T7461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1022: corrupted inode contents [ 151.028859][ T7461] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1022: mark_inode_dirty error [ 151.031123][ T7479] netlink: 'syz.5.1027': attribute type 10 has an invalid length. [ 151.055364][ T7461] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 151.055448][ T7479] dummy0: left promiscuous mode [ 151.075572][ T7479] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.079919][ T7461] EXT4-fs (loop4): 1 truncate cleaned up [ 151.097254][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 151.108359][ T7461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.121702][ T7461] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.148497][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 151.170270][ T7492] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 151.313082][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.424340][ T7503] FAULT_INJECTION: forcing a failure. [ 151.424340][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.438404][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz.4.1034 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.438439][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.438453][ T7503] Call Trace: [ 151.438515][ T7503] [ 151.438525][ T7503] __dump_stack+0x1d/0x30 [ 151.438552][ T7503] dump_stack_lvl+0xe8/0x140 [ 151.438576][ T7503] dump_stack+0x15/0x1b [ 151.438657][ T7503] should_fail_ex+0x265/0x280 [ 151.438688][ T7503] should_fail+0xb/0x20 [ 151.438715][ T7503] should_fail_usercopy+0x1a/0x20 [ 151.438751][ T7503] _copy_from_user+0x1c/0xb0 [ 151.438790][ T7503] ___sys_sendmsg+0xc1/0x1d0 [ 151.438830][ T7503] __x64_sys_sendmsg+0xd4/0x160 [ 151.438867][ T7503] x64_sys_call+0x191e/0x2ff0 [ 151.438947][ T7503] do_syscall_64+0xd2/0x200 [ 151.439064][ T7503] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.439095][ T7503] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.439147][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.439175][ T7503] RIP: 0033:0x7fe0c9c2ec29 [ 151.439195][ T7503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.439218][ T7503] RSP: 002b:00007fe0c868f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.439317][ T7503] RAX: ffffffffffffffda RBX: 00007fe0c9e75fa0 RCX: 00007fe0c9c2ec29 [ 151.439334][ T7503] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000006 [ 151.439349][ T7503] RBP: 00007fe0c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.439364][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.439413][ T7503] R13: 00007fe0c9e76038 R14: 00007fe0c9e75fa0 R15: 00007ffc15ba93f8 [ 151.439438][ T7503] [ 151.713307][ T7512] loop4: detected capacity change from 0 to 512 [ 151.720723][ T7499] ================================================================== [ 151.728844][ T7499] BUG: KCSAN: data-race in cgroup_freezer_migrate_task / handle_mm_fault [ 151.737294][ T7499] [ 151.739627][ T7499] read-write to 0xffff888109b936c8 of 2 bytes by task 7511 on cpu 0: [ 151.747702][ T7499] handle_mm_fault+0x20ae/0x2c20 [ 151.752681][ T7499] do_user_addr_fault+0x636/0x1090 [ 151.757822][ T7499] exc_page_fault+0x62/0xa0 [ 151.762360][ T7499] asm_exc_page_fault+0x26/0x30 [ 151.767234][ T7499] [ 151.769664][ T7499] read to 0xffff888109b936c8 of 2 bytes by task 7499 on cpu 1: [ 151.777309][ T7499] cgroup_freezer_migrate_task+0xac/0x290 [ 151.783059][ T7499] cgroup_migrate_execute+0x288/0x7f0 [ 151.788478][ T7499] cgroup_apply_control+0x3ab/0x410 [ 151.793745][ T7499] cgroup_subtree_control_write+0x7d5/0xb80 [ 151.799680][ T7499] cgroup_file_write+0x194/0x350 [ 151.804641][ T7499] kernfs_fop_write_iter+0x1e8/0x300 [ 151.809958][ T7499] vfs_write+0x527/0x960 [ 151.814228][ T7499] ksys_write+0xda/0x1a0 [ 151.818586][ T7499] __x64_sys_write+0x40/0x50 [ 151.823211][ T7499] x64_sys_call+0x27fe/0x2ff0 [ 151.827918][ T7499] do_syscall_64+0xd2/0x200 [ 151.832543][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.838454][ T7499] [ 151.840795][ T7499] value changed: 0x0061 -> 0x0001 [ 151.845932][ T7499] [ 151.848268][ T7499] Reported by Kernel Concurrency Sanitizer on: [ 151.854513][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.2.1031 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.864266][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.874341][ T7499] ================================================================== [ 151.885682][ T7512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.896678][ T7512] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 151.896719][ T7512] EXT4-fs: failed to create workqueue [ 151.912400][ T7512] EXT4-fs (loop4): mount failed [ 152.098361][ T7505] loop5: detected capacity change from 0 to 512 [ 152.120252][ T7505] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.132158][ T7505] EXT4-fs (loop5): 1 truncate cleaned up [ 152.138371][ T7505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.184228][ T4988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.