last executing test programs: 1m37.192890548s ago: executing program 1 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@local, @mcast2, @dev={0xfe, 0x80, '\x00', 0xc}, 0xd, 0x7e04, 0x4, 0x400, 0x8, 0x8081, r4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f00000014c0)=""/137, &(0x7f0000000080)=0x89) 1m37.164507459s ago: executing program 1 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m37.146255959s ago: executing program 1 (id=973): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) fallocate(r0, 0x22, 0x9, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1e2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x40004, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200030000000000000000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x30891, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x10202, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7f11, &(0x7f0000000700)={0x0, 0x5643, 0x2, 0x0, 0xaa}, &(0x7f0000000780), &(0x7f00000007c0)) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x80, 0x28000, 0x44024e}, &(0x7f00000001c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x2, 0x31, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x2, 0x0, 0x400}], 0x1) sendfile(r3, r3, 0x0, 0x800000009) 1m36.289772426s ago: executing program 1 (id=991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="f457ed223faf8dac531b8a8872943ada6e1305670d2a306c4581b6ac2e199252c8f9e17718453917dc64e8e39832aff8b6388741b196122d9bde5beb562d2c54773a8ff38875", @ANYRES16=r6, @ANYBLOB="0400fffffffffedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ustat(0x8000000000000001, &(0x7f0000000000)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000001f80)=[{{&(0x7f00000008c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000a00)="59c72b3167a4bee08573184d4eb6018e804b9cb38b43cacec5809e9971ae8b687572daa7efc9e4a998e0e63db9291e99dc0477b1ccae8cf78bdd22b701156fd65e085b945162a367022707192019e90a70bb7a8d297eec861b3bf9c38d44f64e1ca94e0a144d30c54de01641169f1a21726de8e8e1d103725e1246cc64a96daabb", 0x81}, {&(0x7f0000000ac0)="0025e72eb49cf10620ebeef449c77e6ce03e8445d49adc187c0c71bb9eb06f058407d6a3ea1c818c99d2ecdcf35364270165e73eae333064c708b03341573f04675aabb1bd7294644346f655c9be6070475966f3cc0ca61bd3481de416b6b1", 0x5f}, {&(0x7f0000000b40)="87b2c24a4371a5ff64b7e3600503ba5aafd97b4a755bfbb9f07a36bb0bdc4099e4f309e3ce9e4066df683871a32d0978f3dd35bb5c38b1d05efda3f24d541fecf93263ef94cfa3fe8a5e85119818620c3875559f71d2bfa5608493b4ccde545589db0113b631fc4e886ff546359d52777ad6e417752aae771dffa60e5aae180de9eaade9d7da86f054e36780c477f01d997980d41b1dbb0bf70843b11c759434edbd5ada8bf21aef32b6e140ae0371af08120a61ddf141928028cfb7da9bd4ee69b4b1191b93c5ab25040d66a9517d9c4c10bac680", 0xd5}, {&(0x7f0000000900)="059cd5aa8beb69b3e0a7091e33c5fbda354c129d43953194ae23ec4c661dda29c2ab0bda32688496105534f620f3f784ce", 0x31}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="6361448a7aa0d3fae53ff57e9ae3a88b55e6524144d1d56d1ed4029a58e7858d4ddf1c4fa4fb0e6833faf3b5b3c6e502ddbe9974128ea7453ca442e6510d39b8898ae2dafffa7f70f3492ba7f376d4439769eef2e8b6fd8d9b26", 0x5a}, {&(0x7f0000001cc0)="91", 0x1}], 0x7, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xb4, 0x3, 0x5, [{@rand_addr=0x64010100, 0x3}, {@local, 0xfffffffc}, {@rand_addr=0x64010102, 0xfffffffe}, {@multicast2, 0xb696}, {@multicast1, 0x2020000}, {@broadcast, 0xa}, {@private=0xa010100, 0x48}]}, @ssrr={0x89, 0xb, 0xa9, [@remote, @multicast2]}, @noop, @timestamp_addr={0x44, 0x24, 0x63, 0x1, 0xd, [{@loopback}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xfffffff8}, {@empty, 0x4}]}, @noop, @generic={0x7, 0x7, "350bd15b46"}, @timestamp={0x44, 0x1c, 0xff, 0x0, 0x7, [0x64c, 0x8000, 0x8, 0x735c2eb3, 0x0, 0x8d92]}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x6}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x28, 0x1, 0x4, [{@empty}, {@multicast1, 0x5}, {@local, 0x400}, {@multicast2, 0x9}, {@empty, 0x7}]}, @end, @rr={0x7, 0xb, 0x7e, [@private=0xa010100, @empty]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xef, 0x3, 0x5, [{@broadcast, 0x1}, {@private=0xa010101, 0x9}, {@remote, 0xd}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010102, 0x7f}, {@rand_addr=0x64010101, 0x4}, {@empty, 0x7}]}, @noop]}}}], 0x1a0}}], 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m35.126966349s ago: executing program 1 (id=1000): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0xffffffffffffff6c) 1m34.709126357s ago: executing program 1 (id=1002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2121, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000000010000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001000000000000000000000a17f7227c45a6f5cd0218d16b22fa60a611e2df4b5b0453a4d2bc3fe57278ac0ba1d603afbffffffffffffff0543c42f0111409c6a550a1cd6adec5888292e03acdb612e4e806cb8b881225c9cc3c7dc0140e920741b8ee61a9130afc7deb7a7fec16b326c558399a3819c1813a0ee19fc5cece349af6e0f8227fac1fe1bf71d9ad4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1m34.682339397s ago: executing program 32 (id=1002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2121, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000000010000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001000000000000000000000a17f7227c45a6f5cd0218d16b22fa60a611e2df4b5b0453a4d2bc3fe57278ac0ba1d603afbffffffffffffff0543c42f0111409c6a550a1cd6adec5888292e03acdb612e4e806cb8b881225c9cc3c7dc0140e920741b8ee61a9130afc7deb7a7fec16b326c558399a3819c1813a0ee19fc5cece349af6e0f8227fac1fe1bf71d9ad4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2.858802914s ago: executing program 3 (id=2686): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 2.777332536s ago: executing program 5 (id=2687): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_destroy(r3) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x22) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) fcntl$setlease(r4, 0x400, 0x0) close(r4) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7f, r0, &(0x7f0000001cc0)="e2381cfb4a8b93cbc88d2d4695bffece1a0a1d024a48460a675c5f50c2e39a85f4a044d925e7fcb68bb58d029016af9d409bde9902e744955101084d2884f2e67028090056872b6f798829b1f103525fa3ddea9f4e2868ea9b3f082b2fc2a1577c73710965820f12c800dac29835c3cf8b0b230124efa844f5e7a8b56e9f124802470d79060b07a13a44bea720b136cf4011e2f4c873336fb85abdef36ff19388e272f18746b560ca6c9fac31f1b4dd77197ca89a167f9939f4fae770ed12a4f0508562514d91ba09f565180ff6f4ec14de6d8ac25eb7f443f113dd435e4e3ade85d01f1143b59380709dd5114bdf8d192518bcb2a181933bd7eb77c4091ddb295bd681b15a9c6257c1b9b749dc1a4aebbb871cdaf3ca184b39b4cb7c3c2860ab491b8d5a1cc0d81bbcf747b8b4ae112af367df1b68ece8036005241c02927bd477e2bf3881636235329c18207f55b2f1834c913463f0450ab664df0c97b1ad48cc595b33acdfd5155a01c4355317e019ed032d701c6d80e96f4a9f6351edebafab82ec850aeec488683fc06e41b9e6fd6f5969b73ab972e1d5286be9d85a3e34efe3092f173220ce92ff173c506f91c6fe535464d240ddd31e92a5d4d7321e2b98e9bc9138183ece9d32caf8e3a64444fe659acf761a66b7147f58e65e2911b18826467e2f672433a9c1a56684698b0f8739ce92f32dbe1346398aba7ce2d4f5efddf7e5a47f8916fd290ffabb4210c0139343d06c30b12d25bc94132a79b2fa929112e491bf936417adca042204419c4af11136fae0c0b8e2e19b0918737037e91518325effcb5a88efcff1f191fc6cd79b75f7716c9d5a7e06e46026b2f3d673530149ed90acdddd8ace2b0c84a35deaac8dffc81d864aeb4f1de27efb672a2e2aa57bffd7c63c423f6390ce5bc1f56d85231b095433e498ed1258ad7020f98dff6ed229e1b10b6470477c1f0e446c0399d7ebb595ebe4cf25b2135675e768fe1ef9bc85c36d6de0bacc2921143aceedc8fbfb8bbc578d391889a4ea083678b5d6060b7ff02e0af2fee163f9cb1d22dfa762dda15662b9df88b5156827f26d8278b1155853e82ab2f26b7c7f5a59ee7288780e553da97e01e4a9ed0d6042715575f49162263ab6924dcc9b18068e81581d53619c95f38487f4f128425cd2c76c5a0254ec9e614156c802e6d8a59c9550a5d7c9c3f23ba345f0b3c91fcccb5833595cc083e3b46f143550b07a719ebf6d802df50405ebe692a9070a536d2fec6967f69ab09029334222f7c29080265a91fd361e58d7db2641665b66234a2039d81ccda47e7b897670b11d91ae5061a4362f23c2c26efc7770437cef3dcc4710b56ecd74bb8abb35e6935b052b468fc47c1b9f162a16bccca8702e1e170cc3d651da5e06ea5034bfcd0976cb6ed105a5d22f8d30c4f2e203336ee8b9ce28000d05d8d68a1fd22505a8f6b51584f9eef0c0e6ed83562636f6bd58c742be8d85e2c83f29a02683fc36a0ccdd9d9351b530d6f0357abbc8dd5f25fb342ac429c806b7ae9b72d8c0c9ad462d5b8581cd5c6a013afcf5829aa1b77ae1828fc9bdab7c73588b7c394d1928dc45fb7f0b209cdeeb8739b8f14510ea2bb8487b2a3d6c31407074bfb4a76a03945cad291e94f97add7aaef17b81591c24ed2c104600c80f7fba2f950e2422641601584d081fa707c54e144f111bd5f78d55114454a236e4f7477911637f4cda023e6e7963d11a21bd335e858231d596850485ca009270bdff11978eede052ff0c1c00ec79d902216b74e5575b2e44ddacdf52243b8fca93953101b712760e46837aeb07b802940396ddb48c2ffbb6e42b5b0a1b8b6c62ed0fca936356b38417b18981f856e95c63bbc42ab56c8e11355f2a71c795c9ca6b16dcfbb56ad9d3d04e175f2de5d14c97be2a7c4cd93b7aa9260b42b3ad843aeee2b24045596ab554a9e65df1da239c2df4eb66d0a9e2cb1b1d7622f8df5da1f254e028abdf3bfba337e8535081b8ceb45ea3e20155b82be1f88584ef75f16c65d4efdf8b8fecc2afe427c404c5d2a618a54773f39739d77864c9ca7819d377ea61121ea832c57aea2cde159bb5f361a465253c7d175f65df730948c1e683cd7399b3de1f25bb6517c97cc7165a36fd02ab352ff056c916945557823436aa02da4e292963d2d494c58eca70f084ad2400c2c903d4261eed7e9a006a18d3ff23497264526016db31ad77766035521b30ef089ed0cd7a03803c87df9799052abfae4e09cb1505a13dde3ed5f5d0a8ab7fac9a940db0a84ced173f36d12d55e5ee426084a49c2efe41239feb10c7bd9c74fbc5c045967b806172bd71291c8f6016645d1e9b8d54a6297be7eb03b64a849e78e29a5ad464bc8b219e6c03177a49cf7652ea26bad21f55721f440b06bcd25b6d90c1d5522631944d8166a79dc2714f197120b3bd30a062a3be5038d5a8a6b25371aadb0ffd43bfa6a275594fc92224a224d9d4f1147152fa3c10225766d00e9afe38b559907ed799f4f59d0d1712366cccdada2e24892d3ca5bda49a53eda1c82862783a7fa8dc122aa00ec5a2cb822b483bda774362e8efacf889cdf9ee20e08cd0f9d4a1ec61b6a1fd4070c7c2c93ff0902dcebdcd028c4898cc1172074c2b13336116335a7eeabd80fa3160734f04ed9c5b2026a69360921a3e993fe9f985201510c487e5d26c8ea9f6ac34207974b66923ac59ffa822fc3f698ff5dbc3c22887c3f80b75db78a669b2a98014ffa555de4fb5be489cd938fd99f8e8c6d18da0df36fff64cc88b8d5207b88af7b13e2fd1173ecceb863e23ef6881b15eaf3404d8016da00bcb7019d14918334a990743aa46ba4bf8f6f78ef5c5db0887d6735606eb3aa940635b8fb10fa848c335d37addc44536631ebbb1c90a62dfbd3aebb430ce6167fc0191f67025be6dcbc812ea370aab0ffa82f8f0403bc4b9046ff74084b8f1c6b9326bf8e5ca6051b761baa46ae01f9016f42b337903aab7b4d5646520808497c45167d3dadcf2bb74e19a443c9733ead8100db52e818ede947401dde160713f14152d60fc33128853336be97285279fc98359e2fedf48b7750f720397269dbfda3c2ff293d86eaab57a11dbf39cd9a949441a4e9c4a5b54ffb18a49539ef8029b6fdc000a2affdec7193212456b55fe37606866ae29b544ffe386fe757782bf2e6e43af5cfbf7e1c7c2fc52a0556613c977a36b2d8783acc1b37ba19e7ebb66d71a9563920d4014d80e396d7cc1bd4a0eb2729f9ac7cc7a9430c6a5502fea86caa090126956cce42ed6ac1c77fe0f01ca9fbfe23f45ce65102f49bdb54707febf91357e498004e6ddb694d12585cd7329b36e7c1b4d213050526fe369b4808e67a0f910d0862abcee21923f4f5eb50dc4f0f715786530d06d4d09fccc6716dcb6ea3aadb3e4344a60bfcc4db868b3d427f3c225eaca3cf0b943c03ce357370401703547236f971b70a4f0022155e46ab26684c8cea54a65f6d09d454d09d0241833f19b48cdaace93f49f269483c59e960bf1f64ea35ae9d84c39572319f33bd0a3ef026d4a6dd5be74a9f02221c18257416a7308dcf1c3b599fb8426a860dbef321e0d1dc707a8ac670959e1543cf403a05392fd8af616f655af18a47cc80a129a4fc4a74342b43bd260a7bc8eecd60d08c48f8afb181b8362eb741dd59e0add3ab9812b578918fe2762e3f46f82f0e5b7202b3414989ccd511c9bcc502f0dd675331f8bc385f47633dd3da7aeeaf3ad1362b21b3365e7e7d9e5d30da0b6a10f56f7674b36c2fca8703741076777116fbfda7ae9889d38ba57f050f6aa3f6d1683fcb7e04b1be46263e82b2d02e74e082ca3be5ade175bf0e51a2092a5eda8cc1a4a5fa5b160cf478124d9dc70f4a84415e9202cc7ac3f42a5d2808715c2d9b3c36cee29512bbe1d4435bbec5ab9bccf2a86ddd1b5f1d2e530883116cfd1abbe87440e4b7787b74dc775ef210041ba100980ba47791c075a26b06cf8d956d853dfb06dbdfd69cd203867f4740a6b0f6a7af0edfe6c9842a7b2d0e62f3f4e1b4440b8117b72ecefee8fb58bd973e957827095d718bef44acc79c90162afd65a1b7b1ab2388439609af6ce896d79aa3dc04914dde7583e1a254cd92d5d9225b5944d35dc18d81784ce93e65dc10cb27140cf3936bd199be32bf23dec980f6626b2a52e140aee7f7aff4f3925d6b42d5910850017f5018b7c46c25741dfbd914efef14d7434758b058d8314597f47b3a2a9b33fc2b4d691ce0c517df140f35dbb828eb3ad0451120cef1ee38ae93af9fadd75e957b85651e4f1dd812903135ecb3d0471ba4d78c17287d532b996fb2a9402335012b385dd8e87eb0cb2f8f13459ee11a4c987f237b00bf94d44f0be77fcd455c5ff0108d73209699f9b1e67463ba3597d6e285c4256c751a2f307f0c1a56caec3b0fe6d46a279da03ec344a5fd899a08da3ae205790b1d5d3ba559fa3da0a7f0e183d2e9b3fb64a1f73062573bcc8101dbc112a1c79fc95e495bc4a7832be68ccb0c720f39ae7aa1804335f078fabfa40648e46229a0a8ee6225c2af04bedd2c06238937b3cdc0beaf57605c1f3de53a49bdb7af5f1b014000ef0caa13e6251b358b79a6d72ef6356120a35f8c309a12a8af987c34a3e43a27568b804cd7b6d099d25a199cc64ef6fda3528a8007eda3dd9a2c44ab458d9f8ae2bea5156e7d0c2cc8864d4b257a205d56f84a3e6ae4c82f5d41455250fbcb4e923eda9787fc731c19124218a55de89d46ab3982bb04143ef503cb6e4764f157be5d82415563a375f142a3f27874f92c9c2e99c703cb0ad0f3886149479efb934ec75f46fd22a5ad51cba27b1c77242cc93bc6807a9badcbc0596ebbb682e3e837d6134ee27c8fe1c28b97cc43ccd8c13c50a65bc83668a4833b400d21aad35e1782cb69a0041d169138290ff03c39048d222751bb6f884f8e672041633aa95586f1043923cf3218be419952b3e89416da11670458ba83dcc30cf1f2c16c5c1271ecca7399232d7e794856aff3c6c203a84ceeeb762a981148b952c991b9e15469e5271c8858ee222db2e408186b01bd85bbd3950582554f742137a62456c0b752d13375da9ee1f47cc65d261868dae05ec81a92bf733644622b33110994959731f54ae75a1a998fc45a221a8c1f768188f44935119c7e484d7d59cc6fcc9f939c4ed7daeb39cc350950604ac7f7692a22610dfd28186e3d2d7547a33ab14c7438b0bb94c5d6fb9edc4dcd8f51507b94cfab3acd847a53726786b003415efb0940496afc25b472788b57a568aac2e896a2bd7f5503a9df57f897b2352d4e78de5e885fc8f8ac510c22771a1ca50431d9b8de2dd1bb25abf42b6008381c1231efda819593ebe485904fd346a06d62ec9f486264c5333e297663dc71f658e129e7c55850acc9a331bc9a806d1f8a506938b4c6046501c2a1abdadd11ff09596bf0c930cfbabb20b8e0c91af8659d5ab8e15bb15e6310ed46908cf9fa010a5290306bde14f149900c099e7cc8fa60009239e9bb7552d4fdf733bc080667a82caa59402e09b8b31ec947ce9ac97e479029f58be78d42bfb46829764ea3b1469346fc69fcf994f99c3588506f8eec00234e921f72337698d915f0a2a8bc14f343a739f252ec903127ef44b40a7828773b8a9737da106ec730856500eda0ec07a655375d01037d77a85731239b12cfac527a411a2508d963a67811659033d19e89ed68b0cb2d0f4e4a066d7fc22c4b04f4d36e3f80dd5dc9538909cb90e0684a40c0", 0x1000, 0x6, 0x0, 0x0, r4}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0xffa8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r9, @ANYRES32=r2, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) syz_emit_ethernet(0x2fd, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES8=r8], 0x0) 2.390805923s ago: executing program 3 (id=2690): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setitimer(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00)=0x8000000, &(0x7f0000000280)}, 0x20) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) write$char_usb(r8, &(0x7f00000002c0)='AS', 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='rxrpc_client\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$FITHAW(r2, 0xc0045878) 2.268890205s ago: executing program 3 (id=2693): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x465, 0xe62, {{0x6, 0x4, 0x3, 0x2e, 0x18, 0x64, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@noop]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x40002, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='i2c_slave\x00'}, 0x18) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000000), 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x6c, 0x29, 0x800, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {0x10, 0x9}, {0xe, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x81}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) r11 = syz_clone(0x8000, &(0x7f0000000180)="9ef3399cbb7755c63342040b284bf44b5702fbe687543e4dcf4fb461c4a78c1d68c00f126163f96cbc900aefeae5a1cb48a8978e7ee4f1574e20516b1ea5196385742eb64ae92e89c6", 0x49, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000280)="a237022c9a4df953a2f07fa744786d220d2fa21cfef857dd0ad92392fd1c0c0dd08100f59f5685b80b9395b041b2682a54a2f11b1f9143cd3df7d33646cf2de067d0a9362a4c9643c3bf0eb3a6955baa1b1ce77287e7b7e0da8593e0805bb16aafcd07e1c3d42fa0651eef5be8d83129a090e319f08dfbb75cc0cfcf2c658ec5fa1f59a0d234feaa0ef2c60f888dc1894b1dfcf3a354087ddc450c95335630f9512ea73d149592") ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000340)=r11) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x20008000) 2.087876099s ago: executing program 5 (id=2695): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) time(0x0) 2.075260299s ago: executing program 3 (id=2697): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2.010273351s ago: executing program 5 (id=2698): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0100008000ee00000000000000007d9518800040", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$link(0x8, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x53d642, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000880)=[{0x4, 0x0, 0x0, 0x7ffc1ffb}, {0x3ff, 0x8, 0xf3}]}) 2.003315541s ago: executing program 3 (id=2699): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000dc79acda40e87c75110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x942b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.949640761s ago: executing program 3 (id=2700): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) 1.360666253s ago: executing program 4 (id=2714): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x6, 0x2, 0xd}}]}, {0x32, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cff5300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fc"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x401, 0x1, 0x3ff, 0xa0, 0xffffffffffffffff, 0x1, '\x00', r1, r0, 0x5, 0x1, 0x2, 0x3}, 0x50) (async, rerun: 32) fcntl$setsig(r0, 0xa, 0x13) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1000000000}, 0x18) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x160341) (rerun: 32) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000400)=ANY=[@ANYBLOB="308c000001"]) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711876000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0bea514e532f00000c00265050e6032ca602ef398cfea8341aeaee2d9a24e2f83dd1db50e0343a95ee1201e7a355aeb2e24018aa22d23552427cc6b89d72a98b032d749ef0ee05ceae7130767ecd24c6abd1aa439e361e65de58ad3d2c9a1c7517e46cdaa851a8d4a82aae0cbe21bc74118f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) fcntl$setlease(r0, 0x400, 0x2) (rerun: 64) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwrite64(r8, &(0x7f0000000100)='\n\\', 0x2, 0x2) (async) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.273237165s ago: executing program 0 (id=2715): prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x50}}, 0x40080c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='scmi_rx_done\x00', r2}, 0x18) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000007c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.245512045s ago: executing program 4 (id=2716): keyctl$KEYCTL_MOVE(0x18, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) (fail_nth: 1) 980.8321ms ago: executing program 0 (id=2717): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000dc79acda40e87c75110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x942b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 980.34933ms ago: executing program 5 (id=2718): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) 935.627461ms ago: executing program 5 (id=2719): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f00000002c0)={'system_u:object_r:dlm_control_device_t:s0', 0x20, 'system_u:object_r:bin_t:s0', 0x20, 0x9, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x78) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x1000, 0xfffffffc}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca159f68846960e56de42944af05000600000000000a00b9b60000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x1, 0x2022, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 932.103151ms ago: executing program 0 (id=2720): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 912.965032ms ago: executing program 4 (id=2721): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x40002, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='i2c_slave\x00'}, 0x18) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x6c, 0x29, 0x800, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0x10, 0x9}, {0xe, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x81}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) r10 = syz_clone(0x8000, &(0x7f0000000180)="9ef3399cbb7755c63342040b284bf44b5702fbe687543e4dcf4fb461c4a78c1d68c00f126163f96cbc900aefeae5a1cb48a8978e7ee4f1574e20516b1ea5196385742eb64ae92e89c6", 0x49, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000280)="a237022c9a4df953a2f07fa744786d220d2fa21cfef857dd0ad92392fd1c0c0dd08100f59f5685b80b9395b041b2682a54a2f11b1f9143cd3df7d33646cf2de067d0a9362a4c9643c3bf0eb3a6955baa1b1ce77287e7b7e0da8593e0805bb16aafcd07e1c3d42fa0651eef5be8d83129a090e319f08dfbb75cc0cfcf2c658ec5fa1f59a0d234feaa0ef2c60f888dc1894b1dfcf3a354087ddc450c95335630f9512ea73d149592") ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000340)=r10) sendmmsg(r8, &(0x7f00000002c0), 0x0, 0x20008000) 911.682762ms ago: executing program 2 (id=2722): syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz81twkAQBeBnxbEVJYo7SAUpJdc0QgX0wYkDF2qgLy6gQWubFoDD9x32Z2bfShOe6vSzb1u/3Ma2bJO8J5/tXF36DNPc/F4j50rym2F5luQjNW3uH+4OX62y+utyrapuLrxliVxq7tWY/+ODxgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl3YLAAD//2EiEKI=") r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="0b0000000000000002000000000000005de18b1018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000001000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000122, &(0x7f0000001500)=ANY=[@ANYRES64=r2, @ANYRES8=r5, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="aca08caaaf7b5d0cbfabef54cc079b2e582fa5dfa6b01e657352b5ec94dd4c61fcd387f3cf79b1ddf09c281d7ac38d14dac7f336d801af16cc927c515da3c469c5bb35bb8b745653dc190c9e320eb556bc6556f4ba6ae4872f172f6aeb9756a09db86562138c9c6064c145e612ee5d2004863f5e52ed03f4d6948cb74cf626dadda94862ce01ea7a8c5a672f2de9e74f65"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r11 = socket$kcm(0xa, 0x5, 0x0) r12 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r12, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r12, 0x84, 0x1e, &(0x7f0000000240), 0x4) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8936, &(0x7f0000000000)={r13}) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xd, &(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 856.905393ms ago: executing program 0 (id=2723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@local, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}}}}}}}, 0x0) 789.415474ms ago: executing program 4 (id=2724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x438f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x6}, 0x1c) recvmmsg(r1, &(0x7f0000000740), 0x0, 0x40002000, 0x0) 749.091935ms ago: executing program 0 (id=2725): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f0000000000080005", @ANYRES32=r3], 0x4c}}, 0x0) 621.442458ms ago: executing program 4 (id=2726): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 620.708997ms ago: executing program 0 (id=2727): syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x4000, &(0x7f0000000000)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xf9b}}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)=';', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) pipe2(0x0, 0x4000) sendfile(r2, r1, 0x0, 0x7fffeffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x40, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4d56964ed463fec0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='ext4_fc_track_range\x00', r5}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000d0007d100004000000000140085001c002300000000"], &(0x7f0000000640)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='ext4_read_block_bitmap_load\x00', r6, 0x0, 0x696}, 0x18) syz_io_uring_setup(0x6c5a, &(0x7f0000000180)={0x0, 0x1, 0x10100, 0x1002}, &(0x7f0000000340), &(0x7f00000004c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) times(0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 620.228118ms ago: executing program 4 (id=2728): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300)={[{@utf8}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@uni_xlateno}, {@rodir}, {@numtail}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@numtail}, {@shortname_lower}, {@shortname_win95}]}, 0x26, 0x34a, &(0x7f0000001f80)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket(0x22, 0x2, 0x8) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x1) 447.433781ms ago: executing program 2 (id=2729): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)={0x24, r0, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 332.355513ms ago: executing program 2 (id=2730): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) 331.341903ms ago: executing program 5 (id=2731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x44, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000880}, 0x4008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0xdd}, &(0x7f0000000040)=0x0, &(0x7f0000000ac0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r4, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r10 = inotify_init1(0x80800) r11 = inotify_add_watch(r10, &(0x7f0000000080)='./file0\x00', 0x40000012) write$binfmt_elf32(r9, &(0x7f0000000000)=ANY=[@ANYRES64=r11], 0x69) close(r9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r12}, 0x18) 217.238055ms ago: executing program 2 (id=2732): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) 68.952689ms ago: executing program 2 (id=2733): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 0s ago: executing program 2 (id=2734): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98010000060a09040000000000000000020000020900010073797a30000000000900020073797a320000000068000480640001800b0001006e75"], 0x1c0}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c0c4) kernel console output (not intermixed with test programs): 4967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 142.066834][ T29] audit: type=1326 audit(1757636064.073:31046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 142.090334][ T29] audit: type=1326 audit(1757636064.073:31047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 142.116919][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.130415][ T9881] Symlink component flag not implemented [ 142.875162][ T9963] __nla_validate_parse: 2 callbacks suppressed [ 142.875182][ T9963] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1873'. [ 142.968614][ T9965] loop4: detected capacity change from 0 to 512 [ 142.982783][ T9965] EXT4-fs: Ignoring removed bh option [ 143.017334][ T9965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.058044][ T9965] EXT4-fs (loop4): 1 truncate cleaned up [ 143.107124][ T9965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.140613][ T9981] loop2: detected capacity change from 0 to 512 [ 143.159413][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.170579][ T9981] EXT4-fs: Ignoring removed bh option [ 143.180486][ T9981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.205326][ T9981] EXT4-fs (loop2): 1 truncate cleaned up [ 143.240162][ T9981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.256185][ T9983] loop5: detected capacity change from 0 to 164 [ 143.374263][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.422207][T10032] loop4: detected capacity change from 0 to 256 [ 143.432120][T10032] FAT-fs (loop4): Directory bread(block 1285) failed [ 143.447376][T10032] FAT-fs (loop4): Directory bread(block 1285) failed [ 143.456885][T10032] FAT-fs (loop4): Directory bread(block 1285) failed [ 143.464653][T10032] FAT-fs (loop4): Directory bread(block 1285) failed [ 143.526518][T10049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1894'. [ 143.911792][T10055] loop4: detected capacity change from 0 to 1024 [ 143.947450][T10055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.960811][T10055] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.989263][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.066236][T10078] loop3: detected capacity change from 0 to 1024 [ 144.087563][T10078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.102848][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 144.118630][T10078] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.133174][T10079] selinux_netlink_send: 55 callbacks suppressed [ 144.133220][T10079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10079 comm=syz.2.1900 [ 144.154452][T10078] FAULT_INJECTION: forcing a failure. [ 144.154452][T10078] name failslab, interval 1, probability 0, space 0, times 0 [ 144.167258][T10078] CPU: 0 UID: 0 PID: 10078 Comm: syz.3.1899 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.167292][T10078] Tainted: [W]=WARN [ 144.167298][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.167310][T10078] Call Trace: [ 144.167316][T10078] [ 144.167324][T10078] __dump_stack+0x1d/0x30 [ 144.167392][T10078] dump_stack_lvl+0xe8/0x140 [ 144.167421][T10078] dump_stack+0x15/0x1b [ 144.167440][T10078] should_fail_ex+0x265/0x280 [ 144.167470][T10078] should_failslab+0x8c/0xb0 [ 144.167502][T10078] __kmalloc_noprof+0xa5/0x3e0 [ 144.167575][T10078] ? ext4_find_extent+0x16b/0x7a0 [ 144.167642][T10078] ext4_find_extent+0x16b/0x7a0 [ 144.167668][T10078] ? kmem_cache_alloc_noprof+0x186/0x310 [ 144.167765][T10078] ? rb_insert_color+0x299/0x2b0 [ 144.167804][T10078] ext4_ext_map_blocks+0x11f/0x38a0 [ 144.167878][T10078] ? __es_insert_extent+0xc27/0xee0 [ 144.167919][T10078] ? xas_load+0x413/0x430 [ 144.167958][T10078] ? __rcu_read_unlock+0x4f/0x70 [ 144.167984][T10078] ? filemap_get_entry+0x34b/0x390 [ 144.168050][T10078] ? __rcu_read_unlock+0x34/0x70 [ 144.168077][T10078] ? __rcu_read_unlock+0x4f/0x70 [ 144.168145][T10078] ext4_map_query_blocks+0xa8/0x480 [ 144.168182][T10078] ext4_map_blocks+0x330/0xd00 [ 144.168216][T10078] ? xas_load+0x413/0x430 [ 144.168273][T10078] ? filemap_write_and_wait_range+0x2f9/0x340 [ 144.168414][T10078] ? xa_load+0xb1/0xe0 [ 144.168485][T10078] ext4_iomap_begin+0x16d/0xe00 [ 144.168623][T10078] ? should_fail_ex+0x30/0x280 [ 144.168650][T10078] ? __rcu_read_unlock+0x4f/0x70 [ 144.168677][T10078] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 144.168804][T10078] iomap_iter+0x32f/0x730 [ 144.168830][T10078] __iomap_dio_rw+0x708/0x1250 [ 144.168855][T10078] ? selinux_file_open+0x2df/0x330 [ 144.168891][T10078] iomap_dio_rw+0x40/0x90 [ 144.168940][T10078] ext4_file_read_iter+0x20f/0x290 [ 144.169057][T10078] do_iter_readv_writev+0x499/0x540 [ 144.169107][T10078] vfs_readv+0x1ea/0x690 [ 144.169143][T10078] __x64_sys_preadv+0xfd/0x1c0 [ 144.169174][T10078] x64_sys_call+0x282a/0x2ff0 [ 144.169196][T10078] do_syscall_64+0xd2/0x200 [ 144.169280][T10078] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.169304][T10078] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.169372][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.169476][T10078] RIP: 0033:0x7efc3642eba9 [ 144.169491][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.169510][T10078] RSP: 002b:00007efc34e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 144.169528][T10078] RAX: ffffffffffffffda RBX: 00007efc36675fa0 RCX: 00007efc3642eba9 [ 144.169603][T10078] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000007 [ 144.169626][T10078] RBP: 00007efc34e97090 R08: 0000000000000800 R09: 0000000000000000 [ 144.169643][T10078] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 144.169659][T10078] R13: 00007efc36676038 R14: 00007efc36675fa0 R15: 00007fff70a12f08 [ 144.169678][T10078] [ 144.538022][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.588321][T10109] loop2: detected capacity change from 0 to 1024 [ 144.599111][T10116] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1909'. [ 144.618667][T10109] EXT4-fs: Ignoring removed orlov option [ 144.631642][T10109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.664773][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.680460][T10128] vhci_hcd: invalid port number 23 [ 144.860276][T10158] loop2: detected capacity change from 0 to 256 [ 144.942315][T10158] FAT-fs (loop2): Directory bread(block 64) failed [ 144.971544][T10158] FAT-fs (loop2): Directory bread(block 65) failed [ 144.988028][T10167] loop4: detected capacity change from 0 to 512 [ 145.013949][T10158] FAT-fs (loop2): Directory bread(block 66) failed [ 145.031683][T10158] FAT-fs (loop2): Directory bread(block 67) failed [ 145.048229][T10167] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1923: error while reading EA inode 32 err=-116 [ 145.065039][T10158] FAT-fs (loop2): Directory bread(block 68) failed [ 145.095385][T10158] FAT-fs (loop2): Directory bread(block 69) failed [ 145.107652][T10167] EXT4-fs (loop4): Remounting filesystem read-only [ 145.114252][T10167] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 145.129455][T10158] FAT-fs (loop2): Directory bread(block 70) failed [ 145.136452][T10158] FAT-fs (loop2): Directory bread(block 71) failed [ 145.143169][T10167] EXT4-fs (loop4): 1 orphan inode deleted [ 145.150818][T10158] FAT-fs (loop2): Directory bread(block 72) failed [ 145.158141][T10167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.171946][T10158] FAT-fs (loop2): Directory bread(block 73) failed [ 145.187493][T10167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.312528][T10180] vhci_hcd: invalid port number 23 [ 145.349485][T10187] vhci_hcd: invalid port number 23 [ 145.362469][T10190] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1927'. [ 145.823532][T10228] loop4: detected capacity change from 0 to 512 [ 145.863962][T10228] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.917890][T10228] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1933: Failed to acquire dquot type 1 [ 145.929401][T10280] loop5: detected capacity change from 0 to 256 [ 146.059468][T10280] FAT-fs (loop5): Directory bread(block 1285) failed [ 146.074074][T10228] EXT4-fs (loop4): 1 truncate cleaned up [ 146.090151][T10280] FAT-fs (loop5): Directory bread(block 1285) failed [ 146.098461][T10280] FAT-fs (loop5): Directory bread(block 1285) failed [ 146.126519][T10228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.862085][T10340] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1957'. [ 146.872001][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.884293][T10334] loop2: detected capacity change from 0 to 512 [ 146.892627][T10337] loop3: detected capacity change from 0 to 512 [ 146.913168][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 146.913186][ T29] audit: type=1326 audit(1757636069.073:31182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 146.965020][T10334] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1955: error while reading EA inode 32 err=-116 [ 147.006992][T10337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.007075][T10337] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.027534][T10337] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 147.031693][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1956'. [ 147.046331][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.055318][T10334] EXT4-fs (loop2): Remounting filesystem read-only [ 147.055343][T10334] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 147.055376][T10334] EXT4-fs (loop2): 1 orphan inode deleted [ 147.055807][T10334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.056429][T10334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.090670][ T29] audit: type=1326 audit(1757636069.073:31183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.090760][ T29] audit: type=1326 audit(1757636069.113:31184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.090859][ T29] audit: type=1326 audit(1757636069.113:31185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.090934][ T29] audit: type=1326 audit(1757636069.113:31186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.090967][ T29] audit: type=1326 audit(1757636069.113:31187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.091004][ T29] audit: type=1326 audit(1757636069.113:31188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.091104][ T29] audit: type=1326 audit(1757636069.113:31189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.091141][ T29] audit: type=1326 audit(1757636069.123:31190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.091177][ T29] audit: type=1326 audit(1757636069.123:31191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10339 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 147.133585][T10372] FAULT_INJECTION: forcing a failure. [ 147.133585][T10372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.133644][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.5.1963 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.133682][T10372] Tainted: [W]=WARN [ 147.133690][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.133714][T10372] Call Trace: [ 147.133722][T10372] [ 147.133731][T10372] __dump_stack+0x1d/0x30 [ 147.133759][T10372] dump_stack_lvl+0xe8/0x140 [ 147.133821][T10372] dump_stack+0x15/0x1b [ 147.133941][T10372] should_fail_ex+0x265/0x280 [ 147.133973][T10372] should_fail+0xb/0x20 [ 147.134077][T10372] should_fail_usercopy+0x1a/0x20 [ 147.134121][T10372] _copy_from_user+0x1c/0xb0 [ 147.134162][T10372] snd_seq_ioctl+0x127/0x2e0 [ 147.134296][T10372] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 147.134361][T10372] __se_sys_ioctl+0xce/0x140 [ 147.134387][T10372] __x64_sys_ioctl+0x43/0x50 [ 147.134412][T10372] x64_sys_call+0x1816/0x2ff0 [ 147.134463][T10372] do_syscall_64+0xd2/0x200 [ 147.134506][T10372] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.134538][T10372] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.134574][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.134708][T10372] RIP: 0033:0x7f2007bdeba9 [ 147.134729][T10372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.134753][T10372] RSP: 002b:00007f2006647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.134860][T10372] RAX: ffffffffffffffda RBX: 00007f2007e25fa0 RCX: 00007f2007bdeba9 [ 147.134876][T10372] RDX: 00002000000004c0 RSI: 0000000040505330 RDI: 0000000000000003 [ 147.134891][T10372] RBP: 00007f2006647090 R08: 0000000000000000 R09: 0000000000000000 [ 147.134952][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.135037][T10372] R13: 00007f2007e26038 R14: 00007f2007e25fa0 R15: 00007ffc7f0c50b8 [ 147.135062][T10372] [ 147.708213][T10425] veth0: entered promiscuous mode [ 148.094349][T10440] loop3: detected capacity change from 0 to 1024 [ 148.114326][T10440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.114484][T10440] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.209657][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.384217][T10458] vhci_hcd: invalid port number 23 [ 148.486821][T10473] FAULT_INJECTION: forcing a failure. [ 148.486821][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.489110][T10418] veth0: left promiscuous mode [ 148.499964][T10473] CPU: 0 UID: 0 PID: 10473 Comm: syz.5.1982 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.500098][T10473] Tainted: [W]=WARN [ 148.500108][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.500126][T10473] Call Trace: [ 148.500134][T10473] [ 148.500144][T10473] __dump_stack+0x1d/0x30 [ 148.500173][T10473] dump_stack_lvl+0xe8/0x140 [ 148.500275][T10473] dump_stack+0x15/0x1b [ 148.500300][T10473] should_fail_ex+0x265/0x280 [ 148.500335][T10473] should_fail+0xb/0x20 [ 148.500365][T10473] should_fail_usercopy+0x1a/0x20 [ 148.500402][T10473] _copy_from_user+0x1c/0xb0 [ 148.500503][T10473] ___sys_sendmsg+0xc1/0x1d0 [ 148.500563][T10473] __x64_sys_sendmsg+0xd4/0x160 [ 148.500607][T10473] x64_sys_call+0x191e/0x2ff0 [ 148.500657][T10473] do_syscall_64+0xd2/0x200 [ 148.500703][T10473] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.500744][T10473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.500854][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.500884][T10473] RIP: 0033:0x7f2007bdeba9 [ 148.500905][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.500938][T10473] RSP: 002b:00007f2006647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.500965][T10473] RAX: ffffffffffffffda RBX: 00007f2007e25fa0 RCX: 00007f2007bdeba9 [ 148.501016][T10473] RDX: 0000000004000810 RSI: 0000200000000100 RDI: 000000000000000b [ 148.501034][T10473] RBP: 00007f2006647090 R08: 0000000000000000 R09: 0000000000000000 [ 148.501051][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.501069][T10473] R13: 00007f2007e26038 R14: 00007f2007e25fa0 R15: 00007ffc7f0c50b8 [ 148.501096][T10473] [ 148.865208][T10493] Invalid ELF header magic: != ELF [ 148.878663][T10493] loop2: detected capacity change from 0 to 512 [ 148.880982][T10496] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 148.892547][T10492] loop3: detected capacity change from 0 to 1024 [ 148.904538][T10496] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 148.913315][T10493] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.936992][T10493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 148.944947][T10493] System zones: 1-12 [ 148.962302][T10493] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.970636][T10492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.983112][T10492] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.984932][T10493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1987: bg 0: block 361: padding at end of block bitmap is not set [ 149.019100][T10493] EXT4-fs (loop2): Remounting filesystem read-only [ 149.034564][T10493] EXT4-fs (loop2): 1 truncate cleaned up [ 149.034959][T10493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 149.099737][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.113808][T10520] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1994'. [ 149.150613][T10526] loop3: detected capacity change from 0 to 512 [ 149.170211][T10526] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1995: error while reading EA inode 32 err=-116 [ 149.170357][T10526] EXT4-fs (loop3): Remounting filesystem read-only [ 149.170372][T10526] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 149.170402][T10526] EXT4-fs (loop3): 1 orphan inode deleted [ 149.170823][T10526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.197675][T10532] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.1987: error -117 reading directory block [ 149.200667][T10526] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.242875][T10531] loop4: detected capacity change from 0 to 512 [ 149.285556][T10531] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1996: error while reading EA inode 32 err=-116 [ 149.285829][T10531] EXT4-fs (loop4): Remounting filesystem read-only [ 149.285844][T10531] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 149.285867][T10531] EXT4-fs (loop4): 1 orphan inode deleted [ 149.286365][T10531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.287139][T10531] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.311426][T10545] loop3: detected capacity change from 0 to 256 [ 149.316157][T10545] FAT-fs (loop3): Directory bread(block 1285) failed [ 149.318998][T10545] FAT-fs (loop3): Directory bread(block 1285) failed [ 149.319306][T10545] FAT-fs (loop3): Directory bread(block 1285) failed [ 149.319526][T10545] FAT-fs (loop3): Directory bread(block 1285) failed [ 149.484864][T10562] vhci_hcd: invalid port number 23 [ 149.508109][T10565] loop4: detected capacity change from 0 to 512 [ 149.508506][T10565] EXT4-fs: Ignoring removed bh option [ 149.509010][T10565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.522894][T10565] EXT4-fs (loop4): 1 truncate cleaned up [ 149.562737][T10565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.631702][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.710166][T10584] loop3: detected capacity change from 0 to 764 [ 149.728686][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 149.747537][T10584] Symlink component flag not implemented [ 149.781798][T10595] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2008'. [ 149.882218][T10604] vhci_hcd: invalid port number 23 [ 149.934725][T10609] loop2: detected capacity change from 0 to 256 [ 149.958030][T10611] loop5: detected capacity change from 0 to 256 [ 149.989165][T10609] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.005969][T10611] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.038687][T10609] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.049292][T10611] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.061371][T10609] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.071410][T10611] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.082408][T10611] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.084865][T10609] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.248170][T10655] loop5: detected capacity change from 0 to 512 [ 150.283672][T10655] EXT4-fs: Ignoring removed bh option [ 150.288361][T10661] vhci_hcd: invalid port number 23 [ 150.298953][T10665] loop2: detected capacity change from 0 to 256 [ 150.303243][T10655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.337581][T10665] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.371861][T10655] EXT4-fs (loop5): 1 truncate cleaned up [ 150.396882][T10665] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.406116][T10655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.453764][T10682] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.460696][T10680] veth0: entered promiscuous mode [ 150.468251][T10665] FAT-fs (loop2): Directory bread(block 1285) failed [ 150.590816][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2031'. [ 150.604698][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.680383][T10698] loop0: detected capacity change from 0 to 2048 [ 150.742152][ T5828] loop0: p2 p3 p7 [ 150.789618][T10698] loop0: p2 p3 p7 [ 150.799888][ T2994] udevd[2994]: worker [5828] terminated by signal 33 (Unknown signal 33) [ 150.828126][ T2994] udevd[2994]: worker [5828] failed while handling '/devices/virtual/block/loop0' [ 150.860907][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 150.882857][ T4992] udevd[4992]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 150.889890][ T9447] udevd[9447]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 150.907069][ T4993] udevd[4993]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 150.919173][T10753] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2038'. [ 150.950093][ T4993] udevd[4993]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 150.951363][ T4992] udevd[4992]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 150.967780][ T9447] udevd[9447]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 151.101191][T10765] loop2: detected capacity change from 0 to 512 [ 151.118124][T10769] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2046'. [ 151.127943][T10767] loop0: detected capacity change from 0 to 512 [ 151.141666][T10765] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2043: error while reading EA inode 32 err=-116 [ 151.164030][T10767] EXT4-fs: Ignoring removed bh option [ 151.168529][T10765] EXT4-fs (loop2): Remounting filesystem read-only [ 151.176076][T10765] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 151.191328][T10670] veth0: left promiscuous mode [ 151.196745][T10765] EXT4-fs (loop2): 1 orphan inode deleted [ 151.203495][T10765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.216231][T10767] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.228515][T10765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.249598][T10779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2047'. [ 151.262759][T10767] EXT4-fs (loop0): 1 truncate cleaned up [ 151.314864][T10767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.344647][T10796] loop4: detected capacity change from 0 to 256 [ 151.362391][T10796] FAT-fs (loop4): Directory bread(block 1285) failed [ 151.390999][T10796] FAT-fs (loop4): Directory bread(block 1285) failed [ 151.400109][T10805] loop5: detected capacity change from 0 to 164 [ 151.410890][T10796] FAT-fs (loop4): Directory bread(block 1285) failed [ 151.419027][T10796] FAT-fs (loop4): Directory bread(block 1285) failed [ 151.441518][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.528881][T10829] loop3: detected capacity change from 0 to 512 [ 151.569202][T10829] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2059: error while reading EA inode 32 err=-116 [ 151.601992][T10829] EXT4-fs (loop3): Remounting filesystem read-only [ 151.608693][T10829] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 151.617070][T10842] veth0: entered promiscuous mode [ 151.626151][T10829] EXT4-fs (loop3): 1 orphan inode deleted [ 151.632723][T10829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.643595][T10848] loop0: detected capacity change from 0 to 1024 [ 151.647145][T10847] veth0: entered promiscuous mode [ 151.660999][T10848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.668233][T10829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.695850][T10848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.839918][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.915146][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 151.915164][ T29] audit: type=1326 audit(1757636074.073:31336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 151.922231][T10871] netlink: 'syz.0.2066': attribute type 21 has an invalid length. [ 151.977960][ T29] audit: type=1326 audit(1757636074.083:31337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 152.001750][ T29] audit: type=1326 audit(1757636074.083:31338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc36425b67 code=0x7ffc0000 [ 152.025654][ T29] audit: type=1326 audit(1757636074.083:31339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc363cada9 code=0x7ffc0000 [ 152.049228][ T29] audit: type=1326 audit(1757636074.083:31340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 152.072892][ T29] audit: type=1326 audit(1757636074.083:31341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 152.096841][ T29] audit: type=1326 audit(1757636074.083:31342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 152.120889][ T29] audit: type=1326 audit(1757636074.083:31343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc36425b67 code=0x7ffc0000 [ 152.144990][ T29] audit: type=1326 audit(1757636074.083:31344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc363cada9 code=0x7ffc0000 [ 152.168651][ T29] audit: type=1326 audit(1757636074.083:31345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc36425b67 code=0x7ffc0000 [ 152.361847][T10828] veth0: left promiscuous mode [ 152.447953][T10891] vhci_hcd: invalid port number 23 [ 152.483238][T10836] veth0: left promiscuous mode [ 152.531825][T10907] loop5: detected capacity change from 0 to 256 [ 152.550667][T10904] loop2: detected capacity change from 0 to 8192 [ 152.567218][T10907] FAT-fs (loop5): Directory bread(block 1285) failed [ 152.599738][T10907] FAT-fs (loop5): Directory bread(block 1285) failed [ 152.632248][T10907] FAT-fs (loop5): Directory bread(block 1285) failed [ 152.639982][T10904] rdma_op ffff888148a4b980 conn xmit_rdma 0000000000000000 [ 152.660020][T10907] FAT-fs (loop5): Directory bread(block 1285) failed [ 152.721057][T10949] vhci_hcd: invalid port number 23 [ 152.833996][T10980] loop3: detected capacity change from 0 to 512 [ 152.852251][T10980] EXT4-fs: Ignoring removed bh option [ 152.937876][T10980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.987190][T10980] EXT4-fs (loop3): 1 truncate cleaned up [ 153.012954][T10980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.186392][T11026] loop5: detected capacity change from 0 to 256 [ 153.238735][T11026] FAT-fs (loop5): Directory bread(block 1285) failed [ 153.248821][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.284674][T11026] FAT-fs (loop5): Directory bread(block 1285) failed [ 153.332524][T11026] FAT-fs (loop5): Directory bread(block 1285) failed [ 153.773234][T11089] loop0: detected capacity change from 0 to 8192 [ 153.883153][T11096] netlink: 'syz.3.2117': attribute type 4 has an invalid length. [ 153.931407][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6d2000: rx timeout, send abort [ 153.939655][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a6d3a00: rx timeout, send abort [ 153.953717][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6d2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.968068][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a6d3a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.017139][T11104] loop3: detected capacity change from 0 to 512 [ 154.054262][T11104] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.093212][T11104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.120558][T11104] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.129246][T11104] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.224548][T11104] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2117: Allocating blocks 41-42 which overlap fs metadata [ 154.244312][T11104] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2117: Allocating blocks 41-42 which overlap fs metadata [ 154.275359][T11104] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2117: Failed to acquire dquot type 1 [ 154.300095][T11104] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 154.375197][T11104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2117: corrupted inode contents [ 154.437689][T11104] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.2117: mark_inode_dirty error [ 154.514317][T11104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2117: corrupted inode contents [ 154.524924][T11165] loop4: detected capacity change from 0 to 512 [ 154.563492][T11104] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2117: mark_inode_dirty error [ 154.583596][T11165] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2130: error while reading EA inode 32 err=-116 [ 154.636514][T11104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2117: corrupted inode contents [ 154.642704][T11165] EXT4-fs (loop4): Remounting filesystem read-only [ 154.655037][T11165] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 154.686390][T11104] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 154.695664][T11187] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2133'. [ 154.728041][T11165] EXT4-fs (loop4): 1 orphan inode deleted [ 154.733963][T11190] loop5: detected capacity change from 0 to 512 [ 154.734375][T11165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.773672][T11104] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2117: corrupted inode contents [ 154.788214][T11190] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.834267][T11104] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.2117: mark_inode_dirty error [ 154.866047][T11190] EXT4-fs (loop5): 1 truncate cleaned up [ 154.893613][T11104] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 154.913532][T11104] EXT4-fs (loop3): 1 truncate cleaned up [ 154.956351][T11096] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ [ 154.956351][T11096] ' [ 155.032371][T11096] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 155.444879][T11252] loop2: detected capacity change from 0 to 1024 [ 155.489947][T11252] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.674626][T11262] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 155.695469][T11262] SELinux: failed to load policy [ 155.795255][T11280] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2155'. [ 155.915591][T11293] loop3: detected capacity change from 0 to 128 [ 155.972036][T11293] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.080327][T11293] 9pnet: Could not find request transport: uŒix [ 156.109418][T11313] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 156.117471][T11313] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2164'. [ 156.146324][T11298] loop0: detected capacity change from 0 to 8192 [ 156.228316][T11298] rdma_op ffff88813bc6a980 conn xmit_rdma 0000000000000000 [ 156.282520][T11332] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 156.290734][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2164'. [ 156.299831][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.359841][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.366981][T11332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.495655][T11356] loop4: detected capacity change from 0 to 256 [ 156.518302][T11356] FAT-fs (loop4): Directory bread(block 1285) failed [ 156.568409][T11356] FAT-fs (loop4): Directory bread(block 1285) failed [ 156.641894][T11372] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2175'. [ 156.816937][T11383] netlink: 'syz.0.2179': attribute type 21 has an invalid length. [ 156.947051][T11401] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2186'. [ 156.968278][T11399] loop3: detected capacity change from 0 to 512 [ 156.987713][T11399] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2184: error while reading EA inode 32 err=-116 [ 157.019482][T11411] vhci_hcd: invalid port number 23 [ 157.036252][T11399] EXT4-fs (loop3): Remounting filesystem read-only [ 157.042823][T11399] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 157.087034][T11399] EXT4-fs (loop3): 1 orphan inode deleted [ 157.132127][T11418] loop4: detected capacity change from 0 to 512 [ 157.161537][T11418] EXT4-fs: Ignoring removed oldalloc option [ 157.202509][T11418] EXT4-fs (loop4): 1 truncate cleaned up [ 157.336909][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 157.336925][ T29] audit: type=1326 audit(1757636079.503:31621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.375440][T11438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2193'. [ 157.399826][T11438] netlink: 'syz.2.2193': attribute type 4 has an invalid length. [ 157.417245][ T29] audit: type=1326 audit(1757636079.503:31622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.441002][ T29] audit: type=1326 audit(1757636079.503:31623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.464802][ T29] audit: type=1326 audit(1757636079.503:31624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.488516][ T29] audit: type=1326 audit(1757636079.513:31625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.491221][T11452] netlink: 'syz.2.2193': attribute type 4 has an invalid length. [ 157.512148][ T29] audit: type=1326 audit(1757636079.513:31626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.512187][ T29] audit: type=1326 audit(1757636079.513:31627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.567323][ T29] audit: type=1326 audit(1757636079.513:31628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.591086][ T29] audit: type=1326 audit(1757636079.513:31629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.614935][ T29] audit: type=1326 audit(1757636079.513:31630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 157.973583][T11521] loop3: detected capacity change from 0 to 1024 [ 158.003985][T11521] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.082794][T11521] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2209: lblock 3 mapped to illegal pblock 3 (length 3) [ 158.151755][T11528] loop0: detected capacity change from 0 to 164 [ 158.164824][T11521] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 158.177332][T11521] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.177332][T11521] [ 158.240767][T11529] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 7: comm syz.3.2209: lblock 7 mapped to illegal pblock 7 (length 9) [ 158.261404][T11523] syz.0.2210: attempt to access beyond end of device [ 158.261404][T11523] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 158.306674][T11523] syz.0.2210: attempt to access beyond end of device [ 158.306674][T11523] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 158.328986][T11529] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 158.341408][T11529] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.341408][T11529] [ 158.421214][T11539] loop0: detected capacity change from 0 to 1024 [ 158.459944][T11541] loop3: detected capacity change from 0 to 2048 [ 158.491520][T11539] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.523593][T11539] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2211: lblock 3 mapped to illegal pblock 3 (length 3) [ 158.532013][T11541] futex_wake_op: syz.3.2212 tries to shift op by -1; fix this program [ 158.619543][T11539] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 158.631888][T11539] EXT4-fs (loop0): This should not happen!! Data will be lost [ 158.631888][T11539] [ 158.713805][T11550] FAULT_INJECTION: forcing a failure. [ 158.713805][T11550] name failslab, interval 1, probability 0, space 0, times 0 [ 158.726580][T11550] CPU: 0 UID: 0 PID: 11550 Comm: syz.0.2211 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.726613][T11550] Tainted: [W]=WARN [ 158.726619][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.726631][T11550] Call Trace: [ 158.726638][T11550] [ 158.726645][T11550] __dump_stack+0x1d/0x30 [ 158.726671][T11550] dump_stack_lvl+0xe8/0x140 [ 158.726695][T11550] dump_stack+0x15/0x1b [ 158.726717][T11550] should_fail_ex+0x265/0x280 [ 158.726864][T11550] should_failslab+0x8c/0xb0 [ 158.726890][T11550] kmem_cache_alloc_noprof+0x50/0x310 [ 158.727019][T11550] ? __es_insert_extent+0x508/0xee0 [ 158.727061][T11550] __es_insert_extent+0x508/0xee0 [ 158.727113][T11550] ext4_es_cache_extent+0x276/0x370 [ 158.727170][T11550] ext4_find_extent+0x336/0x7a0 [ 158.727198][T11550] ext4_ext_map_blocks+0x11f/0x38a0 [ 158.727234][T11550] ? __account_obj_stock+0x211/0x350 [ 158.727286][T11550] ? __account_obj_stock+0x211/0x350 [ 158.727321][T11550] ? __rcu_read_unlock+0x4f/0x70 [ 158.727350][T11550] ext4_map_query_blocks+0xa8/0x480 [ 158.727385][T11550] ext4_da_get_block_prep+0x25b/0xbb0 [ 158.727539][T11550] ? alloc_buffer_head+0x1c3/0x1f0 [ 158.727571][T11550] ? folio_alloc_buffers+0x2e5/0x310 [ 158.727620][T11550] ext4_block_write_begin+0x5e5/0xc00 [ 158.727715][T11550] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 158.727751][T11550] ext4_da_write_begin+0x48f/0x6e0 [ 158.727783][T11550] generic_perform_write+0x181/0x490 [ 158.727816][T11550] ext4_buffered_write_iter+0x1ee/0x3c0 [ 158.727932][T11550] ? ext4_file_write_iter+0xfe/0xf00 [ 158.727975][T11550] ext4_file_write_iter+0x383/0xf00 [ 158.728079][T11550] ? 0xffffffff81000000 [ 158.728102][T11550] ? __rcu_read_unlock+0x4f/0x70 [ 158.728181][T11550] ? avc_policy_seqno+0x15/0x30 [ 158.728272][T11550] ? selinux_file_permission+0x1e4/0x320 [ 158.728305][T11550] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 158.728337][T11550] vfs_write+0x52a/0x960 [ 158.728367][T11550] __x64_sys_pwrite64+0xfd/0x150 [ 158.728465][T11550] x64_sys_call+0xc4d/0x2ff0 [ 158.728487][T11550] do_syscall_64+0xd2/0x200 [ 158.728525][T11550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.728564][T11550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 158.728602][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.728630][T11550] RIP: 0033:0x7f1b2a5aeba9 [ 158.728647][T11550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.728727][T11550] RSP: 002b:00007f1b28ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 158.728753][T11550] RAX: ffffffffffffffda RBX: 00007f1b2a7f6090 RCX: 00007f1b2a5aeba9 [ 158.728770][T11550] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 158.728787][T11550] RBP: 00007f1b28ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.728802][T11550] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 158.728837][T11550] R13: 00007f1b2a7f6128 R14: 00007f1b2a7f6090 R15: 00007ffe4fd53688 [ 158.729016][T11550] [ 158.729409][T11562] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2216'. [ 158.787027][T11550] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 7: comm syz.0.2211: lblock 7 mapped to illegal pblock 7 (length 9) [ 158.835234][T11565] syz.3.2213 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.942902][T11550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 159.060840][T11563] loop2: detected capacity change from 0 to 512 [ 159.072795][T11550] EXT4-fs (loop0): This should not happen!! Data will be lost [ 159.072795][T11550] [ 159.120334][T11563] EXT4-fs: Ignoring removed bh option [ 159.166413][T11563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.257972][T11563] EXT4-fs (loop2): 1 truncate cleaned up [ 159.404504][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2221'. [ 159.415834][T11602] FAULT_INJECTION: forcing a failure. [ 159.415834][T11602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.428943][T11602] CPU: 1 UID: 0 PID: 11602 Comm: syz.0.2224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.429022][T11602] Tainted: [W]=WARN [ 159.429029][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.429048][T11602] Call Trace: [ 159.429056][T11602] [ 159.429065][T11602] __dump_stack+0x1d/0x30 [ 159.429093][T11602] dump_stack_lvl+0xe8/0x140 [ 159.429227][T11602] dump_stack+0x15/0x1b [ 159.429249][T11602] should_fail_ex+0x265/0x280 [ 159.429334][T11602] should_fail+0xb/0x20 [ 159.429396][T11602] should_fail_usercopy+0x1a/0x20 [ 159.429422][T11602] _copy_from_user+0x1c/0xb0 [ 159.429511][T11602] ___sys_sendmsg+0xc1/0x1d0 [ 159.429554][T11602] __x64_sys_sendmsg+0xd4/0x160 [ 159.429588][T11602] x64_sys_call+0x191e/0x2ff0 [ 159.429673][T11602] do_syscall_64+0xd2/0x200 [ 159.429706][T11602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.429733][T11602] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 159.429768][T11602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.429820][T11602] RIP: 0033:0x7f1b2a5aeba9 [ 159.429838][T11602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.429856][T11602] RSP: 002b:00007f1b29017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.429907][T11602] RAX: ffffffffffffffda RBX: 00007f1b2a7f5fa0 RCX: 00007f1b2a5aeba9 [ 159.429948][T11602] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 159.429964][T11602] RBP: 00007f1b29017090 R08: 0000000000000000 R09: 0000000000000000 [ 159.429979][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.429995][T11602] R13: 00007f1b2a7f6038 R14: 00007f1b2a7f5fa0 R15: 00007ffe4fd53688 [ 159.430019][T11602] [ 159.447678][T11587] netem: change failed [ 159.717584][T11614] loop3: detected capacity change from 0 to 512 [ 159.750208][T11614] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2227: error while reading EA inode 32 err=-116 [ 159.795252][T11614] EXT4-fs (loop3): Remounting filesystem read-only [ 159.801827][T11614] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 159.841217][T11639] vhci_hcd: invalid port number 23 [ 159.881324][T11614] EXT4-fs (loop3): 1 orphan inode deleted [ 159.955627][T11651] loop0: detected capacity change from 0 to 1024 [ 160.010581][T11651] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.024551][T11656] loop5: detected capacity change from 0 to 512 [ 160.065007][T11656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2240: error while reading EA inode 32 err=-116 [ 160.124815][T11672] FAULT_INJECTION: forcing a failure. [ 160.124815][T11672] name failslab, interval 1, probability 0, space 0, times 0 [ 160.137656][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.4.2243 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.137797][T11672] Tainted: [W]=WARN [ 160.137807][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.137823][T11672] Call Trace: [ 160.137832][T11672] [ 160.137842][T11672] __dump_stack+0x1d/0x30 [ 160.137981][T11672] dump_stack_lvl+0xe8/0x140 [ 160.138019][T11672] dump_stack+0x15/0x1b [ 160.138037][T11672] should_fail_ex+0x265/0x280 [ 160.138062][T11672] should_failslab+0x8c/0xb0 [ 160.138137][T11672] kmem_cache_alloc_noprof+0x50/0x310 [ 160.138181][T11672] ? getname_flags+0x80/0x3b0 [ 160.138221][T11672] getname_flags+0x80/0x3b0 [ 160.138260][T11672] user_path_at+0x28/0x130 [ 160.138336][T11672] __se_sys_fspick+0xaa/0x240 [ 160.138374][T11672] __x64_sys_fspick+0x43/0x50 [ 160.138429][T11672] x64_sys_call+0x44c/0x2ff0 [ 160.138458][T11672] do_syscall_64+0xd2/0x200 [ 160.138499][T11672] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.138531][T11672] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.138575][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.138603][T11672] RIP: 0033:0x7fa6d455eba9 [ 160.138640][T11672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.138714][T11672] RSP: 002b:00007fa6d2fc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 160.138740][T11672] RAX: ffffffffffffffda RBX: 00007fa6d47a5fa0 RCX: 00007fa6d455eba9 [ 160.138756][T11672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 160.138773][T11672] RBP: 00007fa6d2fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.138789][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.138804][T11672] R13: 00007fa6d47a6038 R14: 00007fa6d47a5fa0 R15: 00007fff3aacc6e8 [ 160.138831][T11672] [ 160.350146][T11656] EXT4-fs (loop5): Remounting filesystem read-only [ 160.356832][T11656] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 160.370411][T11656] EXT4-fs (loop5): 1 orphan inode deleted [ 160.528691][T11697] FAULT_INJECTION: forcing a failure. [ 160.528691][T11697] name failslab, interval 1, probability 0, space 0, times 0 [ 160.528731][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.2.2249 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.528761][T11697] Tainted: [W]=WARN [ 160.528767][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.528781][T11697] Call Trace: [ 160.528788][T11697] [ 160.528797][T11697] __dump_stack+0x1d/0x30 [ 160.528823][T11697] dump_stack_lvl+0xe8/0x140 [ 160.528848][T11697] dump_stack+0x15/0x1b [ 160.528920][T11697] should_fail_ex+0x265/0x280 [ 160.528951][T11697] should_failslab+0x8c/0xb0 [ 160.528985][T11697] __kmalloc_noprof+0xa5/0x3e0 [ 160.529087][T11697] ? bpf_test_init+0xa9/0x160 [ 160.529118][T11697] bpf_test_init+0xa9/0x160 [ 160.529158][T11697] bpf_prog_test_run_xdp+0x274/0x910 [ 160.529188][T11697] ? kstrtouint+0x76/0xc0 [ 160.529219][T11697] ? __rcu_read_unlock+0x4f/0x70 [ 160.529284][T11697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 160.529368][T11697] bpf_prog_test_run+0x227/0x390 [ 160.529443][T11697] __sys_bpf+0x4b9/0x7b0 [ 160.529478][T11697] __x64_sys_bpf+0x41/0x50 [ 160.529503][T11697] x64_sys_call+0x2aea/0x2ff0 [ 160.529528][T11697] do_syscall_64+0xd2/0x200 [ 160.529641][T11697] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.529672][T11697] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.529742][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.529764][T11697] RIP: 0033:0x7f9d58ddeba9 [ 160.529782][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.529808][T11697] RSP: 002b:00007f9d5783f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.529830][T11697] RAX: ffffffffffffffda RBX: 00007f9d59025fa0 RCX: 00007f9d58ddeba9 [ 160.529845][T11697] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 160.529919][T11697] RBP: 00007f9d5783f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.529937][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.529953][T11697] R13: 00007f9d59026038 R14: 00007f9d59025fa0 R15: 00007fff28811aa8 [ 160.529978][T11697] [ 160.753707][T11723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11723 comm=syz.4.2256 [ 160.755188][T11723] netlink: 628 bytes leftover after parsing attributes in process `syz.4.2256'. [ 160.765020][T11720] loop2: detected capacity change from 0 to 8192 [ 160.813040][T11720] rdma_op ffff8881301eb580 conn xmit_rdma 0000000000000000 [ 160.975325][T11730] loop2: detected capacity change from 0 to 512 [ 160.982078][T11730] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2257: error while reading EA inode 32 err=-116 [ 160.982635][T11730] EXT4-fs (loop2): Remounting filesystem read-only [ 160.982771][T11730] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 160.982797][T11730] EXT4-fs (loop2): 1 orphan inode deleted [ 161.184104][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2258'. [ 161.535941][T11768] loop0: detected capacity change from 0 to 764 [ 161.796023][T11787] loop5: detected capacity change from 0 to 8192 [ 161.874328][T11787] rdma_op ffff88812d916d80 conn xmit_rdma 0000000000000000 [ 162.026938][T11815] FAULT_INJECTION: forcing a failure. [ 162.026938][T11815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.040112][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.4.2277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.040173][T11815] Tainted: [W]=WARN [ 162.040180][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.040193][T11815] Call Trace: [ 162.040272][T11815] [ 162.040282][T11815] __dump_stack+0x1d/0x30 [ 162.040309][T11815] dump_stack_lvl+0xe8/0x140 [ 162.040331][T11815] dump_stack+0x15/0x1b [ 162.040347][T11815] should_fail_ex+0x265/0x280 [ 162.040392][T11815] should_fail+0xb/0x20 [ 162.040486][T11815] should_fail_usercopy+0x1a/0x20 [ 162.040520][T11815] _copy_from_user+0x1c/0xb0 [ 162.040558][T11815] ___sys_sendmsg+0xc1/0x1d0 [ 162.040653][T11815] __x64_sys_sendmsg+0xd4/0x160 [ 162.040713][T11815] x64_sys_call+0x191e/0x2ff0 [ 162.040742][T11815] do_syscall_64+0xd2/0x200 [ 162.040800][T11815] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.040833][T11815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.040865][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.040886][T11815] RIP: 0033:0x7fa6d455eba9 [ 162.040958][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.040982][T11815] RSP: 002b:00007fa6d2fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.041006][T11815] RAX: ffffffffffffffda RBX: 00007fa6d47a5fa0 RCX: 00007fa6d455eba9 [ 162.041021][T11815] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 162.041058][T11815] RBP: 00007fa6d2fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.041160][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.041171][T11815] R13: 00007fa6d47a6038 R14: 00007fa6d47a5fa0 R15: 00007fff3aacc6e8 [ 162.041191][T11815] [ 162.482425][T11844] netlink: 'syz.4.2286': attribute type 21 has an invalid length. [ 162.490401][T11844] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2286'. [ 162.499755][T11844] netlink: 'syz.4.2286': attribute type 5 has an invalid length. [ 162.507586][T11844] netlink: 'syz.4.2286': attribute type 6 has an invalid length. [ 162.515391][T11844] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2286'. [ 162.529017][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 162.529113][ T29] audit: type=1400 audit(1757636084.693:31744): avc: denied { bind } for pid=11842 comm="syz.4.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.577247][T11853] loop2: detected capacity change from 0 to 1024 [ 162.633775][ T29] audit: type=1400 audit(1757636084.693:31745): avc: denied { write } for pid=11842 comm="syz.4.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.656959][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 162.677955][T11853] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.769138][T11894] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2292'. [ 162.822671][ T29] audit: type=1326 audit(1757636084.983:31746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 162.846392][ T29] audit: type=1326 audit(1757636084.983:31747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 162.954935][ T29] audit: type=1326 audit(1757636084.983:31748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 162.978600][ T29] audit: type=1326 audit(1757636084.983:31749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 163.002328][ T29] audit: type=1326 audit(1757636084.983:31750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 163.025971][ T29] audit: type=1326 audit(1757636084.983:31751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 163.049743][ T29] audit: type=1326 audit(1757636084.983:31752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 163.067506][T11920] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2297'. [ 163.073544][ T29] audit: type=1326 audit(1757636084.983:31753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.5.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2007bdeba9 code=0x7ffc0000 [ 163.208877][T11930] loop4: detected capacity change from 0 to 512 [ 163.221361][T11930] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2301: error while reading EA inode 32 err=-116 [ 163.236581][T11930] EXT4-fs (loop4): Remounting filesystem read-only [ 163.243138][T11930] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 163.275347][T11930] EXT4-fs (loop4): 1 orphan inode deleted [ 163.374926][T11956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2309'. [ 163.568889][T11987] loop3: detected capacity change from 0 to 1024 [ 163.599955][T11987] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.743776][T12003] loop3: detected capacity change from 0 to 512 [ 163.754189][T12003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2321: error while reading EA inode 32 err=-116 [ 163.768563][T12003] EXT4-fs (loop3): Remounting filesystem read-only [ 163.775341][T12003] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 163.785832][T12003] EXT4-fs (loop3): 1 orphan inode deleted [ 163.891025][T12035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2324'. [ 164.166665][T12051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2328'. [ 164.351704][T12069] loop3: detected capacity change from 0 to 764 [ 164.395872][T12069] Symlink component flag not implemented [ 164.412746][T12078] loop2: detected capacity change from 0 to 764 [ 164.505607][T12078] Symlink component flag not implemented [ 164.614253][T12086] loop5: detected capacity change from 0 to 8192 [ 164.689210][T12086] rdma_op ffff88812d915d80 conn xmit_rdma 0000000000000000 [ 164.857178][T12111] netlink: 'syz.3.2342': attribute type 21 has an invalid length. [ 164.894459][T12111] netlink: 'syz.3.2342': attribute type 5 has an invalid length. [ 164.902400][T12111] netlink: 'syz.3.2342': attribute type 6 has an invalid length. [ 165.080323][T12138] veth0: entered promiscuous mode [ 165.086159][T12139] loop0: detected capacity change from 0 to 764 [ 165.204051][T12129] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 165.217454][T12129] SELinux: failed to load policy [ 165.230354][T12133] Symlink component flag not implemented [ 165.321299][T12153] loop4: detected capacity change from 0 to 512 [ 165.349376][T12153] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2352: error while reading EA inode 32 err=-116 [ 165.383931][T12153] EXT4-fs (loop4): Remounting filesystem read-only [ 165.390574][T12153] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 165.453888][T12153] EXT4-fs (loop4): 1 orphan inode deleted [ 165.869667][T12195] loop0: detected capacity change from 0 to 764 [ 165.928080][T12132] veth0: left promiscuous mode [ 165.969443][T12195] Symlink component flag not implemented [ 166.131886][T12201] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 166.165817][T12201] SELinux: failed to load policy [ 166.323976][T12215] loop2: detected capacity change from 0 to 512 [ 166.349361][T12215] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2367: error while reading EA inode 32 err=-116 [ 166.396332][T12215] EXT4-fs (loop2): Remounting filesystem read-only [ 166.402930][T12215] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 166.427407][T12215] EXT4-fs (loop2): 1 orphan inode deleted [ 166.440321][T12215] EXT4-fs mount: 39 callbacks suppressed [ 166.440339][T12215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.486502][T12215] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.680191][T12233] __nla_validate_parse: 2 callbacks suppressed [ 166.680211][T12233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2371'. [ 167.390144][T12288] loop0: detected capacity change from 0 to 764 [ 167.418329][T12275] Symlink component flag not implemented [ 167.580467][T12308] loop3: detected capacity change from 0 to 8192 [ 167.598703][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 167.598721][ T29] audit: type=1400 audit(1757636089.763:32198): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.651545][T12311] loop4: detected capacity change from 0 to 8192 [ 167.711688][ T29] audit: type=1326 audit(1757636089.873:32199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.2.2388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d58ddeba9 code=0x0 [ 167.764093][T12308] rdma_op ffff888117abb580 conn xmit_rdma 0000000000000000 [ 167.809989][T12311] rdma_op ffff888117abb580 conn xmit_rdma 0000000000000000 [ 167.909846][T12344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 167.918961][T12344] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2391'. [ 167.928061][T12344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.050050][T12344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.059200][T12344] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.068334][T12344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.121547][T12344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.130657][T12344] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.139783][T12344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2391'. [ 168.153639][T12365] FAULT_INJECTION: forcing a failure. [ 168.153639][T12365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.166855][T12365] CPU: 0 UID: 0 PID: 12365 Comm: syz.4.2396 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.166896][T12365] Tainted: [W]=WARN [ 168.166922][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.166937][T12365] Call Trace: [ 168.166945][T12365] [ 168.166954][T12365] __dump_stack+0x1d/0x30 [ 168.166974][T12365] dump_stack_lvl+0xe8/0x140 [ 168.167064][T12365] dump_stack+0x15/0x1b [ 168.167080][T12365] should_fail_ex+0x265/0x280 [ 168.167105][T12365] should_fail+0xb/0x20 [ 168.167175][T12365] should_fail_usercopy+0x1a/0x20 [ 168.167200][T12365] _copy_to_user+0x20/0xa0 [ 168.167236][T12365] simple_read_from_buffer+0xb5/0x130 [ 168.167258][T12365] proc_fail_nth_read+0x10e/0x150 [ 168.167305][T12365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.167390][T12365] vfs_read+0x1a8/0x770 [ 168.167487][T12365] ? __rcu_read_unlock+0x4f/0x70 [ 168.167514][T12365] ? __fget_files+0x184/0x1c0 [ 168.167587][T12365] ksys_read+0xda/0x1a0 [ 168.167690][T12365] __x64_sys_read+0x40/0x50 [ 168.167711][T12365] x64_sys_call+0x27bc/0x2ff0 [ 168.167733][T12365] do_syscall_64+0xd2/0x200 [ 168.167773][T12365] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.167801][T12365] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 168.167908][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.167958][T12365] RIP: 0033:0x7fa6d455d5bc [ 168.167972][T12365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.167990][T12365] RSP: 002b:00007fa6d2fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.168008][T12365] RAX: ffffffffffffffda RBX: 00007fa6d47a5fa0 RCX: 00007fa6d455d5bc [ 168.168020][T12365] RDX: 000000000000000f RSI: 00007fa6d2fc70a0 RDI: 0000000000000006 [ 168.168032][T12365] RBP: 00007fa6d2fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.168047][T12365] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 168.168124][T12365] R13: 00007fa6d47a6038 R14: 00007fa6d47a5fa0 R15: 00007fff3aacc6e8 [ 168.168148][T12365] [ 168.449980][T12379] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 168.462126][T12375] IPVS: stopping master sync thread 12379 ... [ 168.519182][T12382] loop4: detected capacity change from 0 to 512 [ 168.544806][T12382] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2401: error while reading EA inode 32 err=-116 [ 168.576796][T12382] EXT4-fs (loop4): Remounting filesystem read-only [ 168.583381][T12382] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 168.605210][T12382] EXT4-fs (loop4): 1 orphan inode deleted [ 168.611341][T12382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.624221][T12382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.652820][ T29] audit: type=1326 audit(1757636090.813:32200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.676505][ T29] audit: type=1326 audit(1757636090.813:32201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.687590][T12404] loop3: detected capacity change from 0 to 128 [ 168.700255][ T29] audit: type=1326 audit(1757636090.813:32202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.730105][ T29] audit: type=1326 audit(1757636090.813:32203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.798824][T12416] netlink: 'syz.4.2409': attribute type 21 has an invalid length. [ 168.806179][T12404] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.825219][T12416] netlink: 'syz.4.2409': attribute type 5 has an invalid length. [ 168.833051][T12416] netlink: 'syz.4.2409': attribute type 6 has an invalid length. [ 168.845554][ T29] audit: type=1326 audit(1757636090.813:32204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.849431][T12404] ext4 filesystem being mounted at /523/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.869352][ T29] audit: type=1326 audit(1757636090.833:32205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.903096][ T29] audit: type=1326 audit(1757636090.833:32206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.926735][ T29] audit: type=1326 audit(1757636090.833:32207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d58ddeba9 code=0x7ffc0000 [ 168.942399][T12408] loop5: detected capacity change from 0 to 8192 [ 169.017793][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.044326][T12426] rdma_op ffff88812d8f2180 conn xmit_rdma 0000000000000000 [ 169.249975][T12460] loop3: detected capacity change from 0 to 512 [ 169.259225][T12460] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2419: error while reading EA inode 32 err=-116 [ 169.260074][T12460] EXT4-fs (loop3): Remounting filesystem read-only [ 169.260143][T12460] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 169.260167][T12460] EXT4-fs (loop3): 1 orphan inode deleted [ 169.260631][T12460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.262214][T12460] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.375505][T12471] loop2: detected capacity change from 0 to 2048 [ 169.420193][T12471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.462667][T12485] veth0: entered promiscuous mode [ 169.918947][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.945455][T12497] loop0: detected capacity change from 0 to 764 [ 169.945993][T12497] iso9660: Unknown parameter '' [ 169.960218][T12497] lo speed is unknown, defaulting to 1000 [ 169.961616][T12497] lo speed is unknown, defaulting to 1000 [ 169.961915][T12497] lo speed is unknown, defaulting to 1000 [ 170.074943][T12497] infiniband sz1: set active [ 170.074966][T12497] infiniband sz1: added lo [ 170.075071][ T3411] lo speed is unknown, defaulting to 1000 [ 170.107901][T12497] RDS/IB: sz1: added [ 170.107930][T12497] smc: adding ib device sz1 with port count 1 [ 170.107945][T12497] smc: ib device sz1 port 1 has pnetid [ 170.107973][ T3411] lo speed is unknown, defaulting to 1000 [ 170.109041][T12497] lo speed is unknown, defaulting to 1000 [ 170.251403][T12497] lo speed is unknown, defaulting to 1000 [ 170.363956][T12476] veth0: left promiscuous mode [ 170.417452][T12497] lo speed is unknown, defaulting to 1000 [ 170.420889][T12529] loop4: detected capacity change from 0 to 512 [ 170.441723][T12529] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2433: error while reading EA inode 32 err=-116 [ 170.455036][T12529] EXT4-fs (loop4): Remounting filesystem read-only [ 170.461678][T12529] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 170.473947][T12529] EXT4-fs (loop4): 1 orphan inode deleted [ 170.480249][T12529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.494365][T12529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.555187][T12497] lo speed is unknown, defaulting to 1000 [ 170.700201][T12497] lo speed is unknown, defaulting to 1000 [ 170.767353][T12559] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 170.781282][T12559] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 170.892308][T12567] veth0: entered promiscuous mode [ 171.180698][T12588] loop3: detected capacity change from 0 to 512 [ 171.199688][T12588] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2446: error while reading EA inode 32 err=-116 [ 171.202369][T12588] EXT4-fs (loop3): Remounting filesystem read-only [ 171.202509][T12588] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 171.202535][T12588] EXT4-fs (loop3): 1 orphan inode deleted [ 171.203016][T12588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.209006][T12588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.381939][T12600] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 171.386763][T12599] bridge_slave_0: left allmulticast mode [ 171.386797][T12599] bridge_slave_0: left promiscuous mode [ 171.387004][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.401640][T12599] bridge_slave_1: left allmulticast mode [ 171.401665][T12599] bridge_slave_1: left promiscuous mode [ 171.401811][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.408055][T12599] bond0: (slave bond_slave_0): Releasing backup interface [ 171.412075][T12599] bond0: (slave bond_slave_1): Releasing backup interface [ 171.416970][T12599] team0: Port device team_slave_0 removed [ 171.440180][T12599] team0: Port device team_slave_1 removed [ 171.469858][T12601] loop3: detected capacity change from 0 to 512 [ 171.473041][T12599] team0: Port device geneve1 removed [ 171.500112][ T5719] tipc: Resetting bearer [ 171.530580][T12601] EXT4-fs error (device loop3): ext4_quota_enable:7128: inode #4: comm syz.3.2447: iget: bogus i_mode (4200) [ 171.530777][T12601] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.2447: Bad quota inode: 4, type: 1 [ 171.530983][T12601] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.531227][T12601] EXT4-fs (loop3): mount failed [ 171.609354][T12555] veth0: left promiscuous mode [ 171.641949][T12599] loop3: detected capacity change from 0 to 1024 [ 171.647088][T12599] EXT4-fs: Ignoring removed bh option [ 171.647829][T12599] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.648411][T12599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 171.648439][T12599] System zones: 0-1, 3-12 [ 171.649242][T12599] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.2447: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.649346][T12599] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2447: Failed to acquire dquot type 0 [ 171.657915][T12599] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2447: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.658195][T12599] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2447: Invalid inode bitmap blk 0 in block_group 0 [ 171.658294][T12599] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 171.658377][T12599] EXT4-fs (loop3): 1 orphan inode deleted [ 171.658832][T12599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.667959][ T5720] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.668846][ T5720] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:65: Failed to release dquot type 0 [ 171.881587][T12599] netlink: 'syz.3.2447': attribute type 21 has an invalid length. [ 171.922463][T12599] __nla_validate_parse: 9 callbacks suppressed [ 171.922485][T12599] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2447'. [ 171.922504][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 172.202186][T12637] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 172.227582][T12646] loop5: detected capacity change from 0 to 8192 [ 172.235359][T12637] SELinux: failed to load policy [ 172.303421][T12646] rdma_op ffff88810327d180 conn xmit_rdma 0000000000000000 [ 172.313893][T12651] loop2: detected capacity change from 0 to 512 [ 172.364077][T12651] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2457: error while reading EA inode 32 err=-116 [ 172.396919][T12651] EXT4-fs (loop2): Remounting filesystem read-only [ 172.403533][T12651] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 172.414208][T12651] EXT4-fs (loop2): 1 orphan inode deleted [ 172.420686][T12651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.435439][T12651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.488710][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.682352][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2470'. [ 172.683036][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 172.683054][ T29] audit: type=1326 audit(1757636094.843:32357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.782159][T12702] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 172.782267][T12702] SELinux: failed to load policy [ 172.788480][ T29] audit: type=1326 audit(1757636094.893:32358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788568][ T29] audit: type=1326 audit(1757636094.893:32359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788655][ T29] audit: type=1326 audit(1757636094.893:32360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788691][ T29] audit: type=1326 audit(1757636094.893:32361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788726][ T29] audit: type=1326 audit(1757636094.893:32362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788820][ T29] audit: type=1326 audit(1757636094.893:32363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788851][ T29] audit: type=1326 audit(1757636094.893:32364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788881][ T29] audit: type=1326 audit(1757636094.893:32365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.788950][ T29] audit: type=1326 audit(1757636094.893:32366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.0.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2a5aeba9 code=0x7ffc0000 [ 172.967196][T12718] loop0: detected capacity change from 0 to 8192 [ 172.982846][T12725] loop2: detected capacity change from 0 to 8192 [ 173.037627][T12739] loop3: detected capacity change from 0 to 764 [ 173.038170][T12739] iso9660: Unknown parameter '' [ 173.042171][T12739] rdma_rxe: rxe_newlink: failed to add lo [ 173.096525][T12718] rdma_op ffff88811b87f580 conn xmit_rdma 0000000000000000 [ 173.139299][T12725] rdma_op ffff88811a585d80 conn xmit_rdma 0000000000000000 [ 173.141849][T12756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2482'. [ 173.389112][T12766] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 173.432914][T12766] SELinux: failed to load policy [ 173.467217][T12794] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2491'. [ 173.476240][T12794] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2491'. [ 173.485357][T12794] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2491'. [ 173.487460][T12784] lo speed is unknown, defaulting to 1000 [ 173.513737][T12798] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 173.521640][T12798] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2489'. [ 173.533877][T12794] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2491'. [ 173.543021][T12794] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2491'. [ 173.557128][T12790] loop4: detected capacity change from 0 to 764 [ 173.576047][T12790] iso9660: Unknown parameter '' [ 173.684179][T12790] rdma_rxe: rxe_newlink: failed to add lo [ 173.841708][T12848] netlink: 'syz.4.2499': attribute type 21 has an invalid length. [ 173.841803][T12848] netlink: 'syz.4.2499': attribute type 5 has an invalid length. [ 173.841815][T12848] netlink: 'syz.4.2499': attribute type 6 has an invalid length. [ 173.928158][T12853] loop0: detected capacity change from 0 to 8192 [ 173.993779][T12853] rdma_op ffff8881301ea980 conn xmit_rdma 0000000000000000 [ 174.088004][T12860] loop4: detected capacity change from 0 to 8192 [ 174.104591][T12876] tipc: Enabling of bearer rejected, media not registered [ 174.116790][ T9447] loop4: p3 p4 < > [ 174.124387][ T9447] loop4: p3 size 33554432 extends beyond EOD, truncated [ 174.142521][T12860] loop4: p3 p4 < > [ 174.142650][T12860] loop4: p3 size 33554432 extends beyond EOD, truncated [ 174.204248][ T4993] udevd[4993]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 174.210496][ T9447] udevd[9447]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 174.249316][ T4993] udevd[4993]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 174.251593][ T9447] udevd[9447]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 174.298169][T12900] loop4: detected capacity change from 0 to 764 [ 174.298708][T12900] iso9660: Unknown parameter '' [ 174.311823][T12900] rdma_rxe: rxe_newlink: failed to add lo [ 174.607363][T12928] loop4: detected capacity change from 0 to 512 [ 174.607983][T12928] EXT4-fs: Ignoring removed i_version option [ 174.631796][T12928] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 174.631850][T12928] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 174.642130][T12928] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2517: Invalid inode table block 1 in block_group 0 [ 174.642992][T12928] EXT4-fs (loop4): Remounting filesystem read-only [ 174.643023][T12928] EXT4-fs (loop4): get root inode failed [ 174.643105][T12928] EXT4-fs (loop4): mount failed [ 174.940149][T12972] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 174.951320][T12972] SELinux: failed to load policy [ 175.041851][T12999] loop4: detected capacity change from 0 to 512 [ 175.052653][T13005] FAULT_INJECTION: forcing a failure. [ 175.052653][T13005] name failslab, interval 1, probability 0, space 0, times 0 [ 175.065550][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.3.2534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.065589][T13005] Tainted: [W]=WARN [ 175.065598][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.065615][T13005] Call Trace: [ 175.065627][T13005] [ 175.065637][T13005] __dump_stack+0x1d/0x30 [ 175.065663][T13005] dump_stack_lvl+0xe8/0x140 [ 175.065739][T13005] dump_stack+0x15/0x1b [ 175.065755][T13005] should_fail_ex+0x265/0x280 [ 175.065780][T13005] should_failslab+0x8c/0xb0 [ 175.065874][T13005] __kmalloc_cache_node_noprof+0x54/0x320 [ 175.065921][T13005] ? __get_vm_area_node+0x106/0x1d0 [ 175.065998][T13005] __get_vm_area_node+0x106/0x1d0 [ 175.066032][T13005] __vmalloc_node_range_noprof+0x273/0xe00 [ 175.066074][T13005] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.066165][T13005] ? avc_has_perm_noaudit+0x1b1/0x200 [ 175.066198][T13005] ? cred_has_capability+0x210/0x280 [ 175.066229][T13005] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.066289][T13005] __vmalloc_noprof+0x83/0xc0 [ 175.066329][T13005] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.066366][T13005] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.066396][T13005] ? bpf_prog_alloc+0x2a/0x150 [ 175.066523][T13005] bpf_prog_alloc+0x3c/0x150 [ 175.066558][T13005] bpf_prog_load+0x514/0x1070 [ 175.066617][T13005] ? security_bpf+0x2b/0x90 [ 175.066718][T13005] __sys_bpf+0x462/0x7b0 [ 175.066756][T13005] __x64_sys_bpf+0x41/0x50 [ 175.066780][T13005] x64_sys_call+0x2aea/0x2ff0 [ 175.066869][T13005] do_syscall_64+0xd2/0x200 [ 175.066903][T13005] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.066942][T13005] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.067059][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.067089][T13005] RIP: 0033:0x7efc3642eba9 [ 175.067108][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.067133][T13005] RSP: 002b:00007efc34e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.067182][T13005] RAX: ffffffffffffffda RBX: 00007efc36675fa0 RCX: 00007efc3642eba9 [ 175.067199][T13005] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 175.067216][T13005] RBP: 00007efc34e97090 R08: 0000000000000000 R09: 0000000000000000 [ 175.067231][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.067247][T13005] R13: 00007efc36676038 R14: 00007efc36675fa0 R15: 00007fff70a12f08 [ 175.067272][T13005] [ 175.067281][T13005] syz.3.2534: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 175.206288][T12999] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 175.208167][T13005] ,cpuset= [ 175.261110][T12999] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 175.267730][T13005] /,mems_allowed=0 [ 175.350072][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.3.2534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.350113][T13005] Tainted: [W]=WARN [ 175.350122][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.350176][T13005] Call Trace: [ 175.350183][T13005] [ 175.350191][T13005] __dump_stack+0x1d/0x30 [ 175.350220][T13005] dump_stack_lvl+0xe8/0x140 [ 175.350253][T13005] dump_stack+0x15/0x1b [ 175.350275][T13005] warn_alloc+0x12b/0x1a0 [ 175.350320][T13005] __vmalloc_node_range_noprof+0x297/0xe00 [ 175.350363][T13005] ? avc_has_perm_noaudit+0x1b1/0x200 [ 175.350395][T13005] ? cred_has_capability+0x210/0x280 [ 175.350457][T13005] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.350490][T13005] __vmalloc_noprof+0x83/0xc0 [ 175.350531][T13005] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.350608][T13005] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 175.350644][T13005] ? bpf_prog_alloc+0x2a/0x150 [ 175.350721][T13005] bpf_prog_alloc+0x3c/0x150 [ 175.350757][T13005] bpf_prog_load+0x514/0x1070 [ 175.350846][T13005] ? security_bpf+0x2b/0x90 [ 175.350875][T13005] __sys_bpf+0x462/0x7b0 [ 175.350909][T13005] __x64_sys_bpf+0x41/0x50 [ 175.350939][T13005] x64_sys_call+0x2aea/0x2ff0 [ 175.350962][T13005] do_syscall_64+0xd2/0x200 [ 175.350994][T13005] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.351163][T13005] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.351195][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.351348][T13005] RIP: 0033:0x7efc3642eba9 [ 175.351367][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.351407][T13005] RSP: 002b:00007efc34e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.351430][T13005] RAX: ffffffffffffffda RBX: 00007efc36675fa0 RCX: 00007efc3642eba9 [ 175.351446][T13005] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 175.351462][T13005] RBP: 00007efc34e97090 R08: 0000000000000000 R09: 0000000000000000 [ 175.351474][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.351485][T13005] R13: 00007efc36676038 R14: 00007efc36675fa0 R15: 00007fff70a12f08 [ 175.351535][T13005] [ 175.351553][T13005] Mem-Info: [ 175.572627][T13005] active_anon:22631 inactive_anon:0 isolated_anon:0 [ 175.572627][T13005] active_file:28496 inactive_file:2378 isolated_file:0 [ 175.572627][T13005] unevictable:0 dirty:182 writeback:0 [ 175.572627][T13005] slab_reclaimable:3474 slab_unreclaimable:29262 [ 175.572627][T13005] mapped:30269 shmem:15705 pagetables:1524 [ 175.572627][T13005] sec_pagetables:0 bounce:0 [ 175.572627][T13005] kernel_misc_reclaimable:0 [ 175.572627][T13005] free:1839507 free_pcp:15490 free_cma:0 [ 175.618404][T13005] Node 0 active_anon:90524kB inactive_anon:0kB active_file:113984kB inactive_file:9512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121076kB dirty:728kB writeback:0kB shmem:62820kB kernel_stack:4272kB pagetables:6212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.645909][T13005] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.674713][T13005] lowmem_reserve[]: 0 2883 7862 7862 [ 175.680399][T13005] Node 0 DMA32 free:2949192kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 175.710635][T13005] lowmem_reserve[]: 0 0 4978 4978 [ 175.715732][T13005] Node 0 Normal free:4397336kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90608kB inactive_anon:0kB active_file:113984kB inactive_file:9576kB unevictable:0kB writepending:732kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:54304kB local_pcp:1568kB free_cma:0kB [ 175.747735][T13005] lowmem_reserve[]: 0 0 0 0 [ 175.752257][T13005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.764981][T13005] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949192kB [ 175.781202][T13005] Node 0 Normal: 540*4kB (M) 488*8kB (UME) 556*16kB (UME) 584*32kB (UME) 438*64kB (UM) 456*128kB (UME) 286*256kB (UM) 191*512kB (UME) 74*1024kB (UME) 54*2048kB (UM) 957*4096kB (UM) = 4397296kB [ 175.800349][T13005] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 175.809703][T13005] 46580 total pagecache pages [ 175.814390][T13005] 8 pages in swap cache [ 175.818784][T13005] Free swap = 108336kB [ 175.823171][T13005] Total swap = 124996kB [ 175.827379][T13005] 2097051 pages RAM [ 175.831201][T13005] 0 pages HighMem/MovableOnly [ 175.835917][T13005] 80445 pages reserved [ 175.851308][T13017] netlink: 'syz.0.2536': attribute type 21 has an invalid length. [ 175.859399][T13017] netlink: 'syz.0.2536': attribute type 5 has an invalid length. [ 175.867211][T13017] netlink: 'syz.0.2536': attribute type 6 has an invalid length. [ 175.937086][T13033] loop4: detected capacity change from 0 to 8192 [ 176.031282][T13033] rdma_op ffff88814ecab980 conn xmit_rdma 0000000000000000 [ 176.645079][T13126] netem: unknown loss type 0 [ 176.767054][T13140] lo speed is unknown, defaulting to 1000 [ 176.896688][T13151] loop4: detected capacity change from 0 to 8192 [ 176.919121][T13151] vfat: Unknown parameter '/dev/ppp' [ 176.992252][T13182] netlink: 'syz.0.2571': attribute type 2 has an invalid length. [ 177.017349][T13182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13182 comm=syz.0.2571 [ 177.030078][T13182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13182 comm=syz.0.2571 [ 177.186617][T13196] lo speed is unknown, defaulting to 1000 [ 177.294484][T13216] netlink: 'syz.4.2578': attribute type 21 has an invalid length. [ 177.302456][T13216] __nla_validate_parse: 42 callbacks suppressed [ 177.302485][T13216] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2578'. [ 177.351573][T13219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.443135][T13216] netlink: 'syz.4.2578': attribute type 5 has an invalid length. [ 177.451032][T13216] netlink: 'syz.4.2578': attribute type 6 has an invalid length. [ 177.458811][T13216] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2578'. [ 177.492029][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'. [ 177.645930][T13267] openvswitch: netlink: Message has 6 unknown bytes. [ 177.777393][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 177.777418][ T29] audit: type=1326 audit(1757636099.943:32947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 177.877933][ T29] audit: type=1326 audit(1757636099.973:32948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 177.901696][ T29] audit: type=1326 audit(1757636099.973:32949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 177.925286][ T29] audit: type=1326 audit(1757636099.983:32950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 177.949032][ T29] audit: type=1326 audit(1757636099.983:32951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 177.972790][ T29] audit: type=1326 audit(1757636099.983:32952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 177.996794][ T29] audit: type=1326 audit(1757636099.983:32953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 178.020510][ T29] audit: type=1326 audit(1757636099.983:32954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 178.044252][ T29] audit: type=1326 audit(1757636099.993:32955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 178.068010][ T29] audit: type=1326 audit(1757636099.993:32956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.4.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d455eba9 code=0x7ffc0000 [ 178.308364][T13299] veth0: entered promiscuous mode [ 178.385321][T13309] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 178.404152][T13302] IPVS: stopping master sync thread 13309 ... [ 178.548294][T13315] loop2: detected capacity change from 0 to 764 [ 178.601464][T13315] iso9660: Unknown parameter '' [ 178.638681][T13315] rdma_rxe: rxe_newlink: failed to add lo [ 178.732732][T13321] loop3: detected capacity change from 0 to 8192 [ 178.804034][T13350] rdma_op ffff88813fe54980 conn xmit_rdma 0000000000000000 [ 178.888560][T13355] loop4: detected capacity change from 0 to 512 [ 178.974399][T13355] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2606: error while reading EA inode 32 err=-116 [ 179.038731][T13355] EXT4-fs (loop4): Remounting filesystem read-only [ 179.045376][T13355] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 179.075264][T13291] veth0: left promiscuous mode [ 179.124429][T13355] EXT4-fs (loop4): 1 orphan inode deleted [ 179.163936][T13355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.230317][T13355] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.517679][T13411] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2619'. [ 179.526777][T13411] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2619'. [ 179.535932][T13411] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2619'. [ 179.574691][T13412] validate_nla: 1 callbacks suppressed [ 179.574757][T13412] netlink: 'syz.4.2620': attribute type 21 has an invalid length. [ 179.588300][T13412] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2620'. [ 179.597833][T13405] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.629646][T13405] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 179.670705][T13412] netlink: 'syz.4.2620': attribute type 5 has an invalid length. [ 179.678590][T13412] netlink: 'syz.4.2620': attribute type 6 has an invalid length. [ 179.686385][T13412] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2620'. [ 179.757829][T13411] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2619'. [ 179.766861][T13411] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2619'. [ 179.797859][T13434] FAULT_INJECTION: forcing a failure. [ 179.797859][T13434] name failslab, interval 1, probability 0, space 0, times 0 [ 179.797940][T13434] CPU: 1 UID: 0 PID: 13434 Comm: syz.0.2626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.798043][T13434] Tainted: [W]=WARN [ 179.798051][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.798066][T13434] Call Trace: [ 179.798073][T13434] [ 179.798083][T13434] __dump_stack+0x1d/0x30 [ 179.798110][T13434] dump_stack_lvl+0xe8/0x140 [ 179.798180][T13434] dump_stack+0x15/0x1b [ 179.798202][T13434] should_fail_ex+0x265/0x280 [ 179.798230][T13434] should_failslab+0x8c/0xb0 [ 179.798256][T13434] __kmalloc_noprof+0xa5/0x3e0 [ 179.798308][T13434] ? security_key_alloc+0x50/0x140 [ 179.798355][T13434] security_key_alloc+0x50/0x140 [ 179.798517][T13434] key_alloc+0x458/0x9a0 [ 179.798557][T13434] keyring_alloc+0x45/0xb0 [ 179.798594][T13434] lookup_user_key+0x2ea/0xd10 [ 179.798643][T13434] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 179.798695][T13434] keyctl_keyring_move+0x99/0x110 [ 179.798789][T13434] __se_sys_keyctl+0x5f7/0xb80 [ 179.798821][T13434] ? __rcu_read_unlock+0x4f/0x70 [ 179.798850][T13434] ? __fget_files+0x184/0x1c0 [ 179.798885][T13434] ? fput+0x8f/0xc0 [ 179.798945][T13434] __x64_sys_keyctl+0x67/0x80 [ 179.798982][T13434] x64_sys_call+0x2f6d/0x2ff0 [ 179.799009][T13434] do_syscall_64+0xd2/0x200 [ 179.799051][T13434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 179.799075][T13434] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.799174][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.799214][T13434] RIP: 0033:0x7f1b2a5aeba9 [ 179.799233][T13434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.799256][T13434] RSP: 002b:00007f1b29017038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 179.799318][T13434] RAX: ffffffffffffffda RBX: 00007f1b2a7f5fa0 RCX: 00007f1b2a5aeba9 [ 179.799335][T13434] RDX: fffffffffffffffb RSI: 000000001b9ccf8d RDI: 000000000000001e [ 179.799350][T13434] RBP: 00007f1b29017090 R08: 0000000000000001 R09: 0000000000000000 [ 179.799428][T13434] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 179.799444][T13434] R13: 00007f1b2a7f6038 R14: 00007f1b2a7f5fa0 R15: 00007ffe4fd53688 [ 179.799466][T13434] [ 179.816360][T13423] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 179.816543][T13423] SELinux: failed to load policy [ 179.930638][T13450] loop2: detected capacity change from 0 to 1024 [ 179.942847][T13450] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.184459][T13431] loop4: detected capacity change from 0 to 512 [ 180.238631][T13431] EXT4-fs: Ignoring removed i_version option [ 180.286243][T13474] loop3: detected capacity change from 0 to 512 [ 180.336612][T13431] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 180.346430][T13431] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 180.377045][T13474] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2633: error while reading EA inode 32 err=-116 [ 180.397395][T13450] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2629: bg 0: block 10: padding at end of block bitmap is not set [ 180.467961][T13474] EXT4-fs (loop3): Remounting filesystem read-only [ 180.474773][T13474] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 180.486890][T13431] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.2625: Invalid inode table block 1 in block_group 0 [ 180.502020][T13450] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2629: Failed to acquire dquot type 0 [ 180.516542][T13431] EXT4-fs (loop4): Remounting filesystem read-only [ 180.523093][T13431] EXT4-fs (loop4): get root inode failed [ 180.523245][T13489] loop5: detected capacity change from 0 to 512 [ 180.528784][T13431] EXT4-fs (loop4): mount failed [ 180.548235][T13474] EXT4-fs (loop3): 1 orphan inode deleted [ 180.559766][T13450] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2629: Failed to acquire dquot type 0 [ 180.567241][T13474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.593900][T13489] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2634: error while reading EA inode 32 err=-116 [ 180.607198][T13450] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2629: Freeing blocks not in datazone - block = 0, count = 4096 [ 180.626236][T13474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.645547][T13489] EXT4-fs (loop5): Remounting filesystem read-only [ 180.652200][T13489] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 180.672567][T13489] EXT4-fs (loop5): 1 orphan inode deleted [ 180.679926][T13450] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2629: Failed to acquire dquot type 0 [ 180.683139][T13489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.733144][T13489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.747413][T13450] EXT4-fs (loop2): 1 orphan inode deleted [ 180.753622][T13450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.849502][T13516] loop0: detected capacity change from 0 to 512 [ 180.875708][T13516] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2640: error while reading EA inode 32 err=-116 [ 180.901500][T13522] FAULT_INJECTION: forcing a failure. [ 180.901500][T13522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.914626][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.5.2641 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.914699][T13522] Tainted: [W]=WARN [ 180.914708][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.914724][T13522] Call Trace: [ 180.914732][T13522] [ 180.914742][T13522] __dump_stack+0x1d/0x30 [ 180.914768][T13522] dump_stack_lvl+0xe8/0x140 [ 180.914793][T13522] dump_stack+0x15/0x1b [ 180.914835][T13522] should_fail_ex+0x265/0x280 [ 180.914866][T13522] should_fail+0xb/0x20 [ 180.914892][T13522] should_fail_usercopy+0x1a/0x20 [ 180.914921][T13522] _copy_from_user+0x1c/0xb0 [ 180.915024][T13522] ___sys_sendmsg+0xc1/0x1d0 [ 180.915072][T13522] __x64_sys_sendmsg+0xd4/0x160 [ 180.915107][T13522] x64_sys_call+0x191e/0x2ff0 [ 180.915146][T13522] do_syscall_64+0xd2/0x200 [ 180.915185][T13522] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.915216][T13522] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.915299][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.915320][T13522] RIP: 0033:0x7f2007bdeba9 [ 180.915335][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.915352][T13522] RSP: 002b:00007f2006647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.915370][T13522] RAX: ffffffffffffffda RBX: 00007f2007e25fa0 RCX: 00007f2007bdeba9 [ 180.915385][T13522] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 180.915427][T13522] RBP: 00007f2006647090 R08: 0000000000000000 R09: 0000000000000000 [ 180.915443][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.915458][T13522] R13: 00007f2007e26038 R14: 00007f2007e25fa0 R15: 00007ffc7f0c50b8 [ 180.915482][T13522] [ 181.234171][T13516] EXT4-fs (loop0): Remounting filesystem read-only [ 181.240891][T13516] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 181.268994][T13516] EXT4-fs (loop0): 1 orphan inode deleted [ 181.302506][T13516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.365234][T13516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.536065][T13555] netlink: 'syz.5.2649': attribute type 21 has an invalid length. [ 181.567321][T13555] netlink: 'syz.5.2649': attribute type 5 has an invalid length. [ 181.575137][T13555] netlink: 'syz.5.2649': attribute type 6 has an invalid length. [ 181.669830][T13552] loop4: detected capacity change from 0 to 8192 [ 181.682035][T13570] veth0: entered promiscuous mode [ 182.013094][T13589] loop5: detected capacity change from 0 to 764 [ 182.030214][T13589] iso9660: Unknown parameter '' [ 182.050965][T13589] rdma_rxe: rxe_newlink: failed to add lo [ 182.170198][T13605] netlink: 'syz.4.2662': attribute type 21 has an invalid length. [ 182.200037][T13605] netlink: 'syz.4.2662': attribute type 5 has an invalid length. [ 182.207868][T13605] netlink: 'syz.4.2662': attribute type 6 has an invalid length. [ 182.290657][T13613] FAULT_INJECTION: forcing a failure. [ 182.290657][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 182.303360][T13613] CPU: 1 UID: 0 PID: 13613 Comm: syz.4.2664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.303401][T13613] Tainted: [W]=WARN [ 182.303410][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.303425][T13613] Call Trace: [ 182.303507][T13613] [ 182.303548][T13613] __dump_stack+0x1d/0x30 [ 182.303576][T13613] dump_stack_lvl+0xe8/0x140 [ 182.303599][T13613] dump_stack+0x15/0x1b [ 182.303639][T13613] should_fail_ex+0x265/0x280 [ 182.303678][T13613] should_failslab+0x8c/0xb0 [ 182.303781][T13613] kmem_cache_alloc_node_noprof+0x57/0x320 [ 182.303820][T13613] ? __alloc_skb+0x101/0x320 [ 182.303914][T13613] __alloc_skb+0x101/0x320 [ 182.303941][T13613] netlink_alloc_large_skb+0xba/0xf0 [ 182.303971][T13613] netlink_sendmsg+0x3cf/0x6b0 [ 182.304026][T13613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.304052][T13613] __sock_sendmsg+0x142/0x180 [ 182.304176][T13613] ____sys_sendmsg+0x31e/0x4e0 [ 182.304211][T13613] ___sys_sendmsg+0x17b/0x1d0 [ 182.304264][T13613] __x64_sys_sendmsg+0xd4/0x160 [ 182.304294][T13613] x64_sys_call+0x191e/0x2ff0 [ 182.304318][T13613] do_syscall_64+0xd2/0x200 [ 182.304374][T13613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.304403][T13613] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 182.304448][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.304472][T13613] RIP: 0033:0x7fa6d455eba9 [ 182.304515][T13613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.304532][T13613] RSP: 002b:00007fa6d2fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.304551][T13613] RAX: ffffffffffffffda RBX: 00007fa6d47a5fa0 RCX: 00007fa6d455eba9 [ 182.304566][T13613] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 182.304581][T13613] RBP: 00007fa6d2fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.304610][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.304625][T13613] R13: 00007fa6d47a6038 R14: 00007fa6d47a5fa0 R15: 00007fff3aacc6e8 [ 182.304653][T13613] [ 182.335127][T13609] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 182.450890][T13560] veth0: left promiscuous mode [ 182.722434][T13609] SELinux: failed to load policy [ 182.878533][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 182.878552][ T29] audit: type=1400 audit(1757636105.043:33333): avc: denied { shutdown } for pid=13631 comm="syz.4.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.980144][ T29] audit: type=1326 audit(1757636105.123:33334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.003891][ T29] audit: type=1326 audit(1757636105.123:33335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.027537][ T29] audit: type=1326 audit(1757636105.123:33336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.051590][ T29] audit: type=1326 audit(1757636105.123:33337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.075292][ T29] audit: type=1326 audit(1757636105.123:33338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.098923][ T29] audit: type=1326 audit(1757636105.123:33339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.122586][ T29] audit: type=1326 audit(1757636105.123:33340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.146180][ T29] audit: type=1326 audit(1757636105.123:33341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.169751][ T29] audit: type=1326 audit(1757636105.123:33342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc3642eba9 code=0x7ffc0000 [ 183.196267][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.252590][T13652] loop5: detected capacity change from 0 to 512 [ 183.286613][T13652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.407276][T13676] netlink: 'syz.4.2680': attribute type 21 has an invalid length. [ 183.415216][T13676] __nla_validate_parse: 20 callbacks suppressed [ 183.415232][T13676] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2680'. [ 183.457302][T13676] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2680'. [ 183.578091][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.693361][T13697] lo speed is unknown, defaulting to 1000 [ 184.081553][T13732] loop3: detected capacity change from 0 to 764 [ 184.090811][T13732] iso9660: Unknown parameter '' [ 184.102775][T13731] loop0: detected capacity change from 0 to 8192 [ 184.116972][T13732] rdma_rxe: rxe_newlink: failed to add lo [ 184.178871][T13722] SELinux: failed to load policy [ 184.195484][T13743] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2692'. [ 184.204494][T13743] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2692'. [ 184.213814][T13743] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2692'. [ 184.325637][T13743] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2692'. [ 184.334665][T13743] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2692'. [ 184.343889][T13743] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2692'. [ 184.402845][T13759] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2696'. [ 184.411953][T13759] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2696'. [ 184.909349][T13803] loop2: detected capacity change from 0 to 512 [ 184.943309][T13803] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.2708: error while reading EA inode 32 err=-116 [ 185.019322][T13803] EXT4-fs (loop2): Remounting filesystem read-only [ 185.026002][T13803] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 185.112074][T13803] EXT4-fs (loop2): 1 orphan inode deleted [ 185.166500][T13803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.216617][T13803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.230210][T13829] FAULT_INJECTION: forcing a failure. [ 185.230210][T13829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.243478][T13829] CPU: 0 UID: 0 PID: 13829 Comm: syz.4.2716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.243553][T13829] Tainted: [W]=WARN [ 185.243559][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.243576][T13829] Call Trace: [ 185.243679][T13829] [ 185.243687][T13829] __dump_stack+0x1d/0x30 [ 185.243709][T13829] dump_stack_lvl+0xe8/0x140 [ 185.243735][T13829] dump_stack+0x15/0x1b [ 185.243756][T13829] should_fail_ex+0x265/0x280 [ 185.243807][T13829] should_fail+0xb/0x20 [ 185.243877][T13829] should_fail_usercopy+0x1a/0x20 [ 185.243906][T13829] _copy_to_user+0x20/0xa0 [ 185.243938][T13829] simple_read_from_buffer+0xb5/0x130 [ 185.243961][T13829] proc_fail_nth_read+0x10e/0x150 [ 185.244047][T13829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.244082][T13829] vfs_read+0x1a8/0x770 [ 185.244183][T13829] ? __rcu_read_unlock+0x4f/0x70 [ 185.244212][T13829] ? __fget_files+0x184/0x1c0 [ 185.244256][T13829] ksys_read+0xda/0x1a0 [ 185.244305][T13829] __x64_sys_read+0x40/0x50 [ 185.244335][T13829] x64_sys_call+0x27bc/0x2ff0 [ 185.244364][T13829] do_syscall_64+0xd2/0x200 [ 185.244432][T13829] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.244465][T13829] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.244566][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.244595][T13829] RIP: 0033:0x7fa6d455d5bc [ 185.244614][T13829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.244741][T13829] RSP: 002b:00007fa6d2fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.244760][T13829] RAX: ffffffffffffffda RBX: 00007fa6d47a5fa0 RCX: 00007fa6d455d5bc [ 185.244772][T13829] RDX: 000000000000000f RSI: 00007fa6d2fc70a0 RDI: 0000000000000003 [ 185.244786][T13829] RBP: 00007fa6d2fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.244866][T13829] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 185.244879][T13829] R13: 00007fa6d47a6038 R14: 00007fa6d47a5fa0 R15: 00007fff3aacc6e8 [ 185.244899][T13829] [ 185.606805][T13847] loop5: detected capacity change from 0 to 512 [ 185.647190][T13847] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2719: error while reading EA inode 32 err=-116 [ 185.666834][T13846] loop2: detected capacity change from 0 to 8192 [ 185.728094][T13847] EXT4-fs (loop5): Remounting filesystem read-only [ 185.735058][T13847] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 185.846968][T13867] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 185.853541][T13867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.858525][T13847] EXT4-fs (loop5): 1 orphan inode deleted [ 185.861164][T13867] vhci_hcd vhci_hcd.0: Device attached [ 185.889426][T13847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.902603][T13867] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 185.909163][T13867] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.917442][T13867] vhci_hcd vhci_hcd.0: Device attached [ 185.956088][T13867] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.974871][T13847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.986573][T13873] loop4: detected capacity change from 0 to 256 [ 186.002370][T13867] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.044375][T13867] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.058772][T13873] FAT-fs (loop4): Directory bread(block 64) failed [ 186.094544][T13873] FAT-fs (loop4): Directory bread(block 65) failed [ 186.113443][T13867] loop0: detected capacity change from 0 to 512 [ 186.123773][ T803] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 186.143366][T13873] FAT-fs (loop4): Directory bread(block 66) failed [ 186.175161][T13867] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.195296][T13873] FAT-fs (loop4): Directory bread(block 67) failed [ 186.201858][T13873] FAT-fs (loop4): Directory bread(block 68) failed [ 186.227833][T13867] EXT4-fs (loop0): 1 truncate cleaned up [ 186.249318][T13873] FAT-fs (loop4): Directory bread(block 69) failed [ 186.265616][T13867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.285349][T13873] FAT-fs (loop4): Directory bread(block 70) failed [ 186.312585][T13873] FAT-fs (loop4): Directory bread(block 71) failed [ 186.373201][T13873] FAT-fs (loop4): Directory bread(block 72) failed [ 186.415138][T13873] FAT-fs (loop4): Directory bread(block 73) failed [ 186.644280][T13880] ================================================================== [ 186.652427][T13880] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 186.660525][T13880] [ 186.662869][T13880] write to 0xffff888103fc99a8 of 8 bytes by task 13867 on cpu 1: [ 186.670598][T13880] filemap_splice_read+0x4f4/0x740 [ 186.675760][T13880] ext4_file_splice_read+0x8f/0xb0 [ 186.680913][T13880] splice_direct_to_actor+0x26f/0x680 [ 186.686322][T13880] do_splice_direct+0xda/0x150 [ 186.691120][T13880] do_sendfile+0x380/0x650 [ 186.695563][T13880] __x64_sys_sendfile64+0x105/0x150 [ 186.700787][T13880] x64_sys_call+0x2bb0/0x2ff0 [ 186.705489][T13880] do_syscall_64+0xd2/0x200 [ 186.710037][T13880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.715949][T13880] [ 186.718288][T13880] write to 0xffff888103fc99a8 of 8 bytes by task 13880 on cpu 0: [ 186.726033][T13880] filemap_splice_read+0x4f4/0x740 [ 186.731164][T13880] ext4_file_splice_read+0x8f/0xb0 [ 186.736323][T13880] splice_direct_to_actor+0x26f/0x680 [ 186.741717][T13880] do_splice_direct+0xda/0x150 [ 186.746504][T13880] do_sendfile+0x380/0x650 [ 186.750957][T13880] __x64_sys_sendfile64+0x105/0x150 [ 186.756186][T13880] x64_sys_call+0x2bb0/0x2ff0 [ 186.760890][T13880] do_syscall_64+0xd2/0x200 [ 186.765437][T13880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.771396][T13880] [ 186.773734][T13880] value changed: 0x000000000000006e -> 0x000000000000006f [ 186.780851][T13880] [ 186.783181][T13880] Reported by Kernel Concurrency Sanitizer on: [ 186.789342][T13880] CPU: 0 UID: 0 PID: 13880 Comm: syz.0.2727 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.800734][T13880] Tainted: [W]=WARN [ 186.804561][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.814635][T13880] ================================================================== [ 187.066355][T13870] vhci_hcd: connection closed [ 187.070268][T13868] vhci_hcd: connection reset by peer [ 187.083574][ T5723] vhci_hcd: stop threads [ 187.087965][ T5723] vhci_hcd: release socket [ 187.092448][ T5723] vhci_hcd: disconnect device [ 187.139597][ T5723] vhci_hcd: stop threads [ 187.143903][ T5723] vhci_hcd: release socket [ 187.148427][ T5723] vhci_hcd: disconnect device [ 187.607180][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.740831][ T3312] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 187.748466][ T3312] FAT-fs (loop4): Filesystem has been set read-only [ 188.070516][ T5650] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.080366][ T5650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.118185][ T5650] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.128001][ T5650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.209870][ T5650] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.219689][ T5650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.266473][ T5650] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.276312][ T5650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.333104][ T5650] bridge_slave_1: left allmulticast mode [ 188.338916][ T5650] bridge_slave_1: left promiscuous mode [ 188.344612][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.352374][ T5650] bridge_slave_0: left allmulticast mode [ 188.358142][ T5650] bridge_slave_0: left promiscuous mode [ 188.363796][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.410865][ T5650] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 188.448772][ T5650] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 188.458292][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.468334][ T5650] bond0 (unregistering): (slave bond3): Releasing backup interface [ 188.476903][ T5650] bond0 (unregistering): Released all slaves [ 188.485467][ T5650] bond1 (unregistering): Released all slaves [ 188.493869][ T5650] bond2 (unregistering): Released all slaves [ 188.502502][ T5650] bond3 (unregistering): Released all slaves [ 188.564970][ T5650] hsr_slave_0: left promiscuous mode [ 188.570659][ T5650] hsr_slave_1: left promiscuous mode [ 188.576371][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.583811][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.592214][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.599632][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.609883][ T5650] veth1_vlan: left promiscuous mode [ 188.615283][ T5650] veth0_vlan: left promiscuous mode [ 188.668433][ T5650] team0 (unregistering): Port device team_slave_1 removed [ 188.677724][ T5650] team0 (unregistering): Port device team_slave_0 removed [ 191.165225][ T803] usb 1-1: enqueue for inactive port 0 [ 191.170752][ T803] usb 1-1: enqueue for inactive port 0 [ 191.245773][ T803] vhci_hcd: vhci_device speed not set