last executing test programs: 44.525898251s ago: executing program 2 (id=1988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = gettid() select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r4 = memfd_secret(0x80000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002adf25170000002c003080050002000b00000004000400ff5c1e2a7252377adcccabcc58f822940c00018008000100000000000c00060001000000010000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES8=r2, @ANYRESDEC, @ANYBLOB=',\x00\x00\x00', @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf251c00000008000400ffffffff080004000000000008000100", @ANYRES32=r7, @ANYBLOB="08000400ffffffff0800040000000000080004000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000300000008000100", @ANYRES32=r7, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) mprotect(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x300000b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@remote, r11}, 0x14) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003d8bd96f3f2be7c177106fbc2f7d72ef5a6e885f02506ad48cc8d0cfa1df11b054e59016c3343328827694ad811c18b0c0a9b3c01a"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2802}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 43.579594206s ago: executing program 2 (id=2008): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) 43.423238191s ago: executing program 2 (id=2011): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x2000) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b3, &(0x7f0000000780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000f40)=ANY=[@ANYBLOB="140000005200000003000000060007000a00010009220000226fe4301d9b3adf63b304ca7bcbf23fdfb4d3aae889db309792f9c27b8a08c4159f9c46db6d5f34a89f31"], &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) io_setup(0x2, &(0x7f0000000d40)=0x0) io_pgetevents(r3, 0x2, 0x6, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000e40)={0x0, 0x3938700}, 0x0) 42.861524398s ago: executing program 2 (id=2022): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdebd1000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) fchown(r3, 0xee01, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f00000000c0)={0xa, 0x4, 0xfffb, @empty}, 0x1c) writev(r1, &(0x7f0000003800)=[{&(0x7f0000000300)=',', 0x1}], 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 41.114243753s ago: executing program 2 (id=2059): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) 40.401712084s ago: executing program 2 (id=2073): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nouid32}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@auto_da_alloc}]}, 0xfa, 0x480, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 7) io_submit(0x0, 0x0, 0x0) 40.401408364s ago: executing program 32 (id=2073): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nouid32}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@auto_da_alloc}]}, 0xfa, 0x480, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 7) io_submit(0x0, 0x0, 0x0) 4.659286223s ago: executing program 5 (id=2755): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4008000) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001b, 0x4008032, 0xffffffffffffffff, 0xd069000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000100) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf") sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.357716223s ago: executing program 0 (id=2778): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(0xffffffffffffffff, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc891}, 0x40000) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (fail_nth: 10) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xf0c, 0x1, 0x1, {0x22, 0x256}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x86}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x8, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x2, 0x9, 0x20, 0x5}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) 3.264233703s ago: executing program 0 (id=2781): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20048804) 3.241107085s ago: executing program 0 (id=2782): socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 3.19438801s ago: executing program 0 (id=2784): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb5be1c7e4feff06000000010000004500000025000000190004000400add07e40b0e0ae000205000000000006040000", 0xffffffffffffff56}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e00000dec36c49429a5457a0ab1812ec027f0000010200000000000000488a35d407eb5edea06f2d18fe1c1f1fc9390638fb22d0f01ee051f53a33ca742658d92370b4452eeefe92d5985fc768ddf4"], 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000001780)={0x0, 0x2, 0x313b, 0x1ff}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r11, 0x0, 0x400000}, 0x18) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=@gettaction={0x12c, 0x32, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x22d}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8001}, 0x880) 2.146015195s ago: executing program 5 (id=2789): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x4, 0x3fff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) rt_sigaction(0xe, 0x0, 0x0, 0x8, &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x17c, r7, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9057f4dc8df198b6f63cb36c05f74c9c093622ae639dfde6a188994222"}}, @TIPC_NLA_NODE_REKEYING={0x0, 0x6, 0xa}, @TIPC_NLA_NODE_UP={0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4cd3b5eadd41158dea2b6aea3e105cf6db0ef20a958b07f615882feb3a179202e641e254"}}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_ID={0x0, 0x3, "d2d00a7a9fea0547893aa0e1ad3f33cee63bb0eef6707b0e04f63025a028923fa117a592c6f10fb8ce699496"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x56, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0xfffffff7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40840) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x5, 0x754d, 0x6, 0x9, 0xf, r3}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0x6}, &(0x7f0000000180)=0x8) statx(r5, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x10, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000740)={[{@inlinecrypt}, {@nodioread_nolock}, {@data_ordered}], [{@fowner_lt={'fowner<', r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}]}, 0x6, 0x516, &(0x7f0000001bc0)="$eJzs3U1vI2cdAPD/OHY3aQNOWw6lEtvQF2URrJM0fYk4lEbi5VQJUe7ZkDhRFCdeJU67iVaQfgIQqgCJC5y4IPEBkNB+BARaCW4cOIFWkGUPXJDR2OPdxLFTR+vYu8nvJ03mmeex/f8/k3gyz8zYE8ClNRkR70fESES8ERHFrD6XTXHQnNLH3T+8vZxOSdTrH/4riSSra3/N57Knpb73nYgfJCfj7uztbyxVKuXt49X719c3l9bKa+WtubnZd+bfnX97fqbHniT501qfj4j3vvngZz/+zbff+8PXPv774j+v/TBN60bW3qkf/dDseiFGjy1fHOnfTb7RQwAAngYvRsQLEfFqRHwlijESp+5GAwAAAE+h+jfGr7SKAAAAwMWUi4jxSHKl7Hrf8cjlSqXmNbxfiGdzlepO7aur1d2tlbQtYiIKudX1Snkmu1Z4IgpJujzbKD9afrNteS67BvfT4li63GgDAAAABmOhbfz/oNgc/wMAAAAXTOeT8SMDzwMAAAA4Py7GBwAAgIvP+B8AAAAutO9+8EE61e8f3m7cB2Dlo73djepH11fKOxulzd3l0nJ1+2ZprVpdq5RLPXwioFKt3nwrtnZvTdfyO7Xpnb39xc3q7lZtsXFf78XyCwPoEwAAAHDc86/c+WsSEQdfH2tMqWeytsJQMwOeIEm+reLGl4eUCdAXZ/6Sn8nd80kEGLj2/+nA5WGMDyTtFW07BqPddhX+2F5x9TNj2ecAAIDhmPqi8/9wWeWGnQAwND8ZdgLA0PR8LH7yfPMABq/gNn9w6Z04/99mtFvDifP/3dTrZ0oIAADou/Hm7CCyc4HjkcuVSg9PCyar65XyTER8PiL+UixcSZdnh5gvAAAAAAAAAAAAAAAAAAAAAAAAADyN6vUk6gAAAMCFFpH7R5Ld/2uq+Pp4+/GBZ5L/FhvziPj4lx/+/NZSrbY9m9b/+2F97RdZ/ZvDOIIBAAAAl1Hh1NbWOL01jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrp/eHu5NQ0y7r2FGIuJTvHzMdqYj0YhIp79TxL5I89LImKkD/EPPomIlzrFT9K0YiLLoj1+LiLGhhz/uT7Eh8vszkJEvN/p/ZeLyca88/svn02P695C403eMX5r+zfSZfv3uR5jvHz3d9Nd438S8XK+8/anFT/pEv+1HuPf+P7+fre2+q8jpjr+/0mas1z2wNrmzemdvf3r65tLa+W18tbc3Ow78+/Ovz0/M726XilnPzvG+OmXfn/wadf+NwMcjd/q50Qzwx916//rPfb/f3dvHb7YLBZOxo+49lrn3/9LjXnn9Z/+TbyRrZ60fapVPmiWj7r62z9d7ZZbGn+ly/pv/v6L9Ufx88f6f6237h/t8696ewoAcJ529vY3liqV8vYACq++1b8XTBqFdC9oQMkPu9A62PGk5DM6nOhX4lxD5P/cXMtdH/Otxw7R2h1+nNf5W9+6nI4ZOjcNa4sEAACcl0c7/cPOBAAAAAAAAAAAAAAAAAAAAC6vxuf/R874RYCvnO2bxtpjHgynqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp/p/AAAA//93IL6q") 1.136325946s ago: executing program 0 (id=2791): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0xf, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r3, @ANYBLOB="fb00060b0a000200aaaaaaaaaabb00000c000e80050001"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x10, 0x8001, 0x1, @empty, @loopback, 0x7, 0x8000, 0x5, 0xfff}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x0, 0x3, {{0x12, 0x4, 0x2, 0x33, 0x48, 0x66, 0x0, 0x4a, 0x2f, 0x0, @empty, @remote, {[@lsrr={0x83, 0x7, 0xe7, [@dev={0xac, 0x14, 0x14, 0x2f}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x1b, 0xe7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @remote, @empty]}, @rr={0x7, 0xb, 0x98, [@local, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x5, {{0x1a, 0x4, 0x3, 0x5, 0x68, 0x66, 0x0, 0x26, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x27, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @local, @loopback, @remote, @loopback, @empty, @broadcast]}, @ssrr={0x89, 0x7, 0x9b, [@local]}, @timestamp={0x44, 0x24, 0xbd, 0x0, 0xc, [0x5, 0x9, 0x7b08, 0xacc0, 0xfffffff9, 0x7, 0x5, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x230, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0xac, 0x3, "10c1889ad50ac2b58ec8274b33d628026f5732b81d558bdc326f93c56a1fcfe1798c493123e29b3a7a80155b27daad79ae3341dda809fda5586b295da79975a2cccbfcfc978c1f8bb810fb93aa1cd7ec40b86c98637450a8ac588cc05d7146f0176cf362c3abc2f2b2df22c43419287eb7d9bbc75c7e1504fe7ef711a491794c9c85a3060a4a480780e5978cc8909ff559e1f9e83c0e28f8bd5fcc7190844acd6866a937a5b59458"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0x9d, 0x3, "da34efbaacbaa2bf81e83fd0fd4b457a20f972ae3267a313b016c11befd55ff6753737bb7e8c1622b60f6d5af31ea0da1b4a5a9ac3c0f198c26a91be78a8b5c9e517c366063430963ccfff75b92d14ad678e0d16217757c4ab5a9e7e25b666a482cc574b92ceb4dbb6c960fb4eabcce9754459632339a708ad78eb4063ea735cd33ac0dc3af6813dc3ad7ea6c301717a5f07a016dcf8348cd5"}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_SOPASS={0x3a, 0x3, "b2d2feaa7aa08c76e652b5cf28e5588d496a7b66bf65dafafa580ba0eb1fbae31dcc5b6059dd802373879520bbb815317f4c29f33863"}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x800}, 0x48000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11702, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x9, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0xb, 0x8, 0x6, 0xffffffffffffffe0, 0x4}, @ldst={0x2, 0x1, 0x0, 0xa, 0x3, 0x10, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff3460, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 1.09356404s ago: executing program 5 (id=2793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.041209775s ago: executing program 5 (id=2795): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x2}, 0x18) perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x10) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r4) request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='\'{)\x00', r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x4}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 1.005590679s ago: executing program 1 (id=2796): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x2}, 0x18) perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x2000000, 0x4000000}, 0x20048054) 969.220012ms ago: executing program 4 (id=2797): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 897.51438ms ago: executing program 5 (id=2799): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffc37, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x144, 0x1a, 0xffffffffffffffff, 0x4070bd28, 0x3, {{@in=@private=0xa010101, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x84d4, 0x6c}, @in=@broadcast, {0x100000000, 0x0, 0x3d0c, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffc, 0xa3}, {0x936d, 0x3d49, 0x4000}, 0x3, 0x3503, 0xa, 0x1, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x3e}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzsz8FtwjAYBeDnJm7aS7tCjx2BQWCfCLZgAziwBptwYIkgEy4ZACGk7ztYfn62pT+81Gf6Rd6dhtUl2bcmKbWM6ebmv79fLXMaU5OPXOvf9+L9eXtYP7bT1NaulmRqfwzp8tuOfub+K9kcnz0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyDWwAAAP//hvML2A==") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x5, 0x519, &(0x7f00000009c0)="$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") sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x1, 0xa, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 897.05406ms ago: executing program 3 (id=2800): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) r2 = socket(0x2, 0x80805, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 884.561331ms ago: executing program 0 (id=2801): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 881.665841ms ago: executing program 1 (id=2802): socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 801.87729ms ago: executing program 3 (id=2803): socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0xc1, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) r5 = io_uring_setup(0x4d3f, &(0x7f0000000940)={0x0, 0xe8fb, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480), 0x66) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000540)='./file0\x00', 0x2) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d0001050001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x106, 0x5}}, 0x20) 800.73589ms ago: executing program 4 (id=2804): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x10c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x400005, 0xffffffc6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x6, 0x9, 0x2, r1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00e000000100000000"], 0x38}}, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@getchain={0x0, 0x66, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x6}, {0xffff, 0x7}, {0xd, 0xfff1}}, [{0x0, 0xb, 0x3}, {0x0, 0xb, 0x5}, {0x0, 0xb, 0x23}, {0x0, 0xb, 0xc}]}, 0x48}}, 0x4810) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 784.846291ms ago: executing program 1 (id=2805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000a00)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, &(0x7f0000000100)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='tegra_dma_tx_status\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xd4}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x40) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000211bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="42064de9360e5088626b944ec84a97b3b774842edbf1d076d9bd7f71ffecc0a285117ec5f993a578db8d90a6bfc71f9435c8e094bbccfdfffbbadb94a82cdeb11a2945c7eab5bf727af0aba64f7575bac17e574cfe7db0ef0abc61f6b60429c58042ec6edaa9253e41ad01a7280d464ef5201357569a3bf557d45fa73140e4cda0643e5c939d52499cae2b28cc3b77fc1f0abc407f8210b1445a65c600ef6853a7f98f2818ef98b06baf256823466d82c718d026000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf2500000000060006008000000008000100", @ANYRES32=0x0, @ANYBLOB="0c000300020000000000000008000700", @ANYRES32, @ANYBLOB="0800020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000009c0)={&(0x7f0000000780)="c628b8573ac324ae36c4b227d6348d331a9a687bf0c1a26fb5af2fb8e6326932cff88a4e1136a70a3bfd5aa9fca3097ee6b380c7479d4bef6a5c7b2eb890b4fd04c24d0882a04aed", &(0x7f00000005c0), &(0x7f0000000800)="950ed629aa9bf235cbe93f4924c224a1aa251ab129b7a90835056133d6427946443b8c5c5133d8b8636ede0de25fe65e5af50eee7adc817d4e2075a9316b95ddfdabaac520df603d813ef7a93f8df42c18e784372361437b6c575bda25e4a868ce228866d463a065e01e3746cc0cfca27d", &(0x7f0000000880)="f2a26085117c1c2b0a21f3eb32c5c322352131410ceaa6d3dd8f902e16e47fc6c94d7a82815fde828252286f80f88d36951f3c6977d4a6699d983cd0fa91eb193b5459b9dc406796f82c5cd7ce77beef4d098b9cc78b198c06c5586d08e5cec761b64de7d7f4ab7aace620b750c383fd80f2e2e0ff8b700cd3f4abb332", 0x7, r10}, 0x38) r11 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, 0x0) 677.662972ms ago: executing program 4 (id=2806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0xf65a, 0x6, {{0xd, 0x4, 0x2, 0x27, 0x34, 0x64, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, {[@timestamp={0x44, 0x20, 0x84, 0x0, 0x2, [0x40, 0x1000, 0x76, 0xff, 0x9, 0x9, 0x4]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xbc, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x800c) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x1) fchdir(r8) r9 = syz_genetlink_get_family_id$nl80211(0x0, r8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r9, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x18001) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000c2cbd70000300"/18, @ANYRES32=r10, @ANYBLOB="1800330084000d0008021100000008021100000104c0b3000a000600ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000008}, 0x40004) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 668.427913ms ago: executing program 3 (id=2807): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xa7c, 0x7fffffff, 0x1}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async, rerun: 64) r4 = getpid() setreuid(0xee00, 0x0) (async) r5 = syz_pidfd_open(r4, 0x0) prlimit64(r4, 0x6, &(0x7f0000000040)={0x80, 0x192b}, 0x0) (async) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x95340580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}}, 0x18}}, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/162, 0xa2, 0x89efdb6c86f22aa4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) 622.827927ms ago: executing program 4 (id=2808): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (fail_nth: 9) 610.778279ms ago: executing program 5 (id=2809): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 593.20348ms ago: executing program 3 (id=2810): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @link_local={0x7}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "20029476b3addfab81507b25977f5d53"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='objagg_obj_parent_assign\x00', r2}, 0x18) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) 402.263369ms ago: executing program 4 (id=2811): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 272.848092ms ago: executing program 3 (id=2812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000024c0)=[{{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x1, 0xe0) 265.920593ms ago: executing program 1 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000024c0)=[{{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x1, 0xe0) 241.017026ms ago: executing program 4 (id=2814): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)) socket(0x40000000015, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$snapshot(r1, &(0x7f0000000100)='/', 0x1) write$snapshot(r1, 0x0, 0x0) 122.645658ms ago: executing program 1 (id=2815): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) r0 = syz_io_uring_setup(0x681a, &(0x7f0000000540)={0x0, 0xb6f6, 0x100, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0xfe, 0x20, 0x8, 0xa0, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x7800, 0x5, 0xfffffff9}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0x400000000000a3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x1, 0x8, 0x1, {0x2}}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x9) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1], 0x50) lsm_set_self_attr(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="6500000000000000030000000000000043000000000000002300000000000000d7b8fddf5837aade64b91d51ac8959497b4317b4a87055e8d21b9668d9bb8cd00b723a2943b73432d3e44572f1629a2c2dd8df0a8a3915cfb9bcd7e2886ca0299ac715deb77cf7900067c411f0eff0c027992c22c5730492df2258048f899550a1ec318914bba2471178a8ef06c8835d3fc603d1cf12318aeafa033adc749c856bbd959f678fc0293d55bfa1ab0a87b834eae25d5496ef265cbc1fdcf1a7066d482ea5da48768538c5e295d669f2ef53099ad8ba91a1f9"], 0x43, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) 117.876958ms ago: executing program 3 (id=2816): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000871170f39f7b7d237458bf8d0cae090e6e343c8fceaeafdfb191e2e079ae64cdefe4feae313186748be88265640937566f99aa8c8b540ce06fa943a8188af56b8a903b9eb0dfdfbd8d974a471394af645042ed2137a047ea532141f5b76622b0be9c3153996040c32542efae79e722ae0737b8b1", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000005240), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 1 (id=2817): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') (fail_nth: 5) kernel console output (not intermixed with test programs): efaulting to 1000 [ 156.678975][ T9888] lo speed is unknown, defaulting to 1000 [ 156.681463][ T9887] SELinux: failed to load policy [ 156.691435][ T9881] JBD2: no valid journal superblock found [ 156.697392][ T9881] EXT4-fs (loop3): Could not load journal inode [ 156.748872][ T9894] FAULT_INJECTION: forcing a failure. [ 156.748872][ T9894] name failslab, interval 1, probability 0, space 0, times 0 [ 156.761600][ T9894] CPU: 0 UID: 0 PID: 9894 Comm: syz.5.2308 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.761640][ T9894] Tainted: [W]=WARN [ 156.761648][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.761703][ T9894] Call Trace: [ 156.761710][ T9894] [ 156.761716][ T9894] __dump_stack+0x1d/0x30 [ 156.761743][ T9894] dump_stack_lvl+0xe8/0x140 [ 156.761778][ T9894] dump_stack+0x15/0x1b [ 156.761798][ T9894] should_fail_ex+0x265/0x280 [ 156.761838][ T9894] should_failslab+0x8c/0xb0 [ 156.761875][ T9894] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 156.761978][ T9894] ? __alloc_skb+0x101/0x320 [ 156.762012][ T9894] __alloc_skb+0x101/0x320 [ 156.762069][ T9894] alloc_skb_with_frags+0x7d/0x470 [ 156.762111][ T9894] ? cmp_ex_search+0x25/0x40 [ 156.762176][ T9894] ? ref_tracker_alloc+0x1f2/0x2f0 [ 156.762261][ T9894] sock_alloc_send_pskb+0x430/0x4e0 [ 156.762291][ T9894] ? __rcu_read_unlock+0x4f/0x70 [ 156.762324][ T9894] packet_sendmsg+0x222b/0x31f0 [ 156.762359][ T9894] ? fixup_exception+0x741/0xd50 [ 156.762423][ T9894] ? avc_has_perm+0xf7/0x180 [ 156.762450][ T9894] ? selinux_socket_sendmsg+0x175/0x1b0 [ 156.762487][ T9894] ? __pfx_packet_sendmsg+0x10/0x10 [ 156.762598][ T9894] __sock_sendmsg+0x145/0x180 [ 156.762652][ T9894] __sys_sendto+0x268/0x330 [ 156.762760][ T9894] __x64_sys_sendto+0x76/0x90 [ 156.762793][ T9894] x64_sys_call+0x2d14/0x3000 [ 156.762821][ T9894] do_syscall_64+0xd2/0x200 [ 156.762920][ T9894] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.762950][ T9894] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.763017][ T9894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.763043][ T9894] RIP: 0033:0x7fe5e130f6c9 [ 156.763059][ T9894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.763078][ T9894] RSP: 002b:00007fe5dfd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 156.763101][ T9894] RAX: ffffffffffffffda RBX: 00007fe5e1565fa0 RCX: 00007fe5e130f6c9 [ 156.763182][ T9894] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 156.763194][ T9894] RBP: 00007fe5dfd77090 R08: 0000200000000140 R09: 0000000000000014 [ 156.763208][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.763222][ T9894] R13: 00007fe5e1566038 R14: 00007fe5e1565fa0 R15: 00007ffe164100b8 [ 156.763245][ T9894] [ 157.079048][ T9902] vhci_hcd: default hub control req: a003 v0001 i0003 l0 [ 157.103128][ T9902] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 157.149502][ T9910] loop3: detected capacity change from 0 to 1024 [ 157.173094][ T9910] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.184022][ T9910] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.201150][ T9913] SELinux: failed to load policy [ 157.206257][ T29] kauditd_printk_skb: 963 callbacks suppressed [ 157.206294][ T29] audit: type=1326 audit(2000000008.800:22767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9912 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a10f6c9 code=0x7ffc0000 [ 157.231219][ T9910] JBD2: no valid journal superblock found [ 157.241847][ T9910] EXT4-fs (loop3): Could not load journal inode [ 157.280953][ T9916] lo speed is unknown, defaulting to 1000 [ 157.312025][ T29] audit: type=1326 audit(2000000008.810:22768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9912 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a10f6c9 code=0x7ffc0000 [ 157.316586][ T9916] lo speed is unknown, defaulting to 1000 [ 157.335786][ T29] audit: type=1326 audit(2000000008.840:22769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76a1cadf10 code=0x7ffc0000 [ 157.365113][ T29] audit: type=1326 audit(2000000008.840:22770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76a1caf2cb code=0x7ffc0000 [ 157.388554][ T29] audit: type=1326 audit(2000000008.840:22771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76a1cae32a code=0x7ffc0000 [ 157.411929][ T29] audit: type=1326 audit(2000000008.840:22772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a1caf6c9 code=0x7ffc0000 [ 157.435571][ T29] audit: type=1326 audit(2000000008.860:22773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.3.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a1caf6c9 code=0x7ffc0000 [ 157.520313][ T29] audit: type=1326 audit(2000000009.060:22774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a1caf6c9 code=0x7ffc0000 [ 157.521694][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2318'. [ 157.543955][ T29] audit: type=1326 audit(2000000009.060:22775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a1caf6c9 code=0x7ffc0000 [ 157.576608][ T29] audit: type=1326 audit(2000000009.060:22776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a1caf6c9 code=0x7ffc0000 [ 157.597869][ T9921] SELinux: failed to load policy [ 157.604943][ T9911] netlink: 'syz.0.2314': attribute type 12 has an invalid length. [ 157.639484][ T9927] lo speed is unknown, defaulting to 1000 [ 157.676484][ T9927] lo speed is unknown, defaulting to 1000 [ 157.808260][ T9941] lo speed is unknown, defaulting to 1000 [ 157.819505][ T9941] lo speed is unknown, defaulting to 1000 [ 157.828679][ T9935] SELinux: failed to load policy [ 157.935709][ T9947] lo speed is unknown, defaulting to 1000 [ 157.940792][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 157.952440][ T9933] Cannot find del_set index 0 as target [ 157.966636][ T9947] lo speed is unknown, defaulting to 1000 [ 157.973208][ T9932] delete_channel: no stack [ 158.001407][ T9955] lo speed is unknown, defaulting to 1000 [ 158.044303][ T9955] lo speed is unknown, defaulting to 1000 [ 158.059414][ T9957] lo speed is unknown, defaulting to 1000 [ 158.105378][ T9957] lo speed is unknown, defaulting to 1000 [ 158.134795][ T9966] FAULT_INJECTION: forcing a failure. [ 158.134795][ T9966] name failslab, interval 1, probability 0, space 0, times 0 [ 158.147673][ T9966] CPU: 1 UID: 0 PID: 9966 Comm: syz.1.2335 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.147706][ T9966] Tainted: [W]=WARN [ 158.147712][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.147724][ T9966] Call Trace: [ 158.147729][ T9966] [ 158.147736][ T9966] __dump_stack+0x1d/0x30 [ 158.147760][ T9966] dump_stack_lvl+0xe8/0x140 [ 158.147824][ T9966] dump_stack+0x15/0x1b [ 158.147909][ T9966] should_fail_ex+0x265/0x280 [ 158.148017][ T9966] should_failslab+0x8c/0xb0 [ 158.148065][ T9966] kmem_cache_alloc_noprof+0x50/0x480 [ 158.148101][ T9966] ? skb_clone+0x151/0x1f0 [ 158.148127][ T9966] skb_clone+0x151/0x1f0 [ 158.148146][ T9966] __netlink_deliver_tap+0x2c9/0x500 [ 158.148208][ T9966] netlink_unicast+0x66b/0x690 [ 158.148250][ T9966] netlink_sendmsg+0x58b/0x6b0 [ 158.148353][ T9966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.148379][ T9966] __sock_sendmsg+0x145/0x180 [ 158.148556][ T9966] ____sys_sendmsg+0x345/0x4e0 [ 158.148584][ T9966] ___sys_sendmsg+0x17b/0x1d0 [ 158.148629][ T9966] __sys_sendmmsg+0x178/0x300 [ 158.148743][ T9966] __x64_sys_sendmmsg+0x57/0x70 [ 158.148769][ T9966] x64_sys_call+0x1c4a/0x3000 [ 158.148799][ T9966] do_syscall_64+0xd2/0x200 [ 158.148889][ T9966] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.148926][ T9966] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.148969][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.149020][ T9966] RIP: 0033:0x7f8556a1f6c9 [ 158.149040][ T9966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.149061][ T9966] RSP: 002b:00007f8555487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.149079][ T9966] RAX: ffffffffffffffda RBX: 00007f8556c75fa0 RCX: 00007f8556a1f6c9 [ 158.149092][ T9966] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.149119][ T9966] RBP: 00007f8555487090 R08: 0000000000000000 R09: 0000000000000000 [ 158.149169][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.149184][ T9966] R13: 00007f8556c76038 R14: 00007f8556c75fa0 R15: 00007ffef93a2d48 [ 158.149208][ T9966] [ 158.149223][ T9966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2335'. [ 158.154333][ T9968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2334'. [ 158.274703][ T9970] loop4: detected capacity change from 0 to 1024 [ 158.291506][ T9974] FAULT_INJECTION: forcing a failure. [ 158.291506][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 158.310284][ T9970] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 158.312887][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.1.2336 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.312933][ T9974] Tainted: [W]=WARN [ 158.312942][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.312959][ T9974] Call Trace: [ 158.312968][ T9974] [ 158.312979][ T9974] __dump_stack+0x1d/0x30 [ 158.313021][ T9974] dump_stack_lvl+0xe8/0x140 [ 158.313049][ T9974] dump_stack+0x15/0x1b [ 158.313074][ T9974] should_fail_ex+0x265/0x280 [ 158.313121][ T9974] ? alloc_fs_context+0x44/0x4e0 [ 158.313156][ T9974] should_failslab+0x8c/0xb0 [ 158.313251][ T9974] __kmalloc_cache_noprof+0x4c/0x4a0 [ 158.313299][ T9974] alloc_fs_context+0x44/0x4e0 [ 158.313335][ T9974] fs_context_for_mount+0x22/0x30 [ 158.313392][ T9974] do_new_mount+0xea/0x660 [ 158.313492][ T9974] ? security_capable+0x83/0x90 [ 158.313543][ T9974] path_mount+0x4a5/0xb70 [ 158.313609][ T9974] ? user_path_at+0x109/0x130 [ 158.313645][ T9974] __se_sys_mount+0x28c/0x2e0 [ 158.313684][ T9974] __x64_sys_mount+0x67/0x80 [ 158.313749][ T9974] x64_sys_call+0x2b51/0x3000 [ 158.313780][ T9974] do_syscall_64+0xd2/0x200 [ 158.313811][ T9974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.313910][ T9974] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.313969][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.314000][ T9974] RIP: 0033:0x7f8556a1f6c9 [ 158.314093][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.314119][ T9974] RSP: 002b:00007f8555487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.314145][ T9974] RAX: ffffffffffffffda RBX: 00007f8556c75fa0 RCX: 00007f8556a1f6c9 [ 158.314201][ T9974] RDX: 0000200000000700 RSI: 0000200000000000 RDI: 0000000000000000 [ 158.314271][ T9974] RBP: 00007f8555487090 R08: 0000200000000040 R09: 0000000000000000 [ 158.314289][ T9974] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 158.314308][ T9974] R13: 00007f8556c76038 R14: 00007f8556c75fa0 R15: 00007ffef93a2d48 [ 158.314334][ T9974] [ 158.616821][ T9970] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 158.631012][ T9970] JBD2: no valid journal superblock found [ 158.636802][ T9970] EXT4-fs (loop4): Could not load journal inode [ 158.702044][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2339'. [ 158.726114][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2341'. [ 158.762680][ T9981] SELinux: failed to load policy [ 158.822788][ T1037] IPVS: starting estimator thread 0... [ 158.836191][ T9992] lo speed is unknown, defaulting to 1000 [ 158.867664][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2347'. [ 158.879677][ T9992] lo speed is unknown, defaulting to 1000 [ 158.924476][ T9994] IPVS: using max 2400 ests per chain, 120000 per kthread [ 159.019121][T10009] random: crng reseeded on system resumption [ 159.068459][T10007] lo speed is unknown, defaulting to 1000 [ 159.079701][T10007] lo speed is unknown, defaulting to 1000 [ 159.123245][T10014] loop4: detected capacity change from 0 to 1024 [ 159.138496][T10014] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.149639][T10014] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.172021][T10014] JBD2: no valid journal superblock found [ 159.177812][T10014] EXT4-fs (loop4): Could not load journal inode [ 159.221004][T10016] lo speed is unknown, defaulting to 1000 [ 159.228165][T10016] lo speed is unknown, defaulting to 1000 [ 159.264078][T10031] FAULT_INJECTION: forcing a failure. [ 159.264078][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 159.276932][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.4.2358 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.277003][T10031] Tainted: [W]=WARN [ 159.277011][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.277098][T10031] Call Trace: [ 159.277104][T10031] [ 159.277110][T10031] __dump_stack+0x1d/0x30 [ 159.277132][T10031] dump_stack_lvl+0xe8/0x140 [ 159.277206][T10031] dump_stack+0x15/0x1b [ 159.277296][T10031] should_fail_ex+0x265/0x280 [ 159.277335][T10031] ? __pfx_sock_alloc_inode+0x10/0x10 [ 159.277371][T10031] should_failslab+0x8c/0xb0 [ 159.277418][T10031] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 159.277451][T10031] ? sock_alloc_inode+0x34/0xa0 [ 159.277475][T10031] ? __pfx_sock_alloc_inode+0x10/0x10 [ 159.277503][T10031] sock_alloc_inode+0x34/0xa0 [ 159.277540][T10031] alloc_inode+0x40/0x170 [ 159.277566][T10031] do_accept+0xa0/0x3a0 [ 159.277594][T10031] ? bpf_probe_read_compat+0x126/0x130 [ 159.277657][T10031] __sys_accept4+0xbf/0x140 [ 159.277693][T10031] __x64_sys_accept+0x42/0x50 [ 159.277770][T10031] x64_sys_call+0x212c/0x3000 [ 159.277792][T10031] do_syscall_64+0xd2/0x200 [ 159.277812][T10031] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.277875][T10031] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.277916][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.277944][T10031] RIP: 0033:0x7fdb4a10f6c9 [ 159.277971][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.277994][T10031] RSP: 002b:00007fdb48b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 159.278014][T10031] RAX: ffffffffffffffda RBX: 00007fdb4a365fa0 RCX: 00007fdb4a10f6c9 [ 159.278026][T10031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 159.278037][T10031] RBP: 00007fdb48b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.278112][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.278127][T10031] R13: 00007fdb4a366038 R14: 00007fdb4a365fa0 R15: 00007ffdfe7e3fe8 [ 159.278149][T10031] [ 159.535657][T10033] SELinux: failed to load policy [ 159.578626][T10039] random: crng reseeded on system resumption [ 159.580132][T10037] lo speed is unknown, defaulting to 1000 [ 159.591627][T10037] lo speed is unknown, defaulting to 1000 [ 159.652870][T10048] lo speed is unknown, defaulting to 1000 [ 159.659041][T10048] lo speed is unknown, defaulting to 1000 [ 159.847029][T10064] loop5: detected capacity change from 0 to 1024 [ 159.854552][T10064] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.865483][T10064] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.876577][T10064] JBD2: no valid journal superblock found [ 159.882354][T10064] EXT4-fs (loop5): Could not load journal inode [ 159.916122][T10060] SELinux: failed to load policy [ 159.925959][T10073] random: crng reseeded on system resumption [ 159.927843][T10075] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 159.942385][T10075] SELinux: failed to load policy [ 160.061275][T10089] lo speed is unknown, defaulting to 1000 [ 160.074531][T10089] lo speed is unknown, defaulting to 1000 [ 160.095891][T10091] lo speed is unknown, defaulting to 1000 [ 160.121906][T10091] lo speed is unknown, defaulting to 1000 [ 160.129683][T10085] loop5: detected capacity change from 0 to 8192 [ 160.231342][T10102] bridge0: entered promiscuous mode [ 160.236891][T10102] macsec1: entered promiscuous mode [ 160.245725][T10102] bridge0: port 3(macsec1) entered blocking state [ 160.252311][T10102] bridge0: port 3(macsec1) entered disabled state [ 160.259481][T10102] macsec1: entered allmulticast mode [ 160.264931][T10102] bridge0: entered allmulticast mode [ 160.271040][T10102] macsec1: left allmulticast mode [ 160.276219][T10102] bridge0: left allmulticast mode [ 160.282937][T10102] bridge0: left promiscuous mode [ 160.295877][T10107] loop1: detected capacity change from 0 to 1024 [ 160.306073][T10107] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.317316][T10107] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.331089][T10107] JBD2: no valid journal superblock found [ 160.336903][T10107] EXT4-fs (loop1): Could not load journal inode [ 160.409225][T10115] random: crng reseeded on system resumption [ 160.439984][T10109] SELinux: failed to load policy [ 160.507985][T10125] lo speed is unknown, defaulting to 1000 [ 160.520149][T10125] lo speed is unknown, defaulting to 1000 [ 160.681215][T10137] lo speed is unknown, defaulting to 1000 [ 160.687952][T10137] lo speed is unknown, defaulting to 1000 [ 160.873527][T10133] lo speed is unknown, defaulting to 1000 [ 160.903841][T10140] loop5: detected capacity change from 0 to 1024 [ 160.934909][T10133] lo speed is unknown, defaulting to 1000 [ 160.954803][T10140] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.965852][T10140] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.982808][T10143] loop4: detected capacity change from 0 to 1024 [ 161.019931][T10143] EXT4-fs: Ignoring removed nobh option [ 161.025568][T10143] EXT4-fs: Ignoring removed bh option [ 161.075103][T10140] JBD2: no valid journal superblock found [ 161.080978][T10140] EXT4-fs (loop5): Could not load journal inode [ 161.111773][T10143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.187939][T10157] random: crng reseeded on system resumption [ 161.365599][T10167] SELinux: failed to load policy [ 161.452293][T10175] lo speed is unknown, defaulting to 1000 [ 161.466170][T10175] lo speed is unknown, defaulting to 1000 [ 161.480930][T10179] loop1: detected capacity change from 0 to 1024 [ 161.555718][T10179] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.566713][T10179] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.605109][T10179] JBD2: no valid journal superblock found [ 161.610895][T10179] EXT4-fs (loop1): Could not load journal inode [ 161.628583][T10190] __nla_validate_parse: 5 callbacks suppressed [ 161.628602][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2414'. [ 161.684815][T10192] lo speed is unknown, defaulting to 1000 [ 161.693702][T10192] lo speed is unknown, defaulting to 1000 [ 161.712469][ T3409] hid_parser_main: 22 callbacks suppressed [ 161.712486][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.725798][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.733247][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.740664][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.748190][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.755598][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.763049][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.770520][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.777936][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.785357][ T3409] hid-generic 0000:0005:0000.0004: unknown main item tag 0x0 [ 161.834063][ T3409] hid-generic 0000:0005:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 161.850590][T10188] delete_channel: no stack [ 161.859943][T10202] random: crng reseeded on system resumption [ 161.919636][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.972077][T10213] loop5: detected capacity change from 0 to 512 [ 161.988037][T10216] FAULT_INJECTION: forcing a failure. [ 161.988037][T10216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.001333][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.4.2418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.001417][T10216] Tainted: [W]=WARN [ 162.001482][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.001498][T10216] Call Trace: [ 162.001505][T10216] [ 162.001512][T10216] __dump_stack+0x1d/0x30 [ 162.001576][T10216] dump_stack_lvl+0xe8/0x140 [ 162.001601][T10216] dump_stack+0x15/0x1b [ 162.001692][T10216] should_fail_ex+0x265/0x280 [ 162.001730][T10216] should_fail+0xb/0x20 [ 162.001846][T10216] should_fail_usercopy+0x1a/0x20 [ 162.001872][T10216] _copy_to_user+0x20/0xa0 [ 162.001897][T10216] ethtool_get_sset_info+0x349/0x450 [ 162.001930][T10216] dev_ethtool+0x10b6/0x1670 [ 162.001982][T10216] ? full_name_hash+0x92/0xe0 [ 162.002093][T10216] dev_ioctl+0x2e0/0x960 [ 162.002119][T10216] sock_do_ioctl+0x197/0x220 [ 162.002192][T10216] sock_ioctl+0x41b/0x610 [ 162.002218][T10216] ? __pfx_sock_ioctl+0x10/0x10 [ 162.002239][T10216] __se_sys_ioctl+0xce/0x140 [ 162.002265][T10216] __x64_sys_ioctl+0x43/0x50 [ 162.002357][T10216] x64_sys_call+0x1816/0x3000 [ 162.002406][T10216] do_syscall_64+0xd2/0x200 [ 162.002430][T10216] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.002467][T10216] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.002506][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.002533][T10216] RIP: 0033:0x7fdb4a10f6c9 [ 162.002549][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.002622][T10216] RSP: 002b:00007fdb48b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.002677][T10216] RAX: ffffffffffffffda RBX: 00007fdb4a365fa0 RCX: 00007fdb4a10f6c9 [ 162.002692][T10216] RDX: 0000200000007680 RSI: 0000000000008946 RDI: 0000000000000005 [ 162.002708][T10216] RBP: 00007fdb48b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.002752][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.002767][T10216] R13: 00007fdb4a366038 R14: 00007fdb4a365fa0 R15: 00007ffdfe7e3fe8 [ 162.002792][T10216] [ 162.011939][T10213] EXT4-fs: Ignoring removed orlov option [ 162.053876][T10214] lo speed is unknown, defaulting to 1000 [ 162.085613][T10213] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 162.124507][T10220] loop1: detected capacity change from 0 to 1024 [ 162.173048][T10214] lo speed is unknown, defaulting to 1000 [ 162.186443][T10213] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.2421'. [ 162.217915][T10220] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.227908][ T29] kauditd_printk_skb: 1252 callbacks suppressed [ 162.227928][ T29] audit: type=1326 audit(2000000013.810:24029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8556a1e32a code=0x7ffc0000 [ 162.229300][T10220] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.230654][T10220] JBD2: no valid journal superblock found [ 162.235753][ T29] audit: type=1326 audit(2000000013.810:24030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8556a1e32a code=0x7ffc0000 [ 162.241571][T10220] EXT4-fs (loop1): Could not load journal inode [ 162.251809][ T29] audit: type=1326 audit(2000000013.810:24031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8556a1de17 code=0x7ffc0000 [ 162.265844][T10213] netlink: zone id is out of range [ 162.268934][ T29] audit: type=1326 audit(2000000013.810:24032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8556a20e6a code=0x7ffc0000 [ 162.293940][T10213] netlink: zone id is out of range [ 162.363561][T10223] loop4: detected capacity change from 0 to 1024 [ 162.406208][T10213] netlink: zone id is out of range [ 162.411452][T10213] netlink: zone id is out of range [ 162.416932][T10213] netlink: zone id is out of range [ 162.422071][T10213] netlink: zone id is out of range [ 162.427346][T10213] netlink: zone id is out of range [ 162.432468][T10213] netlink: zone id is out of range [ 162.437831][T10213] netlink: zone id is out of range [ 162.443155][T10213] netlink: zone id is out of range [ 162.449514][ T29] audit: type=1326 audit(2000000013.860:24033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8556a1df10 code=0x7ffc0000 [ 162.473295][ T29] audit: type=1326 audit(2000000013.860:24034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8556a1f2cb code=0x7ffc0000 [ 162.496871][ T29] audit: type=1326 audit(2000000013.860:24035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8556a1e32a code=0x7ffc0000 [ 162.497294][T10225] loop5: detected capacity change from 0 to 2048 [ 162.520478][ T29] audit: type=1326 audit(2000000013.860:24036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 162.537173][T10225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.550547][ T29] audit: type=1326 audit(2000000013.860:24037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.1.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 162.563042][T10225] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.586119][ T29] audit: type=1326 audit(2000000013.910:24038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a10f6c9 code=0x7ffc0000 [ 162.621175][T10223] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.632165][T10223] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.652463][T10223] JBD2: no valid journal superblock found [ 162.658270][T10223] EXT4-fs (loop4): Could not load journal inode [ 162.671156][ T9201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.688503][T10233] random: crng reseeded on system resumption [ 162.702038][T10234] lo speed is unknown, defaulting to 1000 [ 162.711270][T10234] lo speed is unknown, defaulting to 1000 [ 162.777240][T10242] FAULT_INJECTION: forcing a failure. [ 162.777240][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.790501][T10242] CPU: 0 UID: 0 PID: 10242 Comm: syz.3.2432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.790708][T10242] Tainted: [W]=WARN [ 162.790717][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.790734][T10242] Call Trace: [ 162.790740][T10242] [ 162.790753][T10242] __dump_stack+0x1d/0x30 [ 162.790851][T10242] dump_stack_lvl+0xe8/0x140 [ 162.790878][T10242] dump_stack+0x15/0x1b [ 162.790896][T10242] should_fail_ex+0x265/0x280 [ 162.790964][T10242] should_fail+0xb/0x20 [ 162.791016][T10242] should_fail_usercopy+0x1a/0x20 [ 162.791039][T10242] _copy_from_user+0x1c/0xb0 [ 162.791093][T10242] ___sys_sendmsg+0xc1/0x1d0 [ 162.791135][T10242] __x64_sys_sendmsg+0xd4/0x160 [ 162.791163][T10242] x64_sys_call+0x191e/0x3000 [ 162.791186][T10242] do_syscall_64+0xd2/0x200 [ 162.791212][T10242] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.791313][T10242] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.791356][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.791383][T10242] RIP: 0033:0x7f76a1caf6c9 [ 162.791398][T10242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.791487][T10242] RSP: 002b:00007f76a06ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.791510][T10242] RAX: ffffffffffffffda RBX: 00007f76a1f06090 RCX: 00007f76a1caf6c9 [ 162.791522][T10242] RDX: 0000000020040000 RSI: 0000200000000200 RDI: 0000000000000008 [ 162.791533][T10242] RBP: 00007f76a06ee090 R08: 0000000000000000 R09: 0000000000000000 [ 162.791545][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.791556][T10242] R13: 00007f76a1f06128 R14: 00007f76a1f06090 R15: 00007ffe0c109608 [ 162.791577][T10242] [ 163.011100][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 163.084139][T10246] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2433'. [ 163.301761][T10259] loop5: detected capacity change from 0 to 1024 [ 163.318924][T10259] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.329988][T10259] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 163.342595][T10259] JBD2: no valid journal superblock found [ 163.348446][T10259] EXT4-fs (loop5): Could not load journal inode [ 163.356968][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 163.467299][T10271] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2440'. [ 163.492982][T10270] lo speed is unknown, defaulting to 1000 [ 163.500822][T10273] netlink: 'syz.0.2443': attribute type 3 has an invalid length. [ 163.510743][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'. [ 163.517042][T10270] lo speed is unknown, defaulting to 1000 [ 163.693052][T10279] lo speed is unknown, defaulting to 1000 [ 163.734805][T10279] lo speed is unknown, defaulting to 1000 [ 163.821517][T10277] lo speed is unknown, defaulting to 1000 [ 163.838318][T10283] loop4: detected capacity change from 0 to 512 [ 163.872207][T10283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.885285][T10288] SELinux: failed to load policy [ 163.893225][T10277] lo speed is unknown, defaulting to 1000 [ 163.893758][T10283] EXT4-fs (loop4): 1 orphan inode deleted [ 163.904757][T10283] EXT4-fs (loop4): 1 truncate cleaned up [ 163.922154][T10283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.929210][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2452'. [ 163.946008][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 163.977247][T10303] loop1: detected capacity change from 0 to 1024 [ 163.988761][T10303] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.999739][T10303] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.000653][T10302] loop5: detected capacity change from 0 to 512 [ 164.018827][T10303] JBD2: no valid journal superblock found [ 164.024590][T10303] EXT4-fs (loop1): Could not load journal inode [ 164.032702][T10302] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.053694][T10302] EXT4-fs (loop5): 1 orphan inode deleted [ 164.059457][T10302] EXT4-fs (loop5): 1 truncate cleaned up [ 164.078671][T10302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.107598][T10312] loop1: detected capacity change from 0 to 512 [ 164.115861][T10312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.132426][T10312] EXT4-fs (loop1): 1 truncate cleaned up [ 164.142993][T10312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.165909][T10312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2456'. [ 164.181566][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.231131][T10319] lo speed is unknown, defaulting to 1000 [ 164.238517][T10319] lo speed is unknown, defaulting to 1000 [ 164.257034][T10322] random: crng reseeded on system resumption [ 164.264263][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.336149][T10328] lo speed is unknown, defaulting to 1000 [ 164.342912][T10328] lo speed is unknown, defaulting to 1000 [ 164.398425][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.407052][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.478297][T10338] SELinux: failed to load policy [ 164.511334][T10350] FAULT_INJECTION: forcing a failure. [ 164.511334][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 164.524127][T10350] CPU: 1 UID: 0 PID: 10350 Comm: syz.3.2471 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.524159][T10350] Tainted: [W]=WARN [ 164.524165][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.524208][T10350] Call Trace: [ 164.524214][T10350] [ 164.524221][T10350] __dump_stack+0x1d/0x30 [ 164.524242][T10350] dump_stack_lvl+0xe8/0x140 [ 164.524262][T10350] dump_stack+0x15/0x1b [ 164.524308][T10350] should_fail_ex+0x265/0x280 [ 164.524409][T10350] should_failslab+0x8c/0xb0 [ 164.524447][T10350] kmem_cache_alloc_noprof+0x50/0x480 [ 164.524501][T10350] ? getname_flags+0x80/0x3b0 [ 164.524589][T10350] getname_flags+0x80/0x3b0 [ 164.524622][T10350] user_path_at+0x28/0x130 [ 164.524649][T10350] __se_sys_name_to_handle_at+0xfd/0x640 [ 164.524692][T10350] ? __bpf_trace_sys_enter+0x10/0x30 [ 164.524724][T10350] ? trace_sys_enter+0xd0/0xf0 [ 164.524750][T10350] __x64_sys_name_to_handle_at+0x67/0x80 [ 164.524864][T10350] x64_sys_call+0x1552/0x3000 [ 164.524920][T10350] do_syscall_64+0xd2/0x200 [ 164.524973][T10350] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.525050][T10350] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.525094][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.525120][T10350] RIP: 0033:0x7f76a1caf6c9 [ 164.525134][T10350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.525182][T10350] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 164.525259][T10350] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 164.525275][T10350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 164.525291][T10350] RBP: 00007f76a070f090 R08: 0000000000001600 R09: 0000000000000000 [ 164.525306][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.525318][T10350] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 164.525337][T10350] [ 164.752825][T10354] FAULT_INJECTION: forcing a failure. [ 164.752825][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 164.765742][T10354] CPU: 1 UID: 0 PID: 10354 Comm: syz.3.2472 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.765784][T10354] Tainted: [W]=WARN [ 164.765792][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.765842][T10354] Call Trace: [ 164.765850][T10354] [ 164.765859][T10354] __dump_stack+0x1d/0x30 [ 164.765887][T10354] dump_stack_lvl+0xe8/0x140 [ 164.765914][T10354] dump_stack+0x15/0x1b [ 164.765937][T10354] should_fail_ex+0x265/0x280 [ 164.765981][T10354] ? x509_cert_parse+0xe2/0x430 [ 164.766025][T10354] should_failslab+0x8c/0xb0 [ 164.766095][T10354] __kmalloc_cache_noprof+0x4c/0x4a0 [ 164.766138][T10354] x509_cert_parse+0xe2/0x430 [ 164.766189][T10354] x509_key_preparse+0x3c/0x420 [ 164.766227][T10354] ? selinux_key_permission+0x161/0x190 [ 164.766300][T10354] asymmetric_key_preparse+0x68/0xb0 [ 164.766332][T10354] __key_create_or_update+0x28b/0x750 [ 164.766365][T10354] ? key_validate+0xad/0xd0 [ 164.766410][T10354] key_create_or_update+0x42/0x60 [ 164.766444][T10354] __se_sys_add_key+0x29b/0x350 [ 164.766553][T10354] __x64_sys_add_key+0x67/0x80 [ 164.766592][T10354] x64_sys_call+0x28c8/0x3000 [ 164.766621][T10354] do_syscall_64+0xd2/0x200 [ 164.766648][T10354] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.766690][T10354] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.766733][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.766760][T10354] RIP: 0033:0x7f76a1caf6c9 [ 164.766779][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.766813][T10354] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 164.766833][T10354] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 164.766849][T10354] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000380 [ 164.766954][T10354] RBP: 00007f76a070f090 R08: 000000000305d038 R09: 0000000000000000 [ 164.766969][T10354] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 164.766985][T10354] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 164.767011][T10354] [ 164.771643][T10356] random: crng reseeded on system resumption [ 165.006509][T10359] lo speed is unknown, defaulting to 1000 [ 165.022209][T10359] lo speed is unknown, defaulting to 1000 [ 165.040247][ T9201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.068632][T10364] loop5: detected capacity change from 0 to 1024 [ 165.170198][T10374] lo speed is unknown, defaulting to 1000 [ 165.188599][T10374] lo speed is unknown, defaulting to 1000 [ 165.204536][T10372] loop3: detected capacity change from 0 to 1024 [ 165.230184][T10372] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 165.241152][T10372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.251286][T10375] SELinux: failed to load policy [ 165.267194][T10372] JBD2: no valid journal superblock found [ 165.272994][T10372] EXT4-fs (loop3): Could not load journal inode [ 165.360656][T10387] lo speed is unknown, defaulting to 1000 [ 165.376755][T10389] loop1: detected capacity change from 0 to 1024 [ 165.387448][T10387] lo speed is unknown, defaulting to 1000 [ 165.442639][T10389] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 165.453580][T10389] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.467461][T10389] JBD2: no valid journal superblock found [ 165.473244][T10389] EXT4-fs (loop1): Could not load journal inode [ 165.489242][T10400] random: crng reseeded on system resumption [ 165.521073][T10399] lo speed is unknown, defaulting to 1000 [ 165.535616][T10399] lo speed is unknown, defaulting to 1000 [ 165.645499][T10419] tipc: Started in network mode [ 165.650571][T10419] tipc: Node identity 3aae02fc3652, cluster identity 4711 [ 165.657859][T10419] tipc: Enabled bearer , priority 0 [ 165.665179][T10419] syzkaller0: entered promiscuous mode [ 165.670670][T10419] syzkaller0: entered allmulticast mode [ 165.678017][T10416] lo speed is unknown, defaulting to 1000 [ 165.684141][T10414] SELinux: failed to load policy [ 165.704396][T10419] sch_tbf: peakrate 5 is lower than or equals to rate 16782378092331245032 ! [ 165.713365][T10416] lo speed is unknown, defaulting to 1000 [ 165.736228][T10422] loop3: detected capacity change from 0 to 1024 [ 165.747131][T10422] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 165.758111][T10422] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.781584][T10422] JBD2: no valid journal superblock found [ 165.787474][T10422] EXT4-fs (loop3): Could not load journal inode [ 165.800640][T10418] tipc: Resetting bearer [ 165.824413][T10418] tipc: Disabling bearer [ 165.912425][T10433] loop4: detected capacity change from 0 to 8192 [ 166.010903][T10443] sctp: [Deprecated]: syz.4.2501 (pid 10443) Use of int in max_burst socket option. [ 166.010903][T10443] Use struct sctp_assoc_value instead [ 166.375187][T10451] loop1: detected capacity change from 0 to 8192 [ 166.592040][T10464] lo speed is unknown, defaulting to 1000 [ 166.598744][T10464] lo speed is unknown, defaulting to 1000 [ 166.682246][T10466] SELinux: failed to load policy [ 166.784732][T10476] lo speed is unknown, defaulting to 1000 [ 166.791027][T10476] lo speed is unknown, defaulting to 1000 [ 166.801771][T10478] loop5: detected capacity change from 0 to 1024 [ 166.811706][T10478] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 166.822743][T10478] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 166.837556][T10478] JBD2: no valid journal superblock found [ 166.843466][T10478] EXT4-fs (loop5): Could not load journal inode [ 166.893806][T10488] __nla_validate_parse: 5 callbacks suppressed [ 166.893890][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2522'. [ 167.071531][T10507] lo speed is unknown, defaulting to 1000 [ 167.078395][T10507] lo speed is unknown, defaulting to 1000 [ 167.177628][T10520] loop5: detected capacity change from 0 to 1024 [ 167.178677][T10518] lo speed is unknown, defaulting to 1000 [ 167.186536][T10520] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.200748][T10520] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 167.211577][T10518] lo speed is unknown, defaulting to 1000 [ 167.213864][T10520] JBD2: no valid journal superblock found [ 167.223114][T10520] EXT4-fs (loop5): Could not load journal inode [ 167.237509][ T29] kauditd_printk_skb: 1380 callbacks suppressed [ 167.237524][ T29] audit: type=1326 audit(2000000018.830:25419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 167.267614][ T29] audit: type=1326 audit(2000000018.830:25420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 167.291430][ T29] audit: type=1326 audit(2000000018.840:25421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 167.315290][ T29] audit: type=1326 audit(2000000018.840:25422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 167.339047][ T29] audit: type=1326 audit(2000000018.860:25423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 167.364882][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 167.375487][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 167.384975][T10525] FAULT_INJECTION: forcing a failure. [ 167.384975][T10525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.399808][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.5.2534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.399843][T10525] Tainted: [W]=WARN [ 167.399918][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.399934][T10525] Call Trace: [ 167.399941][T10525] [ 167.399949][T10525] __dump_stack+0x1d/0x30 [ 167.399977][T10525] dump_stack_lvl+0xe8/0x140 [ 167.400003][T10525] dump_stack+0x15/0x1b [ 167.400038][T10525] should_fail_ex+0x265/0x280 [ 167.400222][T10525] should_fail_alloc_page+0xf2/0x100 [ 167.400260][T10525] __alloc_frozen_pages_noprof+0xff/0x360 [ 167.400369][T10525] alloc_pages_mpol+0xb3/0x260 [ 167.400460][T10525] vma_alloc_folio_noprof+0x1aa/0x300 [ 167.400494][T10525] do_wp_page+0xf60/0x2510 [ 167.400532][T10525] ? ref_tracker_free+0x37d/0x3e0 [ 167.400569][T10525] ? __rcu_read_lock+0x37/0x50 [ 167.400643][T10525] handle_mm_fault+0x77d/0x2be0 [ 167.400664][T10525] ? __rcu_read_unlock+0x4f/0x70 [ 167.400760][T10525] ? mt_find+0x21b/0x330 [ 167.400799][T10525] do_user_addr_fault+0x3fe/0x1080 [ 167.400833][T10525] exc_page_fault+0x62/0xa0 [ 167.400975][T10525] asm_exc_page_fault+0x26/0x30 [ 167.400998][T10525] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 167.401020][T10525] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 83 01 00 90 90 90 90 90 90 90 90 90 90 [ 167.401037][T10525] RSP: 0018:ffffc900122efb80 EFLAGS: 00050206 [ 167.401101][T10525] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000200000007730 [ 167.401126][T10525] RDX: ffff88811b79e300 RSI: 0000000000000fc0 RDI: 00000000ffffffff [ 167.401138][T10525] RBP: 0000000000000fc0 R08: 0001c900122efe47 R09: 0000000000000000 [ 167.401154][T10525] R10: ffffc900122ef860 R11: ffffffff844f5ea0 R12: 0000200000007700 [ 167.401169][T10525] R13: 0000000000000000 R14: ffffc900122efe44 R15: 0000000000000000 [ 167.401187][T10525] ? __pfx_sock_def_readable+0x10/0x10 [ 167.401223][T10525] ____sys_recvmsg+0x1a1/0x280 [ 167.401314][T10525] ___sys_recvmsg+0x11f/0x370 [ 167.401405][T10525] do_recvmmsg+0x1ef/0x540 [ 167.401442][T10525] __x64_sys_recvmmsg+0xe5/0x170 [ 167.401470][T10525] x64_sys_call+0x27aa/0x3000 [ 167.401531][T10525] do_syscall_64+0xd2/0x200 [ 167.401556][T10525] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.401608][T10525] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.401703][T10525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.401729][T10525] RIP: 0033:0x7fe5e130f6c9 [ 167.401744][T10525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.401761][T10525] RSP: 002b:00007fe5dfd56038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.401781][T10525] RAX: ffffffffffffffda RBX: 00007fe5e1566090 RCX: 00007fe5e130f6c9 [ 167.401861][T10525] RDX: 0000000004000267 RSI: 0000200000007700 RDI: 0000000000000006 [ 167.401877][T10525] RBP: 00007fe5dfd56090 R08: 0000000000000000 R09: 0000000000000000 [ 167.401889][T10525] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 167.401901][T10525] R13: 00007fe5e1566128 R14: 00007fe5e1566090 R15: 00007ffe164100b8 [ 167.401921][T10525] [ 167.759140][T10533] FAULT_INJECTION: forcing a failure. [ 167.759140][T10533] name failslab, interval 1, probability 0, space 0, times 0 [ 167.771820][T10533] CPU: 1 UID: 0 PID: 10533 Comm: syz.5.2539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.771858][T10533] Tainted: [W]=WARN [ 167.771866][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.771937][T10533] Call Trace: [ 167.771943][T10533] [ 167.771950][T10533] __dump_stack+0x1d/0x30 [ 167.771973][T10533] dump_stack_lvl+0xe8/0x140 [ 167.771996][T10533] dump_stack+0x15/0x1b [ 167.772016][T10533] should_fail_ex+0x265/0x280 [ 167.772123][T10533] ? kernfs_get_tree+0x56/0x490 [ 167.772155][T10533] should_failslab+0x8c/0xb0 [ 167.772191][T10533] __kmalloc_cache_noprof+0x4c/0x4a0 [ 167.772251][T10533] kernfs_get_tree+0x56/0x490 [ 167.772315][T10533] cgroup_do_get_tree+0x86/0x330 [ 167.772410][T10533] cgroup_get_tree+0xd2/0x1f0 [ 167.772482][T10533] vfs_get_tree+0x57/0x1d0 [ 167.772513][T10533] do_new_mount+0x24d/0x660 [ 167.772663][T10533] ? security_capable+0x83/0x90 [ 167.772783][T10533] path_mount+0x4a5/0xb70 [ 167.772814][T10533] ? user_path_at+0x109/0x130 [ 167.772839][T10533] __se_sys_mount+0x28c/0x2e0 [ 167.772868][T10533] __x64_sys_mount+0x67/0x80 [ 167.772910][T10533] x64_sys_call+0x2b51/0x3000 [ 167.772934][T10533] do_syscall_64+0xd2/0x200 [ 167.772959][T10533] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.773126][T10533] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.773211][T10533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.773238][T10533] RIP: 0033:0x7fe5e130f6c9 [ 167.773253][T10533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.773273][T10533] RSP: 002b:00007fe5dfd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.773327][T10533] RAX: ffffffffffffffda RBX: 00007fe5e1565fa0 RCX: 00007fe5e130f6c9 [ 167.773343][T10533] RDX: 0000200000000700 RSI: 0000200000000000 RDI: 0000000000000000 [ 167.773358][T10533] RBP: 00007fe5dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 167.773377][T10533] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 167.773392][T10533] R13: 00007fe5e1566038 R14: 00007fe5e1565fa0 R15: 00007ffe164100b8 [ 167.773416][T10533] [ 168.022863][ T29] audit: type=1326 audit(2000000019.600:25424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.0.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 168.046601][ T29] audit: type=1326 audit(2000000019.600:25425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.0.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 168.069207][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'. [ 168.070249][ T29] audit: type=1326 audit(2000000019.610:25426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.0.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 168.102700][ T29] audit: type=1326 audit(2000000019.610:25427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.0.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 168.103490][T10539] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2541'. [ 168.126347][ T29] audit: type=1326 audit(2000000019.610:25428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.0.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 168.173773][T10545] lo speed is unknown, defaulting to 1000 [ 168.190792][T10545] lo speed is unknown, defaulting to 1000 [ 168.267787][T10556] lo speed is unknown, defaulting to 1000 [ 168.280810][T10556] lo speed is unknown, defaulting to 1000 [ 168.329711][T10560] loop4: detected capacity change from 0 to 1024 [ 168.354064][T10560] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.365042][T10560] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.400518][T10560] JBD2: no valid journal superblock found [ 168.406372][T10560] EXT4-fs (loop4): Could not load journal inode [ 168.426316][T10568] loop5: detected capacity change from 0 to 2048 [ 168.494757][T10568] Alternate GPT is invalid, using primary GPT. [ 168.501126][T10568] loop5: p2 p3 p7 [ 168.529174][T10585] FAULT_INJECTION: forcing a failure. [ 168.529174][T10585] name failslab, interval 1, probability 0, space 0, times 0 [ 168.541917][T10585] CPU: 0 UID: 0 PID: 10585 Comm: syz.3.2559 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.541953][T10585] Tainted: [W]=WARN [ 168.541962][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.541976][T10585] Call Trace: [ 168.541983][T10585] [ 168.541992][T10585] __dump_stack+0x1d/0x30 [ 168.542062][T10585] dump_stack_lvl+0xe8/0x140 [ 168.542083][T10585] dump_stack+0x15/0x1b [ 168.542103][T10585] should_fail_ex+0x265/0x280 [ 168.542219][T10585] should_failslab+0x8c/0xb0 [ 168.542327][T10585] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 168.542406][T10585] ? cond_bools_copy+0x30/0x80 [ 168.542470][T10585] ? __pfx_cond_bools_destroy+0x10/0x10 [ 168.542496][T10585] kmemdup_noprof+0x2b/0x70 [ 168.542534][T10585] ? __pfx_cond_bools_destroy+0x10/0x10 [ 168.542559][T10585] cond_bools_copy+0x30/0x80 [ 168.542633][T10585] ? __pfx_cond_bools_destroy+0x10/0x10 [ 168.542657][T10585] hashtab_duplicate+0x11e/0x360 [ 168.542727][T10585] ? __pfx_cond_bools_copy+0x10/0x10 [ 168.542755][T10585] cond_policydb_dup+0xd2/0x4e0 [ 168.542786][T10585] security_set_bools+0xa0/0x340 [ 168.542830][T10585] sel_commit_bools_write+0x1ea/0x270 [ 168.542939][T10585] vfs_writev+0x406/0x8b0 [ 168.542980][T10585] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 168.543012][T10585] ? mutex_lock+0xd/0x30 [ 168.543051][T10585] do_writev+0xe7/0x210 [ 168.543189][T10585] __x64_sys_writev+0x45/0x50 [ 168.543259][T10585] x64_sys_call+0x1e9a/0x3000 [ 168.543289][T10585] do_syscall_64+0xd2/0x200 [ 168.543333][T10585] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.543434][T10585] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.543472][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.543497][T10585] RIP: 0033:0x7f76a1caf6c9 [ 168.543516][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.543606][T10585] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.543676][T10585] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 168.543692][T10585] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003 [ 168.543707][T10585] RBP: 00007f76a070f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.543722][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.543738][T10585] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 168.543852][T10585] [ 168.787083][T10579] loop4: detected capacity change from 0 to 8192 [ 168.866283][T10589] random: crng reseeded on system resumption [ 168.926824][T10592] lo speed is unknown, defaulting to 1000 [ 168.933122][T10592] lo speed is unknown, defaulting to 1000 [ 169.018099][T10598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.037437][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 169.056138][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 169.069147][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 169.140656][T10598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.153915][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 169.237919][T10602] bond1 (unregistering): Released all slaves [ 169.282183][T10598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.356785][T10598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.410863][ T1610] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.419424][T10605] SELinux: failed to load policy [ 169.430298][ T1610] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.454004][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 169.463085][ T1610] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.471454][ T1610] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.516274][T10613] lo speed is unknown, defaulting to 1000 [ 169.543752][T10613] lo speed is unknown, defaulting to 1000 [ 169.652856][T10622] random: crng reseeded on system resumption [ 169.656936][T10624] loop5: detected capacity change from 0 to 7 [ 169.714492][T10628] lo speed is unknown, defaulting to 1000 [ 169.720776][T10628] lo speed is unknown, defaulting to 1000 [ 169.757976][T10631] loop3: detected capacity change from 0 to 128 [ 169.789601][T10634] bridge_slave_1: left allmulticast mode [ 169.795371][T10634] bridge_slave_1: left promiscuous mode [ 169.801118][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.822821][T10634] bridge_slave_0: left allmulticast mode [ 169.828612][T10634] bridge_slave_0: left promiscuous mode [ 169.834307][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.912928][T10629] Invalid logical block size (1) [ 169.951368][T10646] lo speed is unknown, defaulting to 1000 [ 169.970526][T10646] lo speed is unknown, defaulting to 1000 [ 169.984764][T10640] lo speed is unknown, defaulting to 1000 [ 170.002049][T10640] lo speed is unknown, defaulting to 1000 [ 170.017970][T10650] loop4: detected capacity change from 0 to 1024 [ 170.029103][T10651] loop1: detected capacity change from 0 to 1024 [ 170.035074][T10650] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.036967][T10651] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.046532][T10650] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.057413][T10651] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.058709][T10651] JBD2: no valid journal superblock found [ 170.070171][T10650] JBD2: no valid journal superblock found [ 170.076753][T10651] EXT4-fs (loop1): Could not load journal inode [ 170.094614][T10650] EXT4-fs (loop4): Could not load journal inode [ 170.212919][T10657] lo speed is unknown, defaulting to 1000 [ 170.219046][T10657] lo speed is unknown, defaulting to 1000 [ 170.306756][T10663] lo speed is unknown, defaulting to 1000 [ 170.317290][T10663] lo speed is unknown, defaulting to 1000 [ 170.327047][T10661] SELinux: failed to load policy [ 170.419857][T10677] random: crng reseeded on system resumption [ 170.449842][T10674] lo speed is unknown, defaulting to 1000 [ 170.501796][T10674] lo speed is unknown, defaulting to 1000 [ 170.549674][T10688] loop5: detected capacity change from 0 to 1024 [ 170.565909][T10686] FAULT_INJECTION: forcing a failure. [ 170.565909][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 170.578645][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.4.2597 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.578696][T10686] Tainted: [W]=WARN [ 170.578704][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.578720][T10686] Call Trace: [ 170.578727][T10686] [ 170.578805][T10686] __dump_stack+0x1d/0x30 [ 170.578907][T10686] dump_stack_lvl+0xe8/0x140 [ 170.578929][T10686] dump_stack+0x15/0x1b [ 170.578946][T10686] should_fail_ex+0x265/0x280 [ 170.578981][T10686] should_failslab+0x8c/0xb0 [ 170.579020][T10686] kmem_cache_alloc_noprof+0x50/0x480 [ 170.579077][T10686] ? audit_log_start+0x342/0x720 [ 170.579098][T10686] audit_log_start+0x342/0x720 [ 170.579117][T10686] ? kstrtouint+0x76/0xc0 [ 170.579148][T10686] audit_seccomp+0x48/0x100 [ 170.579284][T10686] ? __seccomp_filter+0x82d/0x1250 [ 170.579311][T10686] __seccomp_filter+0x83e/0x1250 [ 170.579341][T10686] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 170.579374][T10686] ? vfs_write+0x7e8/0x960 [ 170.579433][T10686] ? __rcu_read_unlock+0x4f/0x70 [ 170.579463][T10686] ? __fget_files+0x184/0x1c0 [ 170.579495][T10686] __secure_computing+0x82/0x150 [ 170.579521][T10686] syscall_trace_enter+0xcf/0x1e0 [ 170.579558][T10686] do_syscall_64+0xac/0x200 [ 170.579578][T10686] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.579605][T10686] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.579650][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.579671][T10686] RIP: 0033:0x7fdb4a10f6c9 [ 170.579689][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.579710][T10686] RSP: 002b:00007fdb48b6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 170.579781][T10686] RAX: ffffffffffffffda RBX: 00007fdb4a365fa0 RCX: 00007fdb4a10f6c9 [ 170.579851][T10686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000003e00 [ 170.579885][T10686] RBP: 00007fdb48b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.579900][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.579961][T10686] R13: 00007fdb4a366038 R14: 00007fdb4a365fa0 R15: 00007ffdfe7e3fe8 [ 170.579982][T10686] [ 170.797875][T10688] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.808991][T10688] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.866742][T10688] JBD2: no valid journal superblock found [ 170.872577][T10688] EXT4-fs (loop5): Could not load journal inode [ 170.873105][T10697] FAULT_INJECTION: forcing a failure. [ 170.873105][T10697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.892014][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.3.2600 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.892053][T10697] Tainted: [W]=WARN [ 170.892091][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.892105][T10697] Call Trace: [ 170.892111][T10697] [ 170.892118][T10697] __dump_stack+0x1d/0x30 [ 170.892139][T10697] dump_stack_lvl+0xe8/0x140 [ 170.892158][T10697] dump_stack+0x15/0x1b [ 170.892175][T10697] should_fail_ex+0x265/0x280 [ 170.892220][T10697] should_fail+0xb/0x20 [ 170.892255][T10697] should_fail_usercopy+0x1a/0x20 [ 170.892275][T10697] _copy_from_user+0x1c/0xb0 [ 170.892299][T10697] copy_from_sockptr_offset+0x66/0xa0 [ 170.892493][T10697] do_arpt_set_ctl+0x5dd/0x9a0 [ 170.892526][T10697] ? lock_sock_nested+0x112/0x140 [ 170.892581][T10697] ? _raw_spin_unlock_bh+0x36/0x40 [ 170.892621][T10697] nf_setsockopt+0x199/0x1b0 [ 170.892649][T10697] ip_setsockopt+0x102/0x110 [ 170.892825][T10697] udp_setsockopt+0x99/0xb0 [ 170.892855][T10697] sock_common_setsockopt+0x69/0x80 [ 170.892960][T10697] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 170.892986][T10697] __sys_setsockopt+0x184/0x200 [ 170.893028][T10697] __x64_sys_setsockopt+0x64/0x80 [ 170.893092][T10697] x64_sys_call+0x20ec/0x3000 [ 170.893115][T10697] do_syscall_64+0xd2/0x200 [ 170.893140][T10697] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.893175][T10697] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.893267][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.893292][T10697] RIP: 0033:0x7f76a1caf6c9 [ 170.893306][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.893352][T10697] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.893376][T10697] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 170.893392][T10697] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000007 [ 170.893407][T10697] RBP: 00007f76a070f090 R08: 0000000000000418 R09: 0000000000000000 [ 170.893423][T10697] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 170.893454][T10697] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 170.893485][T10697] [ 171.213731][T10713] FAULT_INJECTION: forcing a failure. [ 171.213731][T10713] name failslab, interval 1, probability 0, space 0, times 0 [ 171.226518][T10713] CPU: 0 UID: 0 PID: 10713 Comm: syz.3.2606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.226612][T10713] Tainted: [W]=WARN [ 171.226620][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.226653][T10713] Call Trace: [ 171.226660][T10713] [ 171.226668][T10713] __dump_stack+0x1d/0x30 [ 171.226830][T10713] dump_stack_lvl+0xe8/0x140 [ 171.226884][T10713] dump_stack+0x15/0x1b [ 171.226974][T10713] should_fail_ex+0x265/0x280 [ 171.227007][T10713] ? mall_change+0x18a/0x480 [ 171.227044][T10713] should_failslab+0x8c/0xb0 [ 171.227131][T10713] __kmalloc_cache_noprof+0x4c/0x4a0 [ 171.227169][T10713] mall_change+0x18a/0x480 [ 171.227211][T10713] ? __pfx_mall_change+0x10/0x10 [ 171.227313][T10713] tc_new_tfilter+0xde4/0x10a0 [ 171.227332][T10713] ? __rcu_read_unlock+0x4f/0x70 [ 171.227422][T10713] ? ns_capable+0x7d/0xb0 [ 171.227451][T10713] ? __pfx_tc_new_tfilter+0x10/0x10 [ 171.227476][T10713] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 171.227507][T10713] netlink_rcv_skb+0x123/0x220 [ 171.227547][T10713] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.227586][T10713] rtnetlink_rcv+0x1c/0x30 [ 171.227612][T10713] netlink_unicast+0x5c0/0x690 [ 171.227712][T10713] netlink_sendmsg+0x58b/0x6b0 [ 171.227736][T10713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.227759][T10713] __sock_sendmsg+0x145/0x180 [ 171.227859][T10713] ____sys_sendmsg+0x31e/0x4e0 [ 171.227884][T10713] ___sys_sendmsg+0x17b/0x1d0 [ 171.227927][T10713] __x64_sys_sendmsg+0xd4/0x160 [ 171.227953][T10713] x64_sys_call+0x191e/0x3000 [ 171.227981][T10713] do_syscall_64+0xd2/0x200 [ 171.228054][T10713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.228086][T10713] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.228121][T10713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.228187][T10713] RIP: 0033:0x7f76a1caf6c9 [ 171.228204][T10713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.228224][T10713] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.228329][T10713] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 171.228344][T10713] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 171.228356][T10713] RBP: 00007f76a070f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.228368][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.228383][T10713] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 171.228406][T10713] [ 171.487619][T10708] lo speed is unknown, defaulting to 1000 [ 171.503121][T10708] lo speed is unknown, defaulting to 1000 [ 171.563355][T10721] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 171.570907][T10721] 0ªî{X¹¦: entered allmulticast mode [ 171.577274][T10721] net_ratelimit: 85 callbacks suppressed [ 171.577291][T10721] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 171.579646][T10706] SELinux: failed to load policy [ 171.629234][T10724] random: crng reseeded on system resumption [ 171.709288][T10733] loop4: detected capacity change from 0 to 1024 [ 171.747682][T10736] loop5: detected capacity change from 0 to 2048 [ 171.758849][T10733] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.769794][T10733] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 171.787704][T10734] lo speed is unknown, defaulting to 1000 [ 171.808363][T10734] lo speed is unknown, defaulting to 1000 [ 171.809820][T10736] EXT4-fs (loop5): failed to initialize system zone (-117) [ 171.814455][T10733] JBD2: no valid journal superblock found [ 171.827154][T10733] EXT4-fs (loop4): Could not load journal inode [ 171.827280][T10736] EXT4-fs (loop5): mount failed [ 171.980314][T10749] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184 [ 172.050404][T10758] lo speed is unknown, defaulting to 1000 [ 172.053565][T10762] random: crng reseeded on system resumption [ 172.085579][T10743] Process accounting resumed [ 172.103696][T10758] lo speed is unknown, defaulting to 1000 [ 172.125676][T10771] lo speed is unknown, defaulting to 1000 [ 172.141795][T10771] lo speed is unknown, defaulting to 1000 [ 172.148799][T10773] FAULT_INJECTION: forcing a failure. [ 172.148799][T10773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.162135][T10773] CPU: 0 UID: 0 PID: 10773 Comm: syz.5.2628 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.162168][T10773] Tainted: [W]=WARN [ 172.162176][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.162261][T10773] Call Trace: [ 172.162267][T10773] [ 172.162274][T10773] __dump_stack+0x1d/0x30 [ 172.162357][T10773] dump_stack_lvl+0xe8/0x140 [ 172.162378][T10773] dump_stack+0x15/0x1b [ 172.162394][T10773] should_fail_ex+0x265/0x280 [ 172.162481][T10773] should_fail_alloc_page+0xf2/0x100 [ 172.162520][T10773] __alloc_frozen_pages_noprof+0xff/0x360 [ 172.162644][T10773] alloc_pages_mpol+0xb3/0x260 [ 172.162670][T10773] vma_alloc_folio_noprof+0x1aa/0x300 [ 172.162693][T10773] handle_mm_fault+0xec2/0x2be0 [ 172.162767][T10773] ? mt_find+0x21b/0x330 [ 172.162803][T10773] do_user_addr_fault+0x3fe/0x1080 [ 172.162829][T10773] exc_page_fault+0x62/0xa0 [ 172.162867][T10773] asm_exc_page_fault+0x26/0x30 [ 172.162960][T10773] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 172.162988][T10773] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 172.163033][T10773] RSP: 0018:ffffc90001f5bd50 EFLAGS: 00050206 [ 172.163052][T10773] RAX: ffff8881096a6da0 RBX: 0000000000001000 RCX: 0000000000000200 [ 172.163067][T10773] RDX: 0000000000000000 RSI: ffff88811aa9de00 RDI: 0000200000003000 [ 172.163082][T10773] RBP: ffff88811aa9d000 R08: 0000000000000040 R09: 0000000000000000 [ 172.163096][T10773] R10: 000188811aa9d000 R11: 000188811aa9dfff R12: 0000200000003200 [ 172.163118][T10773] R13: 00007ffffffff000 R14: 0000200000002200 R15: ffff88811aa9d000 [ 172.163202][T10773] _copy_to_user+0x7c/0xa0 [ 172.163227][T10773] pagemap_read+0x379/0x5e0 [ 172.163257][T10773] ? __pfx_pagemap_read+0x10/0x10 [ 172.163289][T10773] vfs_read+0x1a8/0x770 [ 172.163337][T10773] ? __rcu_read_unlock+0x4f/0x70 [ 172.163362][T10773] ? __fget_files+0x184/0x1c0 [ 172.163426][T10773] __x64_sys_pread64+0xfd/0x150 [ 172.163452][T10773] x64_sys_call+0x29e6/0x3000 [ 172.163478][T10773] do_syscall_64+0xd2/0x200 [ 172.163503][T10773] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.163601][T10773] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.163636][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.163662][T10773] RIP: 0033:0x7fe5e130f6c9 [ 172.163680][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.163744][T10773] RSP: 002b:00007fe5dfd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 172.163761][T10773] RAX: ffffffffffffffda RBX: 00007fe5e1565fa0 RCX: 00007fe5e130f6c9 [ 172.163772][T10773] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 172.163784][T10773] RBP: 00007fe5dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 172.163795][T10773] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.163806][T10773] R13: 00007fe5e1566038 R14: 00007fe5e1565fa0 R15: 00007ffe164100b8 [ 172.163827][T10773] [ 172.176416][T10775] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 172.308125][T10783] loop5: detected capacity change from 0 to 1024 [ 172.342655][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 172.342675][ T29] audit: type=1326 audit(2000000023.930:26018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.374074][T10775] SELinux: failed to load policy [ 172.378383][ T29] audit: type=1326 audit(2000000023.930:26019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.411064][T10764] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 172.414075][ T29] audit: type=1326 audit(2000000023.930:26020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.443108][T10783] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 172.446577][ T29] audit: type=1326 audit(2000000023.930:26021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.454651][T10783] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 172.462736][ T29] audit: type=1326 audit(2000000023.930:26022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.467210][T10783] JBD2: no valid journal superblock found [ 172.479319][ T29] audit: type=1326 audit(2000000024.070:26023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.482355][T10783] EXT4-fs (loop5): Could not load journal inode [ 172.488561][ T29] audit: type=1326 audit(2000000024.070:26024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8556a1f6c9 code=0x7ffc0000 [ 172.516658][T10788] SELinux: policydb magic number 0x30303003 does not match expected magic number 0xf97cff8c [ 172.589959][T10764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.650324][T10788] SELinux: failed to load policy [ 172.718187][T10790] __nla_validate_parse: 5 callbacks suppressed [ 172.718206][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 172.776078][T10792] lo speed is unknown, defaulting to 1000 [ 172.812926][T10792] lo speed is unknown, defaulting to 1000 [ 172.825212][T10799] loop1: detected capacity change from 0 to 1024 [ 172.845910][T10799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.862953][T10799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.917354][T10806] netlink: 'syz.0.2637': attribute type 10 has an invalid length. [ 172.933770][T10806] ipvlan0: entered allmulticast mode [ 172.939148][T10806] veth0_vlan: entered allmulticast mode [ 172.956362][ T29] audit: type=1326 audit(2000000024.530:26025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.5.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e130f6c9 code=0x7ffc0000 [ 172.980146][ T29] audit: type=1326 audit(2000000024.530:26026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.5.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5e130f6c9 code=0x7ffc0000 [ 173.003776][ T29] audit: type=1326 audit(2000000024.530:26027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.5.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e130f6c9 code=0x7ffc0000 [ 173.005527][T10806] team0: Device ipvlan0 failed to register rx_handler [ 173.038095][T10811] random: crng reseeded on system resumption [ 173.084065][T10812] loop3: detected capacity change from 0 to 128 [ 173.094464][T10812] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.157548][T10820] loop1: detected capacity change from 0 to 1024 [ 173.172904][T10812] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.177950][T10815] SELinux: failed to load policy [ 173.201129][T10822] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2642'. [ 173.211098][T10820] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 173.212687][T10819] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2642'. [ 173.222041][T10820] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 173.243578][T10820] JBD2: no valid journal superblock found [ 173.249329][T10820] EXT4-fs (loop1): Could not load journal inode [ 173.281692][ T1610] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.308258][T10829] lo speed is unknown, defaulting to 1000 [ 173.314901][T10829] lo speed is unknown, defaulting to 1000 [ 173.348649][T10831] FAULT_INJECTION: forcing a failure. [ 173.348649][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 173.361355][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.3.2646 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.361391][T10831] Tainted: [W]=WARN [ 173.361397][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.361423][T10831] Call Trace: [ 173.361430][T10831] [ 173.361437][T10831] __dump_stack+0x1d/0x30 [ 173.361494][T10831] dump_stack_lvl+0xe8/0x140 [ 173.361521][T10831] dump_stack+0x15/0x1b [ 173.361545][T10831] should_fail_ex+0x265/0x280 [ 173.361598][T10831] should_failslab+0x8c/0xb0 [ 173.361633][T10831] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 173.361674][T10831] ? page_pool_create_percpu+0x4d/0x630 [ 173.361740][T10831] page_pool_create_percpu+0x4d/0x630 [ 173.361795][T10831] ? bpf_test_run_xdp_live+0x119/0x11c0 [ 173.361840][T10831] page_pool_create+0x1a/0x30 [ 173.361949][T10831] bpf_test_run_xdp_live+0x133/0x11c0 [ 173.361996][T10831] ? __pfx_autoremove_wake_function+0x10/0x10 [ 173.362027][T10831] ? 0xffffffffa02054c0 [ 173.362065][T10831] ? synchronize_rcu+0x45/0x320 [ 173.362090][T10831] ? 0xffffffffa02054c0 [ 173.362107][T10831] ? 0xffffffffa02054c0 [ 173.362125][T10831] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 173.362156][T10831] ? 0xffffffffa02054c0 [ 173.362205][T10831] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 173.362394][T10831] bpf_prog_test_run_xdp+0x525/0x970 [ 173.362436][T10831] ? __rcu_read_unlock+0x4f/0x70 [ 173.362474][T10831] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 173.362520][T10831] bpf_prog_test_run+0x22a/0x390 [ 173.362561][T10831] __sys_bpf+0x4c0/0x7c0 [ 173.362596][T10831] __x64_sys_bpf+0x41/0x50 [ 173.362637][T10831] x64_sys_call+0x2aee/0x3000 [ 173.362691][T10831] do_syscall_64+0xd2/0x200 [ 173.362713][T10831] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.362751][T10831] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.362800][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.362828][T10831] RIP: 0033:0x7f76a1caf6c9 [ 173.362847][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.362871][T10831] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.362895][T10831] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 173.362912][T10831] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 173.362928][T10831] RBP: 00007f76a070f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.362981][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.363003][T10831] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 173.363028][T10831] [ 173.649869][T10825] loop5: detected capacity change from 0 to 128 [ 173.692636][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 173.779444][T10825] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 173.789960][T10841] lo speed is unknown, defaulting to 1000 [ 173.815992][T10845] lo speed is unknown, defaulting to 1000 [ 173.822609][T10843] lo speed is unknown, defaulting to 1000 [ 173.829312][T10843] lo speed is unknown, defaulting to 1000 [ 173.869753][T10845] lo speed is unknown, defaulting to 1000 [ 173.893440][T10841] lo speed is unknown, defaulting to 1000 [ 173.949345][T10853] SELinux: failed to load policy [ 173.972996][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 173.982406][T10857] bridge_slave_1: left allmulticast mode [ 173.988097][T10857] bridge_slave_1: left promiscuous mode [ 173.993759][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.001827][T10857] bridge_slave_0: left allmulticast mode [ 174.007696][T10857] bridge_slave_0: left promiscuous mode [ 174.013607][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.031840][T10862] loop5: detected capacity change from 0 to 1024 [ 174.039083][T10862] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 174.071045][T10865] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2657'. [ 174.116428][T10864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.126786][T10864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.277571][T10864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.288044][T10864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.311535][T10880] bond1 (unregistering): Released all slaves [ 174.328719][T10879] lo speed is unknown, defaulting to 1000 [ 174.338565][T10877] lo speed is unknown, defaulting to 1000 [ 174.345077][T10877] lo speed is unknown, defaulting to 1000 [ 174.354147][T10879] lo speed is unknown, defaulting to 1000 [ 174.395976][T10864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.406500][T10864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.425591][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'. [ 174.485966][T10864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.496396][T10864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.611145][T10903] FAULT_INJECTION: forcing a failure. [ 174.611145][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 174.623937][T10903] CPU: 0 UID: 0 PID: 10903 Comm: syz.4.2671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.623977][T10903] Tainted: [W]=WARN [ 174.623986][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.623999][T10903] Call Trace: [ 174.624005][T10903] [ 174.624084][T10903] __dump_stack+0x1d/0x30 [ 174.624107][T10903] dump_stack_lvl+0xe8/0x140 [ 174.624128][T10903] dump_stack+0x15/0x1b [ 174.624146][T10903] should_fail_ex+0x265/0x280 [ 174.624196][T10903] should_failslab+0x8c/0xb0 [ 174.624226][T10903] kmem_cache_alloc_noprof+0x50/0x480 [ 174.624257][T10903] ? security_file_alloc+0x32/0x100 [ 174.624355][T10903] security_file_alloc+0x32/0x100 [ 174.624382][T10903] init_file+0x5c/0x1d0 [ 174.624417][T10903] alloc_empty_file+0x8b/0x200 [ 174.624502][T10903] alloc_file_pseudo+0xc6/0x160 [ 174.624524][T10903] __shmem_file_setup+0x1de/0x210 [ 174.624545][T10903] shmem_file_setup+0x3b/0x50 [ 174.624563][T10903] __se_sys_memfd_create+0x2c3/0x590 [ 174.624639][T10903] __x64_sys_memfd_create+0x31/0x40 [ 174.624754][T10903] x64_sys_call+0x2ac2/0x3000 [ 174.624778][T10903] do_syscall_64+0xd2/0x200 [ 174.624799][T10903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.624829][T10903] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.624874][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.624897][T10903] RIP: 0033:0x7fdb4a10f6c9 [ 174.624913][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.624956][T10903] RSP: 002b:00007fdb48b6ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 174.624975][T10903] RAX: ffffffffffffffda RBX: 00000000000002be RCX: 00007fdb4a10f6c9 [ 174.624989][T10903] RDX: 00007fdb48b6eef0 RSI: 0000000000000000 RDI: 00007fdb4a192960 [ 174.625073][T10903] RBP: 0000200000000b80 R08: 00007fdb48b6ebb7 R09: 00007fdb48b6ee40 [ 174.625086][T10903] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000004c0 [ 174.625099][T10903] R13: 00007fdb48b6eef0 R14: 00007fdb48b6eeb0 R15: 0000200000000500 [ 174.625188][T10903] [ 174.657202][T10899] SELinux: failed to load policy [ 174.703044][T10905] random: crng reseeded on system resumption [ 174.813060][T10912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10912 comm=syz.0.2674 [ 174.844915][T10915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2675'. [ 174.881800][ T3778] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.890328][ T3778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.906394][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2672'. [ 174.913268][ T3778] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.923552][ T3778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.946753][ T3778] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.955316][ T3778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.968109][ T3778] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.976365][ T3778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.017894][T10922] lo speed is unknown, defaulting to 1000 [ 175.024205][T10922] lo speed is unknown, defaulting to 1000 [ 175.060738][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2679'. [ 175.117937][T10928] SELinux: Context ׸ýßX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 175.166573][T10936] FAULT_INJECTION: forcing a failure. [ 175.166573][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 175.179692][T10936] CPU: 0 UID: 0 PID: 10936 Comm: syz.5.2682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.179731][T10936] Tainted: [W]=WARN [ 175.179780][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.179795][T10936] Call Trace: [ 175.179802][T10936] [ 175.179890][T10936] __dump_stack+0x1d/0x30 [ 175.179918][T10936] dump_stack_lvl+0xe8/0x140 [ 175.179943][T10936] dump_stack+0x15/0x1b [ 175.179965][T10936] should_fail_ex+0x265/0x280 [ 175.180046][T10936] should_failslab+0x8c/0xb0 [ 175.180083][T10936] kmem_cache_alloc_noprof+0x50/0x480 [ 175.180171][T10936] ? audit_log_start+0x342/0x720 [ 175.180195][T10936] audit_log_start+0x342/0x720 [ 175.180216][T10936] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 175.180243][T10936] audit_seccomp+0x48/0x100 [ 175.180278][T10936] ? __seccomp_filter+0x82d/0x1250 [ 175.180308][T10936] __seccomp_filter+0x83e/0x1250 [ 175.180395][T10936] ? bpf_probe_read_compat+0x126/0x130 [ 175.180420][T10936] ? __rcu_read_unlock+0x4f/0x70 [ 175.180448][T10936] ? bpf_trace_run2+0x124/0x1c0 [ 175.180529][T10936] __secure_computing+0x82/0x150 [ 175.180558][T10936] syscall_trace_enter+0xcf/0x1e0 [ 175.180624][T10936] do_syscall_64+0xac/0x200 [ 175.180722][T10936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.180754][T10936] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.180914][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.180940][T10936] RIP: 0033:0x7fe5e130e0dc [ 175.181000][T10936] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.181024][T10936] RSP: 002b:00007fe5dfd77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.181097][T10936] RAX: ffffffffffffffda RBX: 00007fe5e1565fa0 RCX: 00007fe5e130e0dc [ 175.181121][T10936] RDX: 000000000000000f RSI: 00007fe5dfd770a0 RDI: 0000000000000006 [ 175.181137][T10936] RBP: 00007fe5dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 175.181153][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.181168][T10936] R13: 00007fe5e1566038 R14: 00007fe5e1565fa0 R15: 00007ffe164100b8 [ 175.181193][T10936] [ 175.438529][T10932] SELinux: failed to load policy [ 175.578701][T10947] loop5: detected capacity change from 0 to 2048 [ 175.628385][T10947] EXT4-fs (loop5): blocks per group (262144) and clusters per group (16384) inconsistent [ 175.966602][T10958] FAULT_INJECTION: forcing a failure. [ 175.966602][T10958] name failslab, interval 1, probability 0, space 0, times 0 [ 175.979297][T10958] CPU: 0 UID: 0 PID: 10958 Comm: syz.3.2692 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.979331][T10958] Tainted: [W]=WARN [ 175.979337][T10958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.979350][T10958] Call Trace: [ 175.979356][T10958] [ 175.979363][T10958] __dump_stack+0x1d/0x30 [ 175.979432][T10958] dump_stack_lvl+0xe8/0x140 [ 175.979458][T10958] dump_stack+0x15/0x1b [ 175.979479][T10958] should_fail_ex+0x265/0x280 [ 175.979586][T10958] should_failslab+0x8c/0xb0 [ 175.979621][T10958] kmem_cache_alloc_noprof+0x50/0x480 [ 175.979649][T10958] ? security_inode_alloc+0x37/0x100 [ 175.979676][T10958] security_inode_alloc+0x37/0x100 [ 175.979781][T10958] inode_init_always_gfp+0x4b7/0x500 [ 175.979814][T10958] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 175.979837][T10958] alloc_inode+0x58/0x170 [ 175.979862][T10958] new_inode+0x1d/0xe0 [ 175.979972][T10958] shmem_get_inode+0x244/0x750 [ 175.979996][T10958] __shmem_file_setup+0x113/0x210 [ 175.980084][T10958] shmem_file_setup+0x3b/0x50 [ 175.980103][T10958] __se_sys_memfd_create+0x2c3/0x590 [ 175.980169][T10958] __x64_sys_memfd_create+0x31/0x40 [ 175.980192][T10958] x64_sys_call+0x2ac2/0x3000 [ 175.980214][T10958] do_syscall_64+0xd2/0x200 [ 175.980236][T10958] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.980273][T10958] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.980317][T10958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.980403][T10958] RIP: 0033:0x7f76a1caf6c9 [ 175.980420][T10958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.980443][T10958] RSP: 002b:00007f76a070ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 175.980468][T10958] RAX: ffffffffffffffda RBX: 000000000000072d RCX: 00007f76a1caf6c9 [ 175.980536][T10958] RDX: 00007f76a070eef0 RSI: 0000000000000000 RDI: 00007f76a1d32960 [ 175.980548][T10958] RBP: 00002000000014c0 R08: 00007f76a070ebb7 R09: 00007f76a070ee40 [ 175.980563][T10958] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 175.980579][T10958] R13: 00007f76a070eef0 R14: 00007f76a070eeb0 R15: 0000200000000300 [ 175.980604][T10958] [ 176.222241][T10961] netlink: 'syz.5.2691': attribute type 21 has an invalid length. [ 176.277013][T10960] netlink: 'syz.5.2691': attribute type 21 has an invalid length. [ 176.345710][T10952] loop1: detected capacity change from 0 to 128 [ 176.410942][T10952] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 176.501748][T10978] lo speed is unknown, defaulting to 1000 [ 176.508487][T10978] lo speed is unknown, defaulting to 1000 [ 176.720285][T10996] 9pnet_fd: Insufficient options for proto=fd [ 176.780806][T11000] loop4: detected capacity change from 0 to 1024 [ 176.788172][T11000] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.799173][T11000] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 176.819810][T11000] JBD2: no valid journal superblock found [ 176.825599][T11000] EXT4-fs (loop4): Could not load journal inode [ 177.466123][T11007] SELinux: failed to load policy [ 177.510450][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 177.510484][ T29] audit: type=1326 audit(2000000029.100:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11005 comm="syz.4.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a10f6c9 code=0x7ffc0000 [ 177.750459][ T29] audit: type=1400 audit(2000000029.220:26558): avc: denied { create } for pid=11009 comm="syz.3.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.770367][ T29] audit: type=1400 audit(2000000029.240:26559): avc: denied { connect } for pid=11009 comm="syz.3.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.790326][ T29] audit: type=1400 audit(2000000029.240:26560): avc: denied { write } for pid=11009 comm="syz.3.2709" path="socket:[40074]" dev="sockfs" ino=40074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.814042][ T29] audit: type=1326 audit(2000000029.270:26561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11005 comm="syz.4.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a10f6c9 code=0x7ffc0000 [ 177.906619][T11012] loop5: detected capacity change from 0 to 8192 [ 177.914563][ T29] audit: type=1400 audit(2000000029.500:26562): avc: denied { open } for pid=11014 comm="syz.4.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.926916][T11012] __nla_validate_parse: 4 callbacks suppressed [ 177.926936][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2710'. [ 177.934055][ T29] audit: type=1400 audit(2000000029.500:26563): avc: denied { kernel } for pid=11014 comm="syz.4.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.974949][T11017] loop4: detected capacity change from 0 to 128 [ 177.981752][T11017] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 177.999864][ T29] audit: type=1400 audit(2000000029.510:26564): avc: denied { mount } for pid=11011 comm="syz.5.2710" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.028409][T11019] netlink: 'syz.0.2712': attribute type 1 has an invalid length. [ 178.058295][T11019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.073801][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 178.082757][ T29] audit: type=1400 audit(2000000029.670:26566): avc: denied { create } for pid=11018 comm="syz.0.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.102780][ T29] audit: type=1400 audit(2000000029.670:26565): avc: denied { unmount } for pid=9201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.156743][T11019] bond3 (unregistering): Released all slaves [ 178.202479][T11022] random: crng reseeded on system resumption [ 178.249735][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2714'. [ 178.333207][T11038] random: crng reseeded on system resumption [ 178.348149][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'. [ 178.363021][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2720'. [ 178.438317][T11040] veth0_to_team: entered promiscuous mode [ 179.186783][T11059] loop5: detected capacity change from 0 to 128 [ 179.198267][T11070] loop3: detected capacity change from 0 to 1024 [ 179.226968][T11070] EXT4-fs: Ignoring removed orlov option [ 179.236369][T11059] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 179.257177][T11070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.355785][T11077] loop5: detected capacity change from 0 to 1024 [ 179.371039][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 179.422681][T11077] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.433629][T11077] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.468008][T11038] loop4: detected capacity change from 0 to 1024 [ 179.482203][T11079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.544720][T11038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.584023][T11077] JBD2: no valid journal superblock found [ 179.589851][T11077] EXT4-fs (loop5): Could not load journal inode [ 179.691692][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.908989][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.006099][T11095] SELinux: failed to load policy [ 180.074278][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2743'. [ 180.080213][T11112] loop4: detected capacity change from 0 to 1024 [ 180.090954][T11112] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 180.102104][T11112] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 180.115196][T11110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.115512][T11112] JBD2: no valid journal superblock found [ 180.125565][T11110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.131292][T11112] EXT4-fs (loop4): Could not load journal inode [ 180.189204][T11110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.199777][T11110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.216188][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 180.273453][T11110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.283796][T11110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.332694][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 180.352480][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 180.361162][T11116] loop5: detected capacity change from 0 to 128 [ 180.378540][T11110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.388943][T11110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.407970][T11127] FAULT_INJECTION: forcing a failure. [ 180.407970][T11127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.413417][T11116] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 180.421411][T11127] CPU: 1 UID: 0 PID: 11127 Comm: syz.4.2749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.421473][T11127] Tainted: [W]=WARN [ 180.421483][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.421501][T11127] Call Trace: [ 180.421509][T11127] [ 180.421520][T11127] __dump_stack+0x1d/0x30 [ 180.421595][T11127] dump_stack_lvl+0xe8/0x140 [ 180.421621][T11127] dump_stack+0x15/0x1b [ 180.421671][T11127] should_fail_ex+0x265/0x280 [ 180.421759][T11127] should_fail_alloc_page+0xf2/0x100 [ 180.421863][T11127] __alloc_frozen_pages_noprof+0xff/0x360 [ 180.421916][T11127] alloc_pages_mpol+0xb3/0x260 [ 180.421948][T11127] alloc_frozen_pages_noprof+0x90/0x110 [ 180.421979][T11127] ___kmalloc_large_node+0x52/0x100 [ 180.422027][T11127] __kmalloc_large_node_noprof+0x16/0xa0 [ 180.422071][T11127] __kmalloc_noprof+0x348/0x570 [ 180.422159][T11127] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 180.422244][T11127] usb_hcd_submit_urb+0x5d3/0x1200 [ 180.422279][T11127] ? bpf_trace_run2+0x124/0x1c0 [ 180.422325][T11127] usb_submit_urb+0xace/0xc20 [ 180.422448][T11127] proc_do_submiturb+0x19c7/0x1d20 [ 180.422506][T11127] proc_submiturb+0x7b/0xa0 [ 180.422623][T11127] usbdev_ioctl+0xcb6/0x1700 [ 180.422662][T11127] ? __pfx_usbdev_ioctl+0x10/0x10 [ 180.422706][T11127] __se_sys_ioctl+0xce/0x140 [ 180.422736][T11127] __x64_sys_ioctl+0x43/0x50 [ 180.422764][T11127] x64_sys_call+0x1816/0x3000 [ 180.422796][T11127] do_syscall_64+0xd2/0x200 [ 180.422832][T11127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.422874][T11127] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 180.422977][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.423007][T11127] RIP: 0033:0x7fdb4a10f6c9 [ 180.423028][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.423054][T11127] RSP: 002b:00007fdb48b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.423085][T11127] RAX: ffffffffffffffda RBX: 00007fdb4a365fa0 RCX: 00007fdb4a10f6c9 [ 180.423103][T11127] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 180.423120][T11127] RBP: 00007fdb48b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.423217][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.423234][T11127] R13: 00007fdb4a366038 R14: 00007fdb4a365fa0 R15: 00007ffdfe7e3fe8 [ 180.423261][T11127] [ 180.478274][T11130] loop4: detected capacity change from 0 to 2048 [ 180.724172][T11130] Alternate GPT is invalid, using primary GPT. [ 180.730516][T11130] loop4: p1 p2 p3 [ 180.734289][T11130] loop4: partition table partially beyond EOD, truncated [ 180.747499][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.755741][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.775990][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.784264][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.795919][T11134] SELinux: failed to load policy [ 180.801137][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.809396][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.842111][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.850463][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.864232][T11138] loop3: detected capacity change from 0 to 1024 [ 180.882562][T11138] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 180.893492][T11138] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 180.922569][T11138] JBD2: no valid journal superblock found [ 180.928389][T11138] EXT4-fs (loop3): Could not load journal inode [ 180.948408][T11148] loop1: detected capacity change from 0 to 512 [ 180.955849][T11151] netlink: 'syz.0.2753': attribute type 1 has an invalid length. [ 180.989953][T11148] EXT4-fs: Ignoring removed i_version option [ 180.997396][T11148] EXT4-fs (loop1): unable to read superblock [ 181.017331][T11130] FAULT_INJECTION: forcing a failure. [ 181.017331][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 181.030078][T11130] CPU: 1 UID: 0 PID: 11130 Comm: syz.4.2751 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.030110][T11130] Tainted: [W]=WARN [ 181.030116][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.030204][T11130] Call Trace: [ 181.030211][T11130] [ 181.030219][T11130] __dump_stack+0x1d/0x30 [ 181.030247][T11130] dump_stack_lvl+0xe8/0x140 [ 181.030273][T11130] dump_stack+0x15/0x1b [ 181.030312][T11130] should_fail_ex+0x265/0x280 [ 181.030384][T11130] should_failslab+0x8c/0xb0 [ 181.030419][T11130] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 181.030452][T11130] ? __alloc_skb+0x101/0x320 [ 181.030481][T11130] __alloc_skb+0x101/0x320 [ 181.030541][T11130] ? obj_cgroup_charge_account+0x122/0x1a0 [ 181.030571][T11130] alloc_skb_with_frags+0x7d/0x470 [ 181.030610][T11130] ? __rcu_read_unlock+0x4f/0x70 [ 181.030711][T11130] ? xa_load+0xb1/0xe0 [ 181.030735][T11130] sock_alloc_send_pskb+0x430/0x4e0 [ 181.030769][T11130] unix_dgram_sendmsg+0x380/0xfd0 [ 181.030807][T11130] ? selinux_socket_sendmsg+0x175/0x1b0 [ 181.030857][T11130] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 181.030951][T11130] __sock_sendmsg+0x145/0x180 [ 181.031008][T11130] ____sys_sendmsg+0x345/0x4e0 [ 181.031035][T11130] ___sys_sendmsg+0x17b/0x1d0 [ 181.031070][T11130] __sys_sendmmsg+0x178/0x300 [ 181.031277][T11130] __x64_sys_sendmmsg+0x57/0x70 [ 181.031297][T11130] x64_sys_call+0x1c4a/0x3000 [ 181.031327][T11130] do_syscall_64+0xd2/0x200 [ 181.031347][T11130] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.031377][T11130] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 181.031461][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.031483][T11130] RIP: 0033:0x7fdb4a10f6c9 [ 181.031498][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.031556][T11130] RSP: 002b:00007fdb48b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.031577][T11130] RAX: ffffffffffffffda RBX: 00007fdb4a365fa0 RCX: 00007fdb4a10f6c9 [ 181.031589][T11130] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 181.031602][T11130] RBP: 00007fdb48b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.031614][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.031626][T11130] R13: 00007fdb4a366038 R14: 00007fdb4a365fa0 R15: 00007ffdfe7e3fe8 [ 181.031647][T11130] [ 181.306753][T11153] lo speed is unknown, defaulting to 1000 [ 181.313077][T11153] lo speed is unknown, defaulting to 1000 [ 181.422758][T11162] loop5: detected capacity change from 0 to 2048 [ 181.444937][T11171] FAULT_INJECTION: forcing a failure. [ 181.444937][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 181.457704][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.3.2763 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.457737][T11171] Tainted: [W]=WARN [ 181.457743][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.457756][T11171] Call Trace: [ 181.457761][T11171] [ 181.457768][T11171] __dump_stack+0x1d/0x30 [ 181.457790][T11171] dump_stack_lvl+0xe8/0x140 [ 181.457837][T11171] dump_stack+0x15/0x1b [ 181.457854][T11171] should_fail_ex+0x265/0x280 [ 181.457894][T11171] should_failslab+0x8c/0xb0 [ 181.457924][T11171] kmem_cache_alloc_noprof+0x50/0x480 [ 181.458025][T11171] ? skb_clone+0x151/0x1f0 [ 181.458051][T11171] skb_clone+0x151/0x1f0 [ 181.458074][T11171] nfnetlink_rcv+0x2fc/0x16c0 [ 181.458157][T11171] ? kmem_cache_free+0xe4/0x3d0 [ 181.458198][T11171] ? __kfree_skb+0x109/0x150 [ 181.458279][T11171] ? nlmon_xmit+0x4f/0x60 [ 181.458314][T11171] ? nlmon_xmit+0x4f/0x60 [ 181.458345][T11171] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 181.458392][T11171] ? __dev_queue_xmit+0x1200/0x2000 [ 181.458458][T11171] ? __dev_queue_xmit+0x182/0x2000 [ 181.458485][T11171] ? ref_tracker_free+0x37d/0x3e0 [ 181.458542][T11171] netlink_unicast+0x5c0/0x690 [ 181.458575][T11171] netlink_sendmsg+0x58b/0x6b0 [ 181.458614][T11171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.458640][T11171] __sock_sendmsg+0x145/0x180 [ 181.458673][T11171] ____sys_sendmsg+0x31e/0x4e0 [ 181.458702][T11171] ___sys_sendmsg+0x17b/0x1d0 [ 181.458772][T11171] __x64_sys_sendmsg+0xd4/0x160 [ 181.458804][T11171] x64_sys_call+0x191e/0x3000 [ 181.458835][T11171] do_syscall_64+0xd2/0x200 [ 181.458861][T11171] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.458935][T11171] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 181.458977][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.459136][T11171] RIP: 0033:0x7f76a1caf6c9 [ 181.459155][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.459178][T11171] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.459282][T11171] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 181.459298][T11171] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 181.459391][T11171] RBP: 00007f76a070f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.459406][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.459422][T11171] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 181.459454][T11171] [ 181.468626][T11162] Alternate GPT is invalid, using primary GPT. [ 181.679949][T11169] loop1: detected capacity change from 0 to 128 [ 181.684448][T11162] loop5: p1 p2 p3 [ 181.684460][T11162] loop5: partition table partially beyond EOD, truncated [ 181.808277][T11169] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 181.872814][T11179] SELinux: failed to load policy [ 181.997845][T11195] loop1: detected capacity change from 0 to 512 [ 182.060201][T11195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.060893][T11200] random: crng reseeded on system resumption [ 182.083861][T11195] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.236005][T11214] netlink: 'syz.1.2774': attribute type 13 has an invalid length. [ 182.318764][T11222] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 182.388775][T11226] random: crng reseeded on system resumption [ 182.404980][T11227] netlink: 'syz.0.2784': attribute type 4 has an invalid length. [ 182.526844][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 182.526874][ T29] audit: type=1400 audit(2000000034.120:27258): avc: denied { read } for pid=11221 comm="syz.0.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.553490][T11231] FAULT_INJECTION: forcing a failure. [ 182.553490][T11231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.566600][T11231] CPU: 0 UID: 0 PID: 11231 Comm: syz.3.2786 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.566641][T11231] Tainted: [W]=WARN [ 182.566683][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.566696][T11231] Call Trace: [ 182.566703][T11231] [ 182.566712][T11231] __dump_stack+0x1d/0x30 [ 182.566740][T11231] dump_stack_lvl+0xe8/0x140 [ 182.566761][T11231] dump_stack+0x15/0x1b [ 182.566778][T11231] should_fail_ex+0x265/0x280 [ 182.566884][T11231] should_fail+0xb/0x20 [ 182.566978][T11231] should_fail_usercopy+0x1a/0x20 [ 182.567120][T11231] _copy_from_iter+0xd2/0xe80 [ 182.567144][T11231] ? __build_skb_around+0x1ab/0x200 [ 182.567174][T11231] ? __alloc_skb+0x223/0x320 [ 182.567252][T11231] netlink_sendmsg+0x471/0x6b0 [ 182.567312][T11231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.567333][T11231] __sock_sendmsg+0x145/0x180 [ 182.567359][T11231] ____sys_sendmsg+0x31e/0x4e0 [ 182.567399][T11231] ___sys_sendmsg+0x17b/0x1d0 [ 182.567444][T11231] __x64_sys_sendmsg+0xd4/0x160 [ 182.567470][T11231] x64_sys_call+0x191e/0x3000 [ 182.567506][T11231] do_syscall_64+0xd2/0x200 [ 182.567566][T11231] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.567713][T11231] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.567814][T11231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.567859][T11231] RIP: 0033:0x7f76a1caf6c9 [ 182.567878][T11231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.567902][T11231] RSP: 002b:00007f76a070f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.567927][T11231] RAX: ffffffffffffffda RBX: 00007f76a1f05fa0 RCX: 00007f76a1caf6c9 [ 182.567940][T11231] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 182.567952][T11231] RBP: 00007f76a070f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.567988][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.568000][T11231] R13: 00007f76a1f06038 R14: 00007f76a1f05fa0 R15: 00007ffe0c109608 [ 182.568023][T11231] [ 182.621549][ T29] audit: type=1326 audit(2000000034.120:27259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.667080][T11208] loop4: detected capacity change from 0 to 128 [ 182.669870][ T29] audit: type=1326 audit(2000000034.120:27260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.669909][ T29] audit: type=1326 audit(2000000034.120:27261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.669987][ T29] audit: type=1326 audit(2000000034.120:27262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.670029][ T29] audit: type=1326 audit(2000000034.120:27263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.670065][ T29] audit: type=1326 audit(2000000034.120:27264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.670171][ T29] audit: type=1400 audit(2000000034.120:27265): avc: denied { setopt } for pid=11221 comm="syz.0.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.670204][ T29] audit: type=1326 audit(2000000034.120:27266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.670241][ T29] audit: type=1326 audit(2000000034.120:27267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f4529f6c9 code=0x7ffc0000 [ 182.903894][T11234] loop3: detected capacity change from 0 to 1024 [ 183.007017][T11208] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 183.013706][T11234] EXT4-fs: Ignoring removed orlov option [ 183.024975][T11234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.135285][T11239] loop4: detected capacity change from 0 to 512 [ 183.243901][T11239] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.255458][T11239] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 183.265566][T11239] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2788: Corrupt directory, running e2fsck is recommended [ 183.352210][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.373355][T11239] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 183.394310][T11239] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2788: corrupted in-inode xattr: invalid ea_ino [ 183.430426][T11243] loop5: detected capacity change from 0 to 512 [ 183.437500][T11239] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2788: couldn't read orphan inode 15 (err -117) [ 183.472548][T11239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.526795][T11239] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.538520][T11239] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 183.548741][T11239] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2788: Corrupt directory, running e2fsck is recommended [ 183.573435][T11239] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.585049][T11239] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 183.595282][T11239] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2788: Corrupt directory, running e2fsck is recommended [ 183.630559][T11239] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.642224][T11239] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 183.652508][T11239] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2788: Corrupt directory, running e2fsck is recommended [ 183.680173][T11250] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.722257][T11250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.2788: path /546/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 183.780187][T11250] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 64: comm syz.4.2788: path /546/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 184.060920][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.152884][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.270270][ T3388] lo speed is unknown, defaulting to 1000 [ 184.276404][ T3388] syz2: Port: 1 Link DOWN [ 184.303248][T11242] tipc: Started in network mode [ 184.308325][T11242] tipc: Node identity ac14140f, cluster identity 4711 [ 184.322899][T11242] tipc: New replicast peer: 255.255.255.83 [ 184.328867][T11242] tipc: Enabled bearer , priority 10 [ 184.337271][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.347509][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.354769][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.390023][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.412600][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.471948][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.513763][T11275] loop3: detected capacity change from 0 to 256 [ 184.570575][T11273] SELinux: failed to load policy [ 184.628255][T11283] loop1: detected capacity change from 0 to 1024 [ 184.638449][T11283] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.649430][T11283] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.668833][T11278] loop5: detected capacity change from 0 to 8192 [ 184.677713][T11283] JBD2: no valid journal superblock found [ 184.683515][T11283] EXT4-fs (loop1): Could not load journal inode [ 184.719111][T11292] __nla_validate_parse: 8 callbacks suppressed [ 184.719125][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 184.735067][T11278] loop5: p2 p3 < > p4 [ 184.739197][T11278] loop5: p2 size 16776960 extends beyond EOD, truncated [ 184.832021][T11297] netlink: 'syz.4.2806': attribute type 3 has an invalid length. [ 184.887400][T11305] FAULT_INJECTION: forcing a failure. [ 184.887400][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 184.900313][T11305] CPU: 1 UID: 0 PID: 11305 Comm: syz.4.2808 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.900399][T11305] Tainted: [W]=WARN [ 184.900463][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.900476][T11305] Call Trace: [ 184.900481][T11305] [ 184.900487][T11305] __dump_stack+0x1d/0x30 [ 184.900508][T11305] dump_stack_lvl+0xe8/0x140 [ 184.900528][T11305] dump_stack+0x15/0x1b [ 184.900595][T11305] should_fail_ex+0x265/0x280 [ 184.900639][T11305] should_failslab+0x8c/0xb0 [ 184.900696][T11305] kmem_cache_alloc_noprof+0x50/0x480 [ 184.900729][T11305] ? audit_log_start+0x342/0x720 [ 184.900812][T11305] ? perf_cgroup_switch+0x10c/0x480 [ 184.900851][T11305] audit_log_start+0x342/0x720 [ 184.900875][T11305] ? obj_cgroup_charge_account+0x122/0x1a0 [ 184.900938][T11305] audit_seccomp+0x48/0x100 [ 184.900974][T11305] ? __seccomp_filter+0x82d/0x1250 [ 184.901062][T11305] __seccomp_filter+0x83e/0x1250 [ 184.901101][T11305] ? commit_creds+0x70f/0x780 [ 184.901137][T11305] __secure_computing+0x82/0x150 [ 184.901205][T11305] syscall_trace_enter+0xcf/0x1e0 [ 184.901242][T11305] do_syscall_64+0xac/0x200 [ 184.901267][T11305] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.901297][T11305] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.901412][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.901438][T11305] RIP: 0033:0x7fdb4a10e0dc [ 184.901456][T11305] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.901478][T11305] RSP: 002b:00007fdb48b6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.901570][T11305] RAX: ffffffffffffffda RBX: 00007fdb4a365fa0 RCX: 00007fdb4a10e0dc [ 184.901584][T11305] RDX: 000000000000000f RSI: 00007fdb48b6f0a0 RDI: 0000000000000003 [ 184.901599][T11305] RBP: 00007fdb48b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.901613][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.901628][T11305] R13: 00007fdb4a366038 R14: 00007fdb4a365fa0 R15: 00007ffdfe7e3fe8 [ 184.901727][T11305] [ 184.916882][T11308] loop5: detected capacity change from 0 to 1024 [ 185.039345][T11309] loop3: detected capacity change from 0 to 256 [ 185.075268][T11308] EXT4-fs: Ignoring removed orlov option [ 185.135768][T11311] loop4: detected capacity change from 0 to 1024 [ 185.142420][T11311] EXT4-fs: Ignoring removed orlov option [ 185.153033][T11311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.172819][T11308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.332597][T11256] tipc: Node number set to 2886997007 [ 185.341950][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.453714][T11327] random: crng reseeded on system resumption [ 185.476748][T11308] ================================================================== [ 185.484871][T11308] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 185.493186][T11308] [ 185.495556][T11308] write to 0xffff8881073a8ea8 of 4 bytes by task 11320 on cpu 0: [ 185.503288][T11308] writeback_single_inode+0x150/0x3f0 [ 185.508810][T11308] sync_inode_metadata+0x5b/0x90 [ 185.513795][T11308] generic_buffers_fsync_noflush+0xd9/0x120 [ 185.519708][T11308] ext4_sync_file+0x1ab/0x690 [ 185.524394][T11308] vfs_fsync_range+0x10d/0x130 [ 185.529177][T11308] ext4_buffered_write_iter+0x34f/0x3c0 [ 185.534729][T11308] ext4_file_write_iter+0x387/0xf60 [ 185.539935][T11308] iter_file_splice_write+0x666/0xa60 [ 185.545320][T11308] direct_splice_actor+0x156/0x2a0 [ 185.550466][T11308] splice_direct_to_actor+0x312/0x680 [ 185.555848][T11308] do_splice_direct+0xda/0x150 [ 185.560628][T11308] do_sendfile+0x380/0x650 [ 185.565239][T11308] __x64_sys_sendfile64+0x105/0x150 [ 185.570457][T11308] x64_sys_call+0x2bb4/0x3000 [ 185.575150][T11308] do_syscall_64+0xd2/0x200 [ 185.579661][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.585560][T11308] [ 185.587897][T11308] read to 0xffff8881073a8ea8 of 4 bytes by task 11308 on cpu 1: [ 185.595531][T11308] __mark_inode_dirty+0x191/0x750 [ 185.600575][T11308] ext4_write_inline_data_end+0x3e5/0x5f0 [ 185.606307][T11308] ext4_write_end+0x3d7/0x730 [ 185.611001][T11308] generic_perform_write+0x312/0x490 [ 185.616290][T11308] ext4_buffered_write_iter+0x1ee/0x3c0 [ 185.621880][T11308] ext4_file_write_iter+0x387/0xf60 [ 185.627083][T11308] iter_file_splice_write+0x666/0xa60 [ 185.632473][T11308] direct_splice_actor+0x156/0x2a0 [ 185.637593][T11308] splice_direct_to_actor+0x312/0x680 [ 185.642976][T11308] do_splice_direct+0xda/0x150 [ 185.647752][T11308] do_sendfile+0x380/0x650 [ 185.652185][T11308] __x64_sys_sendfile64+0x105/0x150 [ 185.657401][T11308] x64_sys_call+0x2bb4/0x3000 [ 185.662518][T11308] do_syscall_64+0xd2/0x200 [ 185.667035][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.672938][T11308] [ 185.675259][T11308] value changed: 0x00000070 -> 0x00000002 [ 185.680972][T11308] [ 185.683295][T11308] Reported by Kernel Concurrency Sanitizer on: [ 185.689460][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.5.2809 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.700839][T11308] Tainted: [W]=WARN [ 185.704642][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.714704][T11308] ================================================================== [ 185.738105][T11331] loop1: detected capacity change from 0 to 512 [ 185.756860][T11331] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.764800][ T9201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.792373][T11331] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 185.801917][T11331] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2817: attempt to clear invalid blocks 2 len 1 [ 185.818792][T11331] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 185.833807][T11331] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2817: invalid indirect mapped block 1819239214 (level 0) [ 185.848534][T11331] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2817: invalid indirect mapped block 1819239214 (level 1) [ 185.863237][T11331] EXT4-fs (loop1): 1 truncate cleaned up [ 185.869257][T11331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.882346][T11331] FAULT_INJECTION: forcing a failure. [ 185.882346][T11331] name failslab, interval 1, probability 0, space 0, times 0 [ 185.895059][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.1.2817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.895089][T11331] Tainted: [W]=WARN [ 185.895095][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.895171][T11331] Call Trace: [ 185.895178][T11331] [ 185.895185][T11331] __dump_stack+0x1d/0x30 [ 185.895205][T11331] dump_stack_lvl+0xe8/0x140 [ 185.895223][T11331] dump_stack+0x15/0x1b [ 185.895262][T11331] should_fail_ex+0x265/0x280 [ 185.895292][T11331] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 185.895316][T11331] should_failslab+0x8c/0xb0 [ 185.895403][T11331] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 185.895429][T11331] ? ext4_alloc_inode+0x38/0x310 [ 185.895450][T11331] ? ext4_search_dir+0x1c4/0x1e0 [ 185.895509][T11331] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 185.895531][T11331] ext4_alloc_inode+0x38/0x310 [ 185.895553][T11331] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 185.895574][T11331] alloc_inode+0x40/0x170 [ 185.895669][T11331] iget_locked+0xf9/0x5d0 [ 185.895698][T11331] __ext4_iget+0x152/0x22d0 [ 185.895749][T11331] ? __rcu_read_unlock+0x4f/0x70 [ 185.895773][T11331] ? d_alloc_parallel+0xbc4/0xc70 [ 185.895849][T11331] ext4_lookup+0x161/0x390 [ 185.895876][T11331] __lookup_slow+0x193/0x250 [ 185.895912][T11331] lookup_slow+0x3c/0x60 [ 185.895928][T11331] walk_component+0x1ec/0x220 [ 185.896002][T11331] path_lookupat+0xfe/0x2a0 [ 185.896048][T11331] filename_lookup+0x147/0x340 [ 185.896100][T11331] user_path_at+0x3e/0x130 [ 185.896124][T11331] __se_sys_quotactl+0xb6/0x670 [ 185.896182][T11331] __x64_sys_quotactl+0x55/0x70 [ 185.896203][T11331] x64_sys_call+0x15d6/0x3000 [ 185.896295][T11331] do_syscall_64+0xd2/0x200 [ 185.896314][T11331] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.896383][T11331] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.896414][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.896433][T11331] RIP: 0033:0x7f8556a1f6c9 [ 185.896446][T11331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.896465][T11331] RSP: 002b:00007f8555487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 185.896523][T11331] RAX: ffffffffffffffda RBX: 00007f8556c75fa0 RCX: 00007f8556a1f6c9 [ 185.896534][T11331] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 185.896544][T11331] RBP: 00007f8555487090 R08: 0000000000000000 R09: 0000000000000000 [ 185.896555][T11331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.896565][T11331] R13: 00007f8556c76038 R14: 00007f8556c75fa0 R15: 00007ffef93a2d48 [ 185.896582][T11331] [ 186.163335][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.