last executing test programs: 34.208459523s ago: executing program 0 (id=1079): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e40)=ANY=[@ANYBLOB='check=relaxed,showassoc,overriderockperm,unhide,map=off,showassoc,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=strict,map=off,overriderockperm,map=acorn,hide,norock,map=normal,overriderockperm,norock,showassoc,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0xa24, &(0x7f0000000280)="$eJzs3U1snPWdB/DvM7YTx7BJgCzLIiCTsAkGvI7tQLIRBzaxJ4lZv6xsRyLaAwHirLLxLrtkKwGqRJCqnopaqVUP7Q311F6QuJRLxa29tScOlSpOvaOe0pOrZ2Ycv409tnHsJHw+1niel9/z//+eeV7+npnHzz/cX+YPLBubn68/tjh+6Zc7kDH3sHMjX33y6cfl46Nb2ZOOvFz8OulOUk06kzyRdA2PTE2O712/oBvJlSRfJEWSMrjYaA5XUvwwDy+Of5Hi52W9a9qz0ZJpZ55vtd3e/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F5UDI8MDAwWezI6cen1akNSXWV4ZGqyyPz86jkLyzR8Xu/1u/i8bb1JUT7S3b3Q1fcThxZnP56kejRPNcaeqndInu588NDjB195rLOysPxa2XwjezdUbCqN3G68OTc3++7acfMfNuK2McF7x4XaxOj05Oj42Qu16uj0ZPXMqVMDJy6en66eHx2rTV+enqmNV4enamdnJqeqvcPPVwfPnDlZrfVfnrw0cWGkf6y2MPH0Pw8NDJyqvtb/77WzU9OTEyde658evjg6NjY6caEeU84uY06XO+K/jc5UZ2pnx6vVa9fnZk+uyKlj5YtdBg22W5MyaKhd0NDA0NDg4NDQ4EfN3rPvTDj18pmXTw8MdA6skFURd2mn5d6yb+3NvJ2nb/hGKo32P/81ltFM5FJeT7Xlz3BGMpXJjK8xv2mh/T92orZuvUvb/2Yr37lk9pPlr6N5pjna3Wz//y7J0vZ/jVx27udm3s8HuZE3M5e5zObdXc9oZ38upJaJjGY6kxnNeM7Wp1SbU6o5k1M5lYG8kYs5nOlUcz6jGUst07mc6cykVt+jhjOVWs5mJpOZSjW9Gc7zqWYwZ3ImJ1NNLf25nMlcykQuZCRn66Vcy/X6635ynRzvBA1uJGhonaCVjXm5r2+u/a89qH8JsmHbfxKHLZpvtv97VkzvWB3aO7xTSQEAAADb6h9/l/2HHv3tn5IiT9c/lz8/OlZ7dbfTAgAAALZR/XK9p8qnrnLo6e76+/+B3U4LAAAA2EZF/X/siiQ9OdwYWvhPKB8CAAAAwAOi/v3/MykOL07w/h8AAAAeMO3vsd82ouhbuP1v9Wrj+WozojFWFBkdq/UPT469Mpjj9bsMJHl6dWkdSdFV//eDF3KkEXWkp/Hcs1hiWWd3GTXY/8pgXsjR5or0Pls+PdvbInKoEflcI/K5pZEdWRZ5sowEgAfd0XXa4422/y+krxHR92S9ye98skUbPKBlBYB7xZ0+dv7a7NKsRfvfjHhmrfb/pXXe/5cRj+ba4cYlBf15O+9kLlfTl+YVB4dblbrQG0HjMoS+Np8G9DQvWfjD6Ur6Vn0e0H1nXZfGzmYofYufCLzV/KxiebnFQg4nG3NbdIoAAPejo+u2wxtr//vavP/vcUkhANxTbr7/QaMH+00MfLiZ4Nl3b+72OgIAy2mlAQAAAAAAAAAAAAAAAAAAAAAAAAAAYPstu13/vubElTfw//3xZG5uNtlCZwFbHuhuleHWBirZoZx3faAjyW7V/mo2vVR3i51tEwO/2tdc/M+7/8o/cAO7eFICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgxxRJR6vplWRvkoEkJ3Y+q7vn1m4nsF2qe7a0WHE7t/Ne9m97PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA33LN+/9X0nh+qDEpnZXkWJIrSf5jt3PcTrd3O4G7o2gf8t+NwMX7/1eSrswX6Wxs9hRdwyNTk+NlUcXecv5Xn3z6cfloX/bqXhXKAsoalnUu0axhyZSu5Us9Ul/qy+ZYdeRcfcc8N3N+bGT8wtS/LgY+XnyWVNN4LFjI97vHfvOjJZObHSUUn5Vr2lqj3p6R2Zs3/v+d/62OnK/XO7K63n9otfQa9W7A9bnZobKmmdrrM9/5n+vvLZn1aI4kz/Ymvctr+s/ysUZNR1a+nssVXxffL/bnp7lS3/7lq1HMF+UmOlBf/33Xrs/N9r/9ztzVOzl9uCyngzmc5GrSvfGcDq+9b9b3ukpXWetAPaj8dahNeetaUuLgGq/rI/VdpmdT61Btc3y1ed2bGZ1smdGP/++xHN/0lj7epsaWiq+LPxYX82W+t6T/j0q5/Y+l5dHZooh65JI9Zem8ZYdXpRFZX/OhpTPeWFnmmkcld8EP8lb+5c72ryw5/ze31c6cj5bU2Pq4SDZ/XPziwKoWZVG9RTq0okVqnn3WWqaZ56FG1Bp5/n1ebJS5iTPKi+1a7Lt0/P+s6M1fckv/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2vSDpaTa8kx5IcTHKgHK8m8ytjbm2hvkpPsZU0t81Wcr7/FGuuaHE7t/Ne9u90RgAAAAAAAADcHedGvvrk04/LR/37+I78UyXJS41v+juTHCx+0jU8MjU53qagruTKwlf63ZvL4Ur56+HF8S/KsSfaLLS7lw8AwH3tbwEAAP//YkVl3Q==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 34.043210036s ago: executing program 0 (id=1082): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 33.985560887s ago: executing program 0 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) clock_nanosleep(0x9, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x64842, 0x0) r2 = dup(0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x8000fffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") (fail_nth: 8) 33.906075068s ago: executing program 0 (id=1084): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xf, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003c000180060001000a150000080005"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3aca4a9, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$TIOCSCTTY(r0, 0x540e, 0xbf24) 33.579569455s ago: executing program 0 (id=1086): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e40)=ANY=[@ANYBLOB='check=relaxed,showassoc,overriderockperm,unhide,map=off,showassoc,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=strict,map=off,overriderockperm,map=acorn,hide,norock,map=normal,overriderockperm,norock,showassoc,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0xa24, &(0x7f0000000280)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 33.171182063s ago: executing program 0 (id=1095): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="241800000000000000181100008bda163e7cff278b39fc4e3bf3175d59052229b12fccdba17e896ba389", @ANYRES32=r0, @ANYBLOB="0000000000000010b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000440)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x11) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r5], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendto$packet(r6, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 33.170914473s ago: executing program 32 (id=1095): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="241800000000000000181100008bda163e7cff278b39fc4e3bf3175d59052229b12fccdba17e896ba389", @ANYRES32=r0, @ANYBLOB="0000000000000010b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000440)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x11) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r5], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendto$packet(r6, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 11.012659955s ago: executing program 1 (id=1448): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x101501, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTuZ206bmWmSJjPV+XzgZs65907O+c79cc7MPdwbQN8aT//kIg5HxLtJxGhjfhIRQ/XUYMTJjfVura0W0ymJ9fWXf0nq69xcWy1G03tSBxuZ/0fEN29FHMltLre6vDJXKJdLi438ZG3+wmR1eeXo+fnCbGm2tHB8anr62ImnThzfvVh/+37l0LX3Xnj885N/vPm/q+98m8TJONRY1hzHbhmP8cZnMpR+hHd5frcL67Gk1xVgR9JDc2DjKI/DMRoD9RQA8E/2ekSsAwB9JtH+A0CfyX4HuLm2Wsym3v4i0V3Xn4uI/RvxZ9c3N5YMNq7Z7a9fBx25mdx1ZSSJiLFdKH88Ij7+8tVP0yn26DokQCtvXI6Is2Pjm8//yaYxC9v1RIdl+xqv4/fMd/6D7vkq7f883ar/l7vd/4kW/Z/hFsfuTtz3+D+wC4V0kPb/nm0a23arKf6GsYFG7l/1Pt9Qcu58uZSe2/4dERMxNJzmpzqUMXHjzxvtljX3/359/7VP0vLT1ztr5H4aHL77PTOFWuFBYm52/XLEI4Ot4k9ub/+kTf/39BbLePGZtz9qtyyNP403mzbHH43RSXtj/UrEYy23/50RbUnH8YmT9d1hMtspWvjihw9H2pXfvP3TKS0/+y7QDen2H+kc/1jSPF6zuv0yvrsy+nW7ZfePv/X+vy95pZ7O+hGXCrXa4lTEvuSlzfOP3Xlvls/WT+OfeLT18d9p/0+/E57dYvyD137+bOfx7600/pltbf/tJ67emhtoV/7Wtv90PTXRmLOV899WK/ggnx0AAAAAAAAAAAAAAAAAAAAAAAAAbFUuIg5FksvfTudy+fzGM7z/GyO5cqVaO3KusrQwE/VnZY/FUC671eVo0/1Qpxr3w8/yx+7JPxkR/4mID4YPJNl9FGd6HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62ef5/6sfhXtcOANgz+3tdAQCg67T/ANB/tP8A0H+0/wDQf7T/ANB/tP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssdOnTqXT+u9rq8U0P3NxeWmucvHoTKk6l59fKuaLlcUL+dlKZbZcyhcr8/f7f+VK5cJ0LCxdmqyVqrXJ6vLKmfnK0kLtzPn5wmzpTGmoK1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPZUl1fmCuVyaVFiB4n1h6MavU8MNHanh6U+XU0kD0c1djnR6ayR687JCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv4K8AAAD//8yLIwE=") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="0100fdffffff020000001d00000008000300", @ANYRES32=r6, @ANYBLOB="24002f800c000200000000000000f4ff0b0003800800010003000000080001"], 0x40}, 0x1, 0x0, 0x0, 0x4000485}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x60, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4046005) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r8, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), 0x0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000340)={{0x1, 0x3, 0x0, 0x0, 0xffffffff}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.596900653s ago: executing program 1 (id=1451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x7, 0xd, 0x0, 0x4}, 0x10) r10 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r10) ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000000300)={0x6, 0x40, 0x58}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.529486644s ago: executing program 1 (id=1454): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002940), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002980)={0x0, 0x0}) r6 = geteuid() getresgid(&(0x7f0000002a00)=0x0, &(0x7f0000002a40), &(0x7f0000002a80)) sendmmsg$unix(r3, &(0x7f0000002c00)=[{{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000780)="74a5d8959b91ac27e3ba0fb999d426e05723e51ed6c9981a9d047ae01cd02ea539dd3aee1f1b52b75747", 0x2a}, {&(0x7f0000000880)="a4eabbb1118ed639bab851fafb958a94efcf0f3293ab9dc1b5745a3706e2e1e554cd2b8d932555c263ab0c922836a2bcc527b5dab7fd1fc6d32dddda73b73d61e7962d8e2ec7903f838c75977e35109dbeb6203f53f876844586ae16a0d720a36aa2f2c25907f68e0221edb58ae831c6547fb942745bbdafa1a510322b793ff188f0b221f685d1dfafffa931a9e87fc049251e10fa5d9f09df3e8c0e91c64ae03168ad4b2cafc96fa03f508c1a0183d29ed78383c03bbabe29370918610f7e97c4ce9eb6e992a40fa3bf4da36992afcf97b3f8d6b4f2ebbdf1acfc3d2d866b583902254e81484cd67bd0", 0xea}, {&(0x7f0000000a40)="5886778c015396e59717d7d70e7a512013249f1765a3f5388b7f084cb3259b838c3716939313ab5a7454dc1a09da53d6fc17d142f6660e1bf263701cf434c08c3c6390dc4b3e4c058e1658bd1b7eaf53c6dd195d36b2928904a8cba289c2d9e79903e72f2330eb6527f03f47b3bae32599e44b91c5455499aa0fb313764c4b9d718ee78da9cb21c5bb436342d66a2507fa28436e0119c0fc57898659e1b93a7adc1f567fd79525d46ee81dad9220013a3f57e4619fd111b2565fa2ec5e88b9", 0xbf}, {&(0x7f0000000b00)="3d7d083a0344ea4da61f4f37904bcea14c79d546078bab9907e8a1391e87455b6842ef14f2ed6baf161fb95adf3c1be680fadf93afff4750918f6f268bc1c04eb14df50fa43bb89d9f2e46a39f5955f6fd985ecfbfadc256a9fc04f8498907fc4786fb36d25a27e98775f4868d4db2072fe10fff31b89ff90f829fd7f683", 0x7e}, {&(0x7f0000000b80)="be6c6b0be7b18df51d44d8efcf45d637b7bda262312465e0f0d7b9822a34e2ae48037090cc7823c31d59e00954ef84a8d1ebd442793b60abf799adb579af2ed31ba0f7d800376bc4276dad522e7e56e3b5b9365f461a7da60e4f69935caab7ee6b23dcd1bd1c1d5cb437bc2cf1b73e07ecad65c4ed64ae6ba9222a9f364bdd169a82df240a29dba5299b7529915635e9df70cb930b3b7950c70d04c2797c94f6cc3317bb62495b3aacf9d46498c636e359f4110a78bf4b5e15c9ea04c8bbdb2fa618f08d0c9f502fd01b7eb7520ca17f1afa403c5304273edf7fd2bea0dd2795d51be18ffa678080e1051c5a58089fc01624", 0xf2}], 0x5, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x18}}, {{&(0x7f0000000d00)=@file={0x4dd8f97d1b90cbb3, './file1\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d80)="8809c575f4974855bd63390b5388f948fc3def6b29d9954ed3fa13ebf9a81b4b81707643f564968c06173be5962fb6ce187bb5", 0x33}, {&(0x7f0000000dc0)="b2918170ca82af13cb63a888b95c2d398f910f332ef3053cee5d723ac18dffbc5a3ac314241db566d566e7c0e67611a3c6f59f6d2a1d99cbebdda4f61e63064f381b966edbdfd678cf19dcee1b75e6129b1f3dc293ab91904f4f9ebc2732330cbda2c002f8e5f31412eccfb51b65344e41b71cb6baef19e57960dcf8f036ca2544209f", 0x83}, {&(0x7f0000000e80)="2aa3e46c413c8e59d5b449d1491f8854fe8426a0ab478d170f1e8c4129a16a1b226d3b936e69211a24a39fb370e1b02b179f8c15145645a1a2d30b067d7c7e7689e4fb7435ed59e20a9ec5cba07c550388f6a5f1d2b64f68144eec3f5255c108cb004a50f2f841e7b4b3e1929659f54abe53cf04d3f664fd", 0x78}, {&(0x7f0000000f00)="9dbbe7263b174fcfafde9b1a8cc9705bd8833fdd358d96", 0x17}, {&(0x7f0000000f40)="c5cd914cfc7f65c8c6f0d1553760533d63127b0f29f03ce80c1794ae82dff9290419c77f65934b9d7158ff5f13064c899c8fcc1880ff67eeb20fd2b8d6b03ade045cc9c81491f202f27cc90ad7aaccf5ad0b90c68fb67490", 0x58}], 0x5, 0x0, 0x0, 0x1000}}, {{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001280)=[{&(0x7f00000010c0)="1ad5017021363abfae9c34ccbf126bd70382670a7ebb288f53e80a", 0x1b}, {&(0x7f0000001100)="735492d9899a2138f5d582d785b696cd1a63f67fbc6ad696cad5c1358f5fd7732a2030a56b8fe73623956e0396834ca40608d89a5daa664bbb779540dbfbcc2fb1352226b52b14d42771a398c668cbd0d3fe5d410cbb8053ac7ea76a245206911ab9fbedf040993c9ec20bef3bf42c9a9a1af791465f8a3877239822e1ca4d621e3ac12995523dc902d2435a4f805c912dce3c54a577c437fcf7103dc9ce6069a0470f2c16f19962d957ef2e15e11ec73f6e7c50cb1181d7b834bee6833a59c39761890357a6a02531e68206f9341d07b73a0a4d20ca7a89b54adb3b8c1718f030f9fe7b591ba6ede926fdeb9fe4ef1deb", 0xf1}, {&(0x7f0000001200)="0e1c0790111a95276b4ea9ad2ee1be161e8648414ed420e438595e5c18a6889f962b5b2430dac996e972864ce9809745c174878d51b9efa7aef03bd06461ea56ea8b2f24059cbf11e703c588325fde8ce32ff385d3107619677ca714bdc94540b2f654b53f439411d359", 0x6a}], 0x3, &(0x7f0000002ac0)=[@rights={{0x20, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r3, r2, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r4]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x130, 0x20004001}}], 0x3, 0x20000c84) mmap$IORING_OFF_SQ_RING(&(0x7f0000c53000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r3, 0x0) r8 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x25, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'batadv0\x00', 0x800}) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8085) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r10 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 10.443754746s ago: executing program 1 (id=1456): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) r3 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x25dfdbff, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10}, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x3, &(0x7f0000000100)=0x2) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0xf4, 0xd}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa803000000000000004451b51584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9abcfbc1f3abb042520001a800b400", "644fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000200)={0x3a, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e24, 0x3, 'none\x00', 0x20, 0x1d6, 0x49}, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94000000}, 0x5}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) 9.527324134s ago: executing program 1 (id=1465): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x80462, 0x2, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x85}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) 9.415949316s ago: executing program 1 (id=1469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 9.413915346s ago: executing program 33 (id=1469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 2.343579704s ago: executing program 5 (id=1621): msgctl$MSG_STAT(0xffffffffffffffff, 0xb, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="4dc8a18fbf512f043f9b6cde9d744d1e046b149b54462869d54c29348da05d05289aec4767aa93fd50b45be1b74b42b062448ff5f500a2f410554ff8e4740d97995dfb502f44a1f0fcf30f9052195c3ebdec90d3819c7dbbce43ba8c201e1cc193cc7710f7e15797d9606ba36b292eec2e1891f63cc163c4a9f6c0ca58fa3226a3ee4cdde6b9775b640f9794e8fe4938cf731e6a74d6ef53e7ae79d5ee5b0d9a89ecac0f34e79a07289e6f815af80feb871d39d224adf09dc04537ea68c3214eca4b4018b3989f9066b45dfcb9c32e692447c4ed5744c94c3b6b9397fc0eff6acca0243aea5a51e4127c5b968c8eba39f0cee32d4c72260edc287d63d5f1b177fe64815655691b2e285a7965943ca4d38de606313dd8f3abb8f8ba16f32ca18da1be7a75bcd7e950252a252faa87d4978e90f98a59cfe770cb70dc244d77270698377a5797126457a6552d7be9669bcac0835eeafe31f90c29f139e7b4e9e6dbd5d41269686a1c0f4ae5409ec79f7bb9b0b141cf273d"], 0x0, 0x5}, 0x94) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0xf3a, 0x0) close(r10) write$binfmt_script(r11, 0x0, 0xd9) write(r7, 0x0, 0x0) 2.175323637s ago: executing program 5 (id=1626): getdents(0xffffffffffffffff, &(0x7f0000000180)=""/36, 0x24) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000000}, 0x18) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0xffffffff, 0x30}, {0xe, 0x8}]}, 0x14, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x4) 2.007310471s ago: executing program 4 (id=1629): syz_clone3(&(0x7f00000015c0)={0x105000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x6, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFT_MSG_DELSETELEM={0x3d00, 0xe, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3ca0, 0x3, 0x0, 0x1, [{0x1438, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x268, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "206a8689a37acbdc80679ffa1bbd9eea513d05df93f4b97196c0d153e234de335b00b9c9f89409d2db53551c7657d526bc5817327c314d501892a1c010098033591884a8806a919275085f5ac4b101dc0bfd40a80cd07860b6e30f746b909dd06bb36a510854ddd98c4257df6bf83cebd298a3bfefda4a4a7a1a396bf570326eda68670f9aa1fbce4e9e24aeda42788ae772e2f545dd4d21555c4ed6d6ccbc00a1a2ceeea38bec87a49ebeb38bd8ccc5b59bbc9a5a59f08c54ef75bb1612b0ce84dd4996f6ff855c6e48f45353d4f4c80f2c26baf2a9e73b0327b65ce235fea9c9cd00d83bb834e3d13017f49770bee956c121a7b15d50dbee"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "cb15c41998fea091cfa5390d6edb62617c9062125f08d4f649424743dd79e6db0ccfe0e55e5aabe8cf1eff39fe819acbe27d28c281b9e62d9784df8372bba2cbf6dcc625c5513c8352949d824ac61b68279c71f68f9f13ff04e33e62efafba257b6230e5fe507f709c5bc660f64af3a921d0ed24dde3fde930b9b197189f1ff9aa89e04454545fd41dd97208af9309a82bb1211b49bfcfb801d667009f8b091de86c06c1dc064d5a9dc06454db09d72c"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb, 0x1, "edb1f096b4d125"}]}, @NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "cbf6a6b07960db72d61334b705ada57845db36b7397698d428db91a44909fb5e1c96d25d2ec4c06dfa213ce5db882a5a0f22983231c7e28147de373e3e1bb8a74f2e4e3e833a1ac6d745c2171e7829c624f771e87fc69df4066a6313c91cc120898b3cfee8a4ae1811d6f9e56f4958a0d9218b67042bbd2b5f56d1421a6af0935dfac1f84818bb7246978993fcf89af8b27796a49448"}, @NFTA_SET_ELEM_KEY={0x10e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "d3f69df6eb18930e89661f31c901d54e1067786c8b81aa114669488d8c4fe1ae4c78a126728ca7f03748ef"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "31450ce242a6e5d468e5e81945eb125a6cc3a13e954f1bd195b81aebe88405226fb5ba38bed87cccb9b2535f7437144054a92999ac2a325bebf52c64523c9f5b4954b6ea8cd6a085ab913a9bd9ca8a257a1cb80294b41e0e339ddee60396f544fc16a012f4a8a11f336939"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff0001}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x1c, 0x6, 0x1, 0x0, "b2a4bba9d728a219dbd5d3871910f634439860df25eb56ca"}]}, {0x190, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x91, 0x1, "849fa858d07cfdffcc18d6b19168bb720d23d3b9d1bc5694aa08d5a84c0fc48f674572edd4ddefdc728542bac7908bc091590302381c6002dbff2d3f59fe22ce26c772877553826b88e511385055a7b341bf2465c0a94cb3d3a574ff45bf9b93937cd6f9931b5ea92215df908986b865f26049bd7f6a43f0eb556b7fa2a0ec3c26597f2675d42d30010d1992ad"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4a7b4d0bf7da7079}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "6ee0860db9bb102cb0bc17ebf80521bdec"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc, 0x6, 0x1, 0x0, "ca507eefe1bbcfde"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x25f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x118, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "02ded2ec0ad04322119847dfe7960b97dbf21905c9797fe25c81c452248abb44cf004bc3759fcea8504cccf28fde7ceb8d2cd4d18c6ea0400be4ebbb9f72672e82bb819e5f5c5b4617ca51907b43aee18e5ad199dcef9dfc88523d3101ec11a38f962591738bda7dbefc93"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "6154e30c5f19c7a440b0c4a7fe30997b035f871b2fb5ad64655295a30581d461e45291b044c89000926ec666912ab7405d693a540c744abaafebd985efaeeea7bd4d4d16cd643aaf4423eb8dfb1b2e33127cea09f2cccbf592a31a0a7d23eaeaf7f098d19da77a7a11d2996af57823f63942ae09fa05adb9c134de50c702b6cb7cb0d33b7240b4646f8ce0d2cc255d1896411b6450fbf03b8fc3a5a7b7f344b754b91e9bf41ff2426044cf604c627f2202e742766153ff69ff9a36ecb3bf36f4440a330ad7d7"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x2194, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "7ba3c9fd2915c06f140759f7baf92b1cd536ad32219611049f1a2c8fab3f225eeec43afdba7885a8d2b5ef53dc59af572e6ae23fc3a741235bac9ac9d9fa73bcc869ce47f47570f78457acd5b3ba21ca8af889b58a0f78266734fd06b214c4a0909c62f8922da49c207dab4c806c2d7f66b28a44882422"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "b7a786e13fa14f66d26b575d49fa497ee0d215c5a8345b78f94998c909097af54832d902396b85b75da48f54779de89d4b3be3500e6200e21c6b7473f8d6310b3c5ffd48198c127613661adb89b0297bb1506122435ad4b5e892b94122044015aa72e0597c13cd37c46b43d2392c318ad4e9d6b63fb1fbd10eccc96fe40b92e270bff63f879421fbfd9045bf53098f8b2e00dd3a410771b4a807d40cdc722674f2801862f28f23f3e4b56576f15fb5c5dbc308a71499738a30f8fabc5eb527d557eacf33f3d6d798"}]}, @NFTA_SET_ELEM_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "277730da6f5d638919e570d3d48f510f98e6feb731c57887fd68762afb68903ab00fbe5173b5d04001627360d13931e9a54ea84ca7adc05481827fa1b5af8601e0e70cf7fc859b9562ffc77630793fab2b4db74492184e7a8e037cc63114836ab9959634f2139d9caa314c486ee336325e6407b69cc17f05357d03e052cea1f58ec0c2471f086480ab2a330313050a0dc2229090c351b09d2c358911f25ee85f1cf1ecc87fbf55f95adbbdf241c10cf08e9a2d596a18b17d413719518d1685694d"}, @NFTA_DATA_VALUE={0x6a, 0x1, "f96cad9080bcf2a0e7783a07814ceed3fb689110127e3adf5917eab1f649d6c8e2ba3f9395e57635cb2ffc70e3256cdd2317329e2827ee3a907ebc420fa1340a760fe9906d8c31bab8c5b719d26912012de18cf5e088bb147730813fe170ed6cc49cbf92ecb2"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "f762cfbf908450f3dcc8cc97fa5482352f0f291a8a5fc2caa673b1e3e61bd0b5f77e088a0ce97aa735af7f592538eb988776a326244eaa70f7c35a3d7da45cfff19b0f76d68d25761769258eec14cd82da1ce890525842821cd60c320d54c32bd30ebc6adea7151d6dd125bdf01a39d62ab7e9bab41a9b1be6711d6ace4ceb0be0f742f1f1364c0822c58198e7e57a1813de3d0c3179c9c919781c9b8c0ef5f9cc29cd7a70e60d0a53b269d2"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa76}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffff00}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}]}]}], {0x14}}, 0x3eec}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req3={0xda4, 0xffffff7f, 0x1, 0x7, 0x401, 0x2, 0x750}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) dup3(r1, r0, 0x0) 1.946752492s ago: executing program 2 (id=1631): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x1c8000, &(0x7f0000001f00)=ANY=[], 0x0, 0x2be, &(0x7f00000006c0)="$eJzs3b1rJGUYAPBnkr3ZjR/sFlZy4IAWVsflWpsNkoPDrZQt1EKDlwPJLkIOAn7gepWtjaV/gSDY+U/Y+B8ItoKdVxyMzNfth5PdW7mNevx+RfLwvs8z7zPvDgkp5s2H16dnd7O49+CLX6PXS2JvGAfxMIlB7EXjq1gy/CYAgP+zh3kef+SVbeqSiOjtri0AYIe2/v3/485bAgB27J1333vraDQ6fjvLenF7+vXFuPjLvvhezR/di49jEqdxM/rxKCJ/rIpv53k+62SFQbw2nV2Mi8rpBz/X1z/6PaKsP4x+DMqh5fo7o+PDrLJQPyv6eK5ef1jU34p+vNSy/p3R8a2W+hin8fqrC/3fiH788lF8EpO4WzYxr//yMMvezL/98/P3i/aK+mR2Me6WeXP5/hV/NAAAAAAAAAAAAAAAAAAAAAAAPMNu1GfndKM8vyciXqhn9h8VX69F1hgsn89TZSVJpwpWzgea5fFdc77OzSzL8qRKm9d34uVOdP6VmwYAAAAAAAAAAAAAAAAAAID/mPuffnZ2Mpmcnj+VoH7J//Fr/Sedf3ad4cLIK7E+udusNZns1WFL8kEdxH6Tk0SsbaO4iae0LZuCg/aeT8+//2F5JI3YsBu9DWu9uJPPfTVonq6zk6R9D7vRjPSiDn5azEnjCddKV0eKLSqC62UDzcOx6Tpp61R/63tPny+D2ZqcSCIuv84bv1UN1yNJrCSn5a62ll+rg7jsIeld9jw3u7Q09fefFYnTOgAAAAAAAAAAAAAAAAAAYKfmrwG3TD5YW7qXd3fWFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcqfn//98imNXFT5Ccxvn99pU7V3mbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOP+CgAA//9rrVCD") r0 = socket(0x2, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000480)={r3, 0xffffffff, 0x80000007, 0xfffffff7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x44005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004a26471da63d56caa30e2a5423e52c9d99876c5252ef95de853891779439d1eba6b6dd842f0a238aa8454018abb8e16e9d1f750295b923caa174253b077000924172971d9620059ec373edd1da59143d4bc84689b5239f2f1ab5471fdc3ff39d497d8c366d98d8110dac8a44d67f3ca07dbf48ee37c419da599944147b1f6b7a87b73e2aeb9033db6d88313198c20a785005d10c468a"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2004}, 0x18) waitid(0x2, 0x0, 0x0, 0x2, 0x0) 1.878607853s ago: executing program 4 (id=1633): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_config_ext={0x80000000002, 0x7}, 0x200, 0x9, 0xb, 0x4, 0x6, 0xb, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x274}}) 1.726479036s ago: executing program 4 (id=1636): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000004c0)={0x9, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000580)='.log\x00', 0x600080, 0xa0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x4040014) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000200)=""/153, 0x99, 0x0, &(0x7f00000002c0)=""/95, 0x5f}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f9ffffff000000000778a4970d5c5dc2140000008520000002000000184b00000200000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x30, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0xce9, 0x8}, 0x10, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES64=r3, @ANYRES32=r4], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) pipe2(&(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) unshare(0x2c060000) setreuid(0x0, r4) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) 1.365074773s ago: executing program 6 (id=1640): r0 = socket$inet6(0xa, 0x3, 0x3d) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a01"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x19}}, './file0\x00'}) 1.324223814s ago: executing program 5 (id=1642): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x13}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.262983425s ago: executing program 5 (id=1644): r0 = memfd_create(&(0x7f0000000500)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\8\xe8xE\xdb\xfb1\xfd\x91\xd5\xcd\xc7\x80\t\xe0c+\vl\xc1\x9f\xf9\xb9jF\xdf\xc5\x9aH\xa6@A\x0fC\x9c\x0eqX\xc4\x9b:\xae.\xf2\xda\v6y\xd4+]\xf8\xf5\xef2D{\xb0\xa2\xbd\xe8u\xfb\xab\xb0\xe9m`\x83\xae,\xdb\x95\xc9!p\xc8[0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 1.246434275s ago: executing program 6 (id=1645): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x478, 0xf, 0x2, 0x801, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x8}, [@generic="ade23974124ac52fe231f7da1e623dea699e0db3bc6de6bc49178d110604e6914ef0d271ff073608dd235f576888656178f7a8a0ad0f4d92c140a7bd18f2d1f899cd0cd4358b5bc16e885f918ef3dd8a80e8270929741a8c4242a7295c2758898079f2292b431fb04cb174c2f751fa3ec2f2384a79b9d55098a490c6cbc166f272442233bda43900a08b248c63593af62f8a3c03b21009f9c00063356432f626fc21007908ffdec210fed07643f7218d4b1246800e6e3bc66ecec8ffe8c376d4f5a87a99bb7151", @nested={0x6b, 0x6, 0x0, 0x1, [@generic="2b893063efc25bbda84eb7c37104bf4d5093667e66b19f12694efba6f66f51442475a4acd07e98ec44ffeda0e3d3551e9c242e708b99a5465fb2631954b1a775d7731def35f1a9ed75a7797953a8a9dfdae1a7bf6f8f37fbc117f3", @nested={0x4, 0x64}, @typed={0x8, 0x65, 0x0, 0x0, @u32=0xe0}]}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0x8}, @nested={0xb1, 0x92, 0x0, 0x1, [@generic="40f3d6095a0d48cb3b0b127ea3bd657b693311f86516654d87afe227cedca291e0259dceb361630873fff6da843263975001ee8d3f4e60f33895e608ab469369cebb974d68ee8f17bb8aff919b42af2c32859d3298ac5b0a2f5c24ec4dc39f35264c21", @generic="3e3715550d042adb74f5972210cecbfa54571339da426567d680826fe7eda8b40da075fa26f75ebf1f137fe1f719283ef4dd12eb1e644c70bb7ce58d8090", @typed={0x8, 0xdd, 0x0, 0x0, @str='GPL\x00'}, @nested={0x4, 0x5d}]}, @nested={0xc, 0x148, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @str='GPL\x00'}]}, @nested={0x268, 0xaa, 0x0, 0x1, [@generic="f983bab89e7dec5409c0618ade1d23f6b21c64122e21dc75da52be615d3da7e5e709f82e4abd0390b635b2f2dd3f62eb6b2b92749ae404355d230ae02146f7d8a6f545c7d5f9c7766f9db55b282974d0eb68048deab80eb24bbf5a2a62a8cb91a29b62f10e6135c70c5cf7e7db6c183b418b7d82518cda05a1647dfe5708", @nested={0x4, 0x65}, @generic="8a88dfc95ca2b9673e200afe329ad421d8c5ba55ba489e0c398c63f880fb78e6cc6ac40c71ec3e1d18eb0a315a00ef6654eeacc2a512d4e2da206663f67e49f1e1359ea0cd247344e006fa65f8b9cf1fce90cea6b2b765c867eeb32bf6d97ca1254b10ccdcdd5ca50dd924b3c7a3b51ca27a0c9ff1bd1b5057ca13b967d5866c534f829d95a7e9282a16919b6973c5a432cecb6c8a9081026312856250fa37dab0e651c5c2ea9fedba4c3a8c774da67e500283eec6def56489b1ceb3704aeeaa51ba8bafe8e9", @generic="204d63e8310d4f3caa9a5adf34e87ff6f453bdf0afb115fe774777cae239635027980800320041e9b4e4764d9efc250ef2556ed47676646d6e37ccae7d1df6c3f5d01609f428bd27ee9152c9527d3d99a1b85bff2027136f38b9f2eba1514a53ccf631b41749e0d55b818097717eda60c7183db6f8338812aff9dc1e", @typed={0x4, 0x76}, @typed={0x8, 0x10e, 0x0, 0x0, @pid=r4}, @typed={0x8a, 0x6a, 0x0, 0x0, @binary="c703d4ba652ceda494bebcde5a96571f8b0f2267c01346f846e8650b481d0269865673967274c82df491fb85607d55f9a1ef08ac5ad16010282dae7f2b30729bbbe991c8725baa8f46eef9b039accfcb646a6641df55d5a44c3dbb69d7cfb40e6aa08788d7d02a0ec573102a73325db7bef262095c6bcfa57b520defbde45e506ff82df666e0"}, @nested={0x4, 0xb7}, @typed={0x4, 0x70}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x20028020}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x32) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) 1.199344687s ago: executing program 3 (id=1646): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_config_ext={0x80000000002, 0x7}, 0x200, 0x9, 0xb, 0x4, 0x6, 0xb, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x274}}) 1.162738897s ago: executing program 3 (id=1647): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="000000000001000066080000000000001800"/28], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 1.130954858s ago: executing program 2 (id=1648): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 1.107997928s ago: executing program 3 (id=1649): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 1.063277979s ago: executing program 6 (id=1650): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x80462, 0x2, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x85}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) 1.063020979s ago: executing program 2 (id=1651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="31d26a96a5e1e03b42603ec13254314a66347455cc4663bc8a72de7160972da4f80cc2a01fb0576a103c8544df", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000700)={0x39d, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x10dc0, 0x50) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) pwritev2(r6, 0x0, 0x0, 0x4, 0x44, 0x12) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) 1.045766539s ago: executing program 3 (id=1652): getdents(0xffffffffffffffff, &(0x7f0000000180)=""/36, 0x24) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000000}, 0x18) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0xffffffff, 0x30}, {0xe, 0x8}]}, 0x14, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x4) 857.019613ms ago: executing program 2 (id=1653): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r0, 0x20, &(0x7f0000000980)={&(0x7f00000008c0)=""/145, 0x91, 0x0, &(0x7f0000000a00)=""/135, 0x87}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = signalfd4(r3, &(0x7f0000000b00)={[0x4]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x20, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd6b5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x74}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0x7fffffff, 0x8b, &(0x7f00000006c0)=""/139, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x1, 0xd3eb, 0x7}, 0x10, r4, r3, 0x2, &(0x7f0000000b40)=[r0, r3, r5, r6, r3, r0], &(0x7f0000000b80)=[{0x2, 0x4, 0xa, 0x1}, {0x1, 0x3, 0x10, 0x5}], 0x10, 0x2}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r7 = socket$unix(0x1, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fspick(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r10 = syz_open_dev$evdev(&(0x7f00000010c0), 0x9e5, 0x8501) ioctl$EVIOCGSW(r10, 0x8040451b, &(0x7f0000000000)=""/109) creat(&(0x7f00000003c0)='./file0\x00', 0x36) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='rss_stat\x00', r11, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) 745.915135ms ago: executing program 4 (id=1654): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 710.613156ms ago: executing program 6 (id=1655): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) sigaltstack(0x0, 0x0) 710.192446ms ago: executing program 4 (id=1656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x2000007d, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYBLOB="0000000000000008b708007e996e00237affdfd7e7005dadf800000000007b8af8ff00000000bda200000000000007020000f8ffffffb70059000000950000cffbf75c99815e4d38"], 0x0, 0x5c, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="0100"], 0x28}}, 0x8000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00}) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f0000000000), 0x0) close_range(r7, 0xffffffffffffffff, 0x1000000000000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) 627.309207ms ago: executing program 6 (id=1657): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_config_ext={0x80000000002, 0x7}, 0x200, 0x9, 0xb, 0x4, 0x6, 0xb, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x274}}) 541.583849ms ago: executing program 4 (id=1658): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x1c8000, &(0x7f0000001f00)=ANY=[], 0x0, 0x2be, &(0x7f00000006c0)="$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") r0 = socket(0x2, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000480)={r3, 0xffffffff, 0x80000007, 0xfffffff7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x44005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004a26471da63d56caa30e2a5423e52c9d99876c5252ef95de853891779439d1eba6b6dd842f0a238aa8454018abb8e16e9d1f750295b923caa174253b077000924172971d9620059ec373edd1da59143d4bc84689b5239f2f1ab5471fdc3ff39d497d8c366d98d8110dac8a44d67f3ca07dbf48ee37c419da599944147b1f6b7a87b73e2aeb9033db6d88313198c20a785005d10c468a"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2004}, 0x18) waitid(0x2, 0x0, 0x0, 0x2, 0x0) 505.82073ms ago: executing program 6 (id=1659): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYBLOB="000000000001000066080000000000001800"/28], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 370.893333ms ago: executing program 2 (id=1660): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 252.488855ms ago: executing program 5 (id=1661): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x80462, 0x2, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x85}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) 195.061886ms ago: executing program 3 (id=1662): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 120.263588ms ago: executing program 5 (id=1663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="31d26a96a5e1e03b42603ec13254314a66347455cc4663bc8a72de7160972da4f80cc2a01fb0576a103c8544df", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000700)={0x39d, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x10dc0, 0x50) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) pwritev2(r6, 0x0, 0x0, 0x4, 0x44, 0x12) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) 55.393069ms ago: executing program 3 (id=1664): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000004c0)={0x9, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000580)='.log\x00', 0x600080, 0xa0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x4040014) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000200)=""/153, 0x99, 0x0, &(0x7f00000002c0)=""/95, 0x5f}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f9ffffff000000000778a4970d5c5dc2140000008520000002000000184b00000200000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x30, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0xce9, 0x8}, 0x10, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES64=r3, @ANYRES32=r4], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) pipe2(&(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) unshare(0x2c060000) setreuid(0x0, r4) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) 0s ago: executing program 2 (id=1665): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x6000001c}) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xe4fe0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{0x7, 0x8}, 0x0, 0x8, 0x6, {0x2, 0x96}, 0x1, 0xb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10, 0x0, 0xb, 0x0, 0x0, 0x11}, 0x0) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, 0x0, &(0x7f0000000300)) kernel console output (not intermixed with test programs): mm: syz.4.1046 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.140704][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.140721][ T9091] Call Trace: [ 121.140729][ T9091] [ 121.140785][ T9091] __dump_stack+0x1d/0x30 [ 121.140830][ T9091] dump_stack_lvl+0xe8/0x140 [ 121.140857][ T9091] dump_stack+0x15/0x1b [ 121.140878][ T9091] should_fail_ex+0x265/0x280 [ 121.140909][ T9091] should_failslab+0x8c/0xb0 [ 121.140967][ T9091] kmem_cache_alloc_noprof+0x50/0x310 [ 121.141023][ T9091] ? audit_log_start+0x365/0x6c0 [ 121.141057][ T9091] audit_log_start+0x365/0x6c0 [ 121.141145][ T9091] audit_seccomp+0x48/0x100 [ 121.141172][ T9091] ? __seccomp_filter+0x68c/0x10d0 [ 121.141194][ T9091] __seccomp_filter+0x69d/0x10d0 [ 121.141224][ T9091] ? alloc_file_pseudo+0x129/0x160 [ 121.141294][ T9091] __secure_computing+0x82/0x150 [ 121.141387][ T9091] syscall_trace_enter+0xcf/0x1e0 [ 121.141491][ T9091] do_syscall_64+0xac/0x200 [ 121.141534][ T9091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.141566][ T9091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.141680][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.141708][ T9091] RIP: 0033:0x7f4bf6d2d5bc [ 121.141734][ T9091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.141757][ T9091] RSP: 002b:00007f4bf5797030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.141781][ T9091] RAX: ffffffffffffffda RBX: 00007f4bf6f75fa0 RCX: 00007f4bf6d2d5bc [ 121.141804][ T9091] RDX: 000000000000000f RSI: 00007f4bf57970a0 RDI: 0000000000000004 [ 121.141832][ T9091] RBP: 00007f4bf5797090 R08: 0000000000000000 R09: 0000000000000000 [ 121.141847][ T9091] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 121.141861][ T9091] R13: 00007f4bf6f76038 R14: 00007f4bf6f75fa0 R15: 00007ffe225e5fe8 [ 121.141909][ T9091] [ 121.377021][ T9098] loop2: detected capacity change from 0 to 164 [ 121.395450][ T9103] FAULT_INJECTION: forcing a failure. [ 121.395450][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 121.408269][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.4.1048 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.408306][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.408323][ T9103] Call Trace: [ 121.408331][ T9103] [ 121.408341][ T9103] __dump_stack+0x1d/0x30 [ 121.408368][ T9103] dump_stack_lvl+0xe8/0x140 [ 121.408445][ T9103] dump_stack+0x15/0x1b [ 121.408467][ T9103] should_fail_ex+0x265/0x280 [ 121.408499][ T9103] should_failslab+0x8c/0xb0 [ 121.408532][ T9103] __kmalloc_node_noprof+0xa9/0x410 [ 121.408569][ T9103] ? blk_mq_alloc_tag_set+0x332/0x630 [ 121.408699][ T9103] blk_mq_alloc_tag_set+0x332/0x630 [ 121.408823][ T9103] ? __pfx_loop_control_ioctl+0x10/0x10 [ 121.408847][ T9103] loop_add+0x25f/0x590 [ 121.408879][ T9103] ? __pfx_loop_control_ioctl+0x10/0x10 [ 121.408933][ T9103] loop_control_ioctl+0xd0/0x3f0 [ 121.408957][ T9103] ? __pfx_loop_control_ioctl+0x10/0x10 [ 121.408982][ T9103] __se_sys_ioctl+0xce/0x140 [ 121.409079][ T9103] __x64_sys_ioctl+0x43/0x50 [ 121.409098][ T9103] x64_sys_call+0x1816/0x2ff0 [ 121.409120][ T9103] do_syscall_64+0xd2/0x200 [ 121.409162][ T9103] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.409194][ T9103] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.409400][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.409425][ T9103] RIP: 0033:0x7f4bf6d2eba9 [ 121.409444][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.409482][ T9103] RSP: 002b:00007f4bf5797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.409501][ T9103] RAX: ffffffffffffffda RBX: 00007f4bf6f75fa0 RCX: 00007f4bf6d2eba9 [ 121.409515][ T9103] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000003 [ 121.409553][ T9103] RBP: 00007f4bf5797090 R08: 0000000000000000 R09: 0000000000000000 [ 121.409569][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.409584][ T9103] R13: 00007f4bf6f76038 R14: 00007f4bf6f75fa0 R15: 00007ffe225e5fe8 [ 121.409610][ T9103] [ 121.430986][ T9098] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 121.700789][ T9143] tmpfs: Unexpected value for 'inode32' [ 121.739136][ T9145] sd 0:0:1:0: device reset [ 121.808712][ T9147] loop2: detected capacity change from 0 to 2048 [ 121.827854][ T9147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 121.853181][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 121.881777][ T9157] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 121.900428][ T9159] loop2: detected capacity change from 0 to 256 [ 122.063738][ T9175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=9175 comm=syz.3.1059 [ 122.066809][ T9172] loop4: detected capacity change from 0 to 164 [ 122.085729][ T9172] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 122.108345][ T9175] loop3: detected capacity change from 0 to 512 [ 122.115524][ T9175] ext4: Unknown parameter 'uid<00000000000000000000' [ 122.127127][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.141761][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.159053][ T9181] loop4: detected capacity change from 0 to 512 [ 122.167413][ T9181] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1065: iget: bad extended attribute block 1 [ 122.180442][ T9181] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1065: couldn't read orphan inode 15 (err -117) [ 122.193039][ T9181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.215393][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.233320][ T9184] sd 0:0:1:0: device reset [ 122.285478][ T9188] loop4: detected capacity change from 0 to 2048 [ 122.303873][ T9188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 122.327050][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 122.412467][ T9196] netlink: 'syz.1.1063': attribute type 13 has an invalid length. [ 122.434393][ T9196] 8021q: adding VLAN 0 to HW filter on device $H [ 122.441720][ T9195] Falling back ldisc for ttyS3. [ 122.466126][ T9196] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.488167][ T9196] net_ratelimit: 430 callbacks suppressed [ 122.488181][ T9196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.510864][ T9199] netlink: 'syz.4.1071': attribute type 7 has an invalid length. [ 122.518778][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 122.609161][ T9203] loop0: detected capacity change from 0 to 512 [ 122.637466][ T9203] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm ̻-: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 122.655397][ T9203] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm ̻-: Bad quota inode: 3, type: 0 [ 122.666436][ T9203] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 122.682310][ T9203] EXT4-fs (loop0): mount failed [ 122.720283][ T9210] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 122.812271][ T9208] program syz.3.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.847976][ T9213] syz_tun: entered allmulticast mode [ 122.867228][ T9202] syz_tun: left allmulticast mode [ 122.968241][ T9224] sd 0:0:1:0: device reset [ 122.993292][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1079'. [ 123.015594][ T9226] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 123.070697][ T9230] loop0: detected capacity change from 0 to 1764 [ 123.096835][ T9232] loop2: detected capacity change from 0 to 128 [ 123.098730][ T9226] SELinux: failed to load policy [ 123.140734][ T9232] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 123.148642][ T9232] FAT-fs (loop2): Filesystem has been set read-only [ 123.155612][ T9232] bio_check_eod: 70525 callbacks suppressed [ 123.155630][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.155630][ T9232] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 123.182077][ T9232] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 123.189343][ T9236] FAULT_INJECTION: forcing a failure. [ 123.189343][ T9236] name failslab, interval 1, probability 0, space 0, times 0 [ 123.190080][ T9232] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 123.202624][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.0.1083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.202652][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.202667][ T9236] Call Trace: [ 123.202676][ T9236] [ 123.202687][ T9236] __dump_stack+0x1d/0x30 [ 123.202719][ T9236] dump_stack_lvl+0xe8/0x140 [ 123.202747][ T9236] dump_stack+0x15/0x1b [ 123.202772][ T9236] should_fail_ex+0x265/0x280 [ 123.202807][ T9236] should_failslab+0x8c/0xb0 [ 123.202844][ T9236] kmem_cache_alloc_noprof+0x50/0x310 [ 123.202884][ T9236] ? vm_area_alloc+0x2c/0xb0 [ 123.202930][ T9236] vm_area_alloc+0x2c/0xb0 [ 123.202972][ T9236] mmap_region+0xaa2/0x1630 [ 123.203046][ T9236] do_mmap+0x9b3/0xbe0 [ 123.203099][ T9236] vm_mmap_pgoff+0x17a/0x2e0 [ 123.203146][ T9236] ksys_mmap_pgoff+0xc2/0x310 [ 123.203169][ T9236] ? __x64_sys_mmap+0x49/0x70 [ 123.203203][ T9236] x64_sys_call+0x14a3/0x2ff0 [ 123.203234][ T9236] do_syscall_64+0xd2/0x200 [ 123.203280][ T9236] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.203315][ T9236] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.203367][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.203397][ T9236] RIP: 0033:0x7efc82fdebe3 [ 123.203418][ T9236] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 123.203444][ T9236] RSP: 002b:00007efc81a3ed68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 123.203470][ T9236] RAX: ffffffffffffffda RBX: 000000000000059b RCX: 00007efc82fdebe3 [ 123.203488][ T9236] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 123.203505][ T9236] RBP: 0000200000000002 R08: 00000000ffffffff R09: 0000000000000000 [ 123.203523][ T9236] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 123.203539][ T9236] R13: 00007efc81a3edec R14: 00007efc81a3edf0 R15: 00007ffc856d3428 [ 123.203568][ T9236] [ 123.225647][ T9239] loop0: detected capacity change from 0 to 512 [ 123.231573][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.231573][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.239448][ T9239] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1084: iget: bad extended attribute block 1 [ 123.241639][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.241639][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.246506][ T9239] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1084: couldn't read orphan inode 15 (err -117) [ 123.250377][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.250377][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.256154][ T9239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.260227][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.260227][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.275962][ T9239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1084'. [ 123.309591][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.309591][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.337279][ T9243] loop4: detected capacity change from 0 to 256 [ 123.348910][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.348910][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.376339][ T9239] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 123.381723][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.381723][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.559468][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.559468][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.572876][ T9232] syz.2.1081: attempt to access beyond end of device [ 123.572876][ T9232] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 123.574479][ T3300] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 123.607898][ T9237] buffer_io_error: 53294 callbacks suppressed [ 123.607916][ T9237] Buffer I/O error on dev loop2, logical block 2065, async page read [ 123.617995][ T3300] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 123.623966][ T9237] Buffer I/O error on dev loop2, logical block 2066, async page read [ 123.647478][ T9237] Buffer I/O error on dev loop2, logical block 2067, async page read [ 123.655812][ T9237] Buffer I/O error on dev loop2, logical block 2068, async page read [ 123.664150][ T9237] Buffer I/O error on dev loop2, logical block 2069, async page read [ 123.672619][ T9237] Buffer I/O error on dev loop2, logical block 2070, async page read [ 123.692829][ T9237] Buffer I/O error on dev loop2, logical block 2071, async page read [ 123.717047][ T9237] Buffer I/O error on dev loop2, logical block 2072, async page read [ 123.727688][ T9232] Buffer I/O error on dev loop2, logical block 2065, async page read [ 123.736086][ T9232] Buffer I/O error on dev loop2, logical block 2066, async page read [ 123.758377][ T3988] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.859622][ T9260] loop3: detected capacity change from 0 to 512 [ 123.866382][ T9260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.873073][ T9260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.880266][ T9258] Falling back ldisc for ttyS3. [ 123.885641][ T9260] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 123.908998][ T9260] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 123.921340][ T9260] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 123.936444][ T9260] EXT4-fs (loop3): 1 truncate cleaned up [ 123.954891][ T9260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.998499][ T9260] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 4: comm syz.3.1092: lblock 0 mapped to illegal pblock 4 (length 1) [ 124.041655][ T9270] loop2: detected capacity change from 0 to 512 [ 124.048161][ T9260] EXT4-fs (loop3): Remounting filesystem read-only [ 124.076104][ T9270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.093516][ T9270] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.104935][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.109868][ T9270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 124.179962][ T9295] loop3: detected capacity change from 0 to 128 [ 124.357348][ T9303] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 124.365561][ T9303] FAT-fs (loop3): Filesystem has been set read-only [ 124.547761][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 124.600165][ T9310] kernel profiling enabled (shift: 6) [ 124.675321][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.682505][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.699752][ T9271] bridge_slave_0: entered allmulticast mode [ 124.709404][ T9315] FAULT_INJECTION: forcing a failure. [ 124.709404][ T9315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.722566][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.3.1106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.722597][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.722638][ T9315] Call Trace: [ 124.722645][ T9315] [ 124.722652][ T9315] __dump_stack+0x1d/0x30 [ 124.722674][ T9315] dump_stack_lvl+0xe8/0x140 [ 124.722693][ T9315] dump_stack+0x15/0x1b [ 124.722714][ T9315] should_fail_ex+0x265/0x280 [ 124.722824][ T9315] should_fail+0xb/0x20 [ 124.722852][ T9315] should_fail_usercopy+0x1a/0x20 [ 124.722885][ T9315] _copy_from_user+0x1c/0xb0 [ 124.722930][ T9315] ___sys_sendmsg+0xc1/0x1d0 [ 124.722984][ T9315] __x64_sys_sendmsg+0xd4/0x160 [ 124.723075][ T9315] x64_sys_call+0x191e/0x2ff0 [ 124.723103][ T9315] do_syscall_64+0xd2/0x200 [ 124.723196][ T9315] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.723302][ T9315] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.723333][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.723357][ T9315] RIP: 0033:0x7ff74da7eba9 [ 124.723377][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.723400][ T9315] RSP: 002b:00007ff74c4e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.723504][ T9315] RAX: ffffffffffffffda RBX: 00007ff74dcc5fa0 RCX: 00007ff74da7eba9 [ 124.723520][ T9315] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000000 [ 124.723536][ T9315] RBP: 00007ff74c4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.723564][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.723580][ T9315] R13: 00007ff74dcc6038 R14: 00007ff74dcc5fa0 R15: 00007fff0c83e5b8 [ 124.723601][ T9315] [ 124.724881][ T9271] bridge_slave_0: entered promiscuous mode [ 124.945619][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 124.945635][ T29] audit: type=1326 audit(1757832980.383:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 124.975375][ T29] audit: type=1326 audit(1757832980.383:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 124.998821][ T29] audit: type=1326 audit(1757832980.383:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.022242][ T29] audit: type=1326 audit(1757832980.383:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.045888][ T29] audit: type=1326 audit(1757832980.383:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.069513][ T29] audit: type=1326 audit(1757832980.394:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.093059][ T29] audit: type=1326 audit(1757832980.394:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.116531][ T29] audit: type=1326 audit(1757832980.394:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.139966][ T29] audit: type=1326 audit(1757832980.394:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.163400][ T29] audit: type=1326 audit(1757832980.394:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 125.215288][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.222657][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.230292][ T9271] bridge_slave_1: entered allmulticast mode [ 125.236984][ T9271] bridge_slave_1: entered promiscuous mode [ 125.246501][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.265903][ T9322] FAULT_INJECTION: forcing a failure. [ 125.265903][ T9322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.279088][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.4.1109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.279155][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.279170][ T9322] Call Trace: [ 125.279176][ T9322] [ 125.279185][ T9322] __dump_stack+0x1d/0x30 [ 125.279212][ T9322] dump_stack_lvl+0xe8/0x140 [ 125.279249][ T9322] dump_stack+0x15/0x1b [ 125.279271][ T9322] should_fail_ex+0x265/0x280 [ 125.279298][ T9322] should_fail+0xb/0x20 [ 125.279372][ T9322] should_fail_usercopy+0x1a/0x20 [ 125.279454][ T9322] _copy_from_user+0x1c/0xb0 [ 125.279547][ T9322] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 125.279568][ T9322] vlan_ioctl_handler+0x4c/0x4f0 [ 125.279613][ T9322] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 125.279639][ T9322] sock_ioctl+0x4a7/0x610 [ 125.279686][ T9322] ? __pfx_sock_ioctl+0x10/0x10 [ 125.279837][ T9322] __se_sys_ioctl+0xce/0x140 [ 125.279856][ T9322] __x64_sys_ioctl+0x43/0x50 [ 125.279874][ T9322] x64_sys_call+0x1816/0x2ff0 [ 125.279941][ T9322] do_syscall_64+0xd2/0x200 [ 125.280032][ T9322] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.280065][ T9322] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.280158][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.280186][ T9322] RIP: 0033:0x7f4bf6d2eba9 [ 125.280206][ T9322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.280239][ T9322] RSP: 002b:00007f4bf5776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.280258][ T9322] RAX: ffffffffffffffda RBX: 00007f4bf6f76090 RCX: 00007f4bf6d2eba9 [ 125.280271][ T9322] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 000000000000000e [ 125.280283][ T9322] RBP: 00007f4bf5776090 R08: 0000000000000000 R09: 0000000000000000 [ 125.280298][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.280314][ T9322] R13: 00007f4bf6f76128 R14: 00007f4bf6f76090 R15: 00007ffe225e5fe8 [ 125.280341][ T9322] [ 125.491956][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.503398][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.587472][ T9271] team0: Port device team_slave_0 added [ 125.614495][ T9332] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1111'. [ 125.641589][ T9271] team0: Port device team_slave_1 added [ 125.817122][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.824129][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.850162][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.160902][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.167930][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.193956][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.389549][ T9345] loop3: detected capacity change from 0 to 512 [ 126.399755][ T9271] hsr_slave_0: entered promiscuous mode [ 126.429471][ T9345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.442443][ T9271] hsr_slave_1: entered promiscuous mode [ 126.452090][ T9271] debugfs: 'hsr0' already exists in 'hsr' [ 126.457926][ T9271] Cannot create hsr debugfs directory [ 126.474345][ T9345] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.490706][ T9345] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 126.564846][ T1035] kernel write not supported for file /609/oom_adj (pid: 1035 comm: kworker/0:2) [ 126.658784][ T9271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.666752][ T9365] loop2: detected capacity change from 0 to 512 [ 126.670001][ T9360] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 126.702328][ T9271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.714141][ T9370] loop2: detected capacity change from 0 to 128 [ 126.720727][ T9370] vfat: Unknown parameter '' [ 126.732558][ T9271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.749025][ T9271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.780787][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.798325][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.829683][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.842693][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.852618][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.859733][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.890048][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.897167][ T5088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.935064][ T9271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.945531][ T9271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.051607][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.171061][ T9397] loop2: detected capacity change from 0 to 1024 [ 127.190142][ T9397] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 127.200476][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.251627][ T9397] loop2: detected capacity change from 0 to 512 [ 127.268467][ T9397] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1127: iget: bad extended attribute block 1 [ 127.287057][ T9406] loop4: detected capacity change from 0 to 2048 [ 127.291621][ T9397] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1127: couldn't read orphan inode 15 (err -117) [ 127.294344][ T9271] veth0_vlan: entered promiscuous mode [ 127.315121][ T9271] veth1_vlan: entered promiscuous mode [ 127.331025][ T9271] veth0_macvtap: entered promiscuous mode [ 127.339399][ T9271] veth1_macvtap: entered promiscuous mode [ 127.339418][ T9406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.364405][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.374760][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.380959][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.408623][ T5063] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.451804][ T5063] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.470382][ T5072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.480135][ T9406] netem: change failed [ 127.491620][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.500836][ T5063] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.543184][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.578477][ T9425] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1131'. [ 127.602159][ T9424] loop2: detected capacity change from 0 to 8192 [ 127.735658][ T9440] loop5: detected capacity change from 0 to 512 [ 127.753421][ T9440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.766193][ T9440] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.778747][ T9440] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 127.802543][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 127.853215][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1138'. [ 127.974363][ T9468] loop4: detected capacity change from 0 to 256 [ 128.355578][ T9474] loop2: detected capacity change from 0 to 128 [ 128.367292][ T9474] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 128.375348][ T9474] FAT-fs (loop2): Filesystem has been set read-only [ 128.382529][ T9474] bio_check_eod: 14826 callbacks suppressed [ 128.382548][ T9474] syz.2.1145: attempt to access beyond end of device [ 128.382548][ T9474] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 128.402220][ T9474] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 128.410113][ T9474] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 128.418464][ T9474] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 128.426304][ T9474] syz.2.1145: attempt to access beyond end of device [ 128.426304][ T9474] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 128.440106][ T9474] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 128.440449][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.440449][ T9475] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 128.448068][ T9474] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 128.469553][ T9475] buffer_io_error: 14606 callbacks suppressed [ 128.469624][ T9475] Buffer I/O error on dev loop2, logical block 2065, async page read [ 128.484398][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.484398][ T9475] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 128.497823][ T9475] Buffer I/O error on dev loop2, logical block 2066, async page read [ 128.506347][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.506347][ T9475] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 128.519636][ T9475] Buffer I/O error on dev loop2, logical block 2067, async page read [ 128.528531][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.528531][ T9475] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 128.541878][ T9475] Buffer I/O error on dev loop2, logical block 2068, async page read [ 128.550356][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.550356][ T9475] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 128.563781][ T9475] Buffer I/O error on dev loop2, logical block 2069, async page read [ 128.575683][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.575683][ T9475] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 128.576058][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.589760][ T9475] Buffer I/O error on dev loop2, logical block 2070, async page read [ 128.590845][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.590845][ T9475] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 128.620335][ T9475] Buffer I/O error on dev loop2, logical block 2071, async page read [ 128.628744][ T9475] syz.2.1145: attempt to access beyond end of device [ 128.628744][ T9475] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 128.642391][ T9475] Buffer I/O error on dev loop2, logical block 2072, async page read [ 128.653360][ T9474] Buffer I/O error on dev loop2, logical block 2065, async page read [ 128.653374][ T9477] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1146'. [ 128.671359][ T9474] Buffer I/O error on dev loop2, logical block 2066, async page read [ 128.717868][ T9481] loop5: detected capacity change from 0 to 256 [ 128.812220][ T9489] loop4: detected capacity change from 0 to 764 [ 129.275643][ T9503] Symlink component flag not implemented [ 129.298701][ T9503] Symlink component flag not implemented (129) [ 129.327423][ T9503] rock: directory entry would overflow storage [ 129.333702][ T9503] rock: sig=0x4f50, size=4, remaining=3 [ 129.339280][ T9503] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 129.530973][ T9509] loop2: detected capacity change from 0 to 128 [ 129.541922][ T9509] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 129.549797][ T9509] FAT-fs (loop2): Filesystem has been set read-only [ 129.556608][ T9509] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 129.556632][ T9509] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 129.558853][ T9512] FAULT_INJECTION: forcing a failure. [ 129.558853][ T9512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.558906][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.4.1155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.558931][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.558943][ T9512] Call Trace: [ 129.558950][ T9512] [ 129.558961][ T9512] __dump_stack+0x1d/0x30 [ 129.559009][ T9512] dump_stack_lvl+0xe8/0x140 [ 129.559028][ T9512] dump_stack+0x15/0x1b [ 129.559128][ T9512] should_fail_ex+0x265/0x280 [ 129.559157][ T9512] should_fail_alloc_page+0xf2/0x100 [ 129.559193][ T9512] __alloc_frozen_pages_noprof+0xff/0x360 [ 129.559244][ T9512] alloc_pages_mpol+0xb3/0x250 [ 129.559436][ T9512] folio_alloc_noprof+0x97/0x150 [ 129.559469][ T9512] filemap_alloc_folio_noprof+0x66/0x210 [ 129.559566][ T9512] __filemap_get_folio+0x28f/0x6b0 [ 129.559603][ T9512] ? aio_setup_ring+0x1e8/0x760 [ 129.559640][ T9512] aio_setup_ring+0x26c/0x760 [ 129.559680][ T9512] ioctx_alloc+0x2c4/0x4e0 [ 129.559711][ T9512] __se_sys_io_setup+0x6b/0x1b0 [ 129.559741][ T9512] __x64_sys_io_setup+0x31/0x40 [ 129.559772][ T9512] x64_sys_call+0x2eff/0x2ff0 [ 129.559800][ T9512] do_syscall_64+0xd2/0x200 [ 129.559873][ T9512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.559899][ T9512] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 129.559932][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.560007][ T9512] RIP: 0033:0x7f4bf6d2eba9 [ 129.560025][ T9512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.560045][ T9512] RSP: 002b:00007f4bf5776038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 129.560068][ T9512] RAX: ffffffffffffffda RBX: 00007f4bf6f76090 RCX: 00007f4bf6d2eba9 [ 129.560084][ T9512] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff [ 129.560099][ T9512] RBP: 00007f4bf5776090 R08: 0000000000000000 R09: 0000000000000000 [ 129.560114][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.560200][ T9512] R13: 00007f4bf6f76128 R14: 00007f4bf6f76090 R15: 00007ffe225e5fe8 [ 129.560226][ T9512] [ 129.805588][ T9515] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1158'. [ 130.054902][ T9523] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1161'. [ 130.101647][ T9529] netlink: 'syz.1.1163': attribute type 10 has an invalid length. [ 130.111876][ T9529] team0: Port device dummy0 added [ 130.127051][ T9531] loop5: detected capacity change from 0 to 1024 [ 130.142652][ T9531] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 130.151481][ T9529] netlink: 'syz.1.1163': attribute type 10 has an invalid length. [ 130.159826][ T9529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 130.174833][ T9533] loop4: detected capacity change from 0 to 1024 [ 130.183644][ T9531] loop5: detected capacity change from 0 to 512 [ 130.184349][ T9533] journal_path: Non-blockdev passed as './file0' [ 130.196338][ T9533] EXT4-fs: error: could not find journal device path [ 130.204491][ T9529] team0: Failed to send options change via netlink (err -105) [ 130.212342][ T9529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 130.222026][ T9529] team0: Port device dummy0 removed [ 130.227463][ T9531] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1164: iget: bad extended attribute block 1 [ 130.232001][ T9529] dummy0: entered promiscuous mode [ 130.254559][ T9531] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1164: couldn't read orphan inode 15 (err -117) [ 130.264247][ T9529] $H: (slave dummy0): Enslaving as an active interface with an up link [ 130.275566][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 130.275633][ T29] audit: type=1326 audit(1757832985.968:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.278576][ T9531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.281824][ T29] audit: type=1326 audit(1757832985.968:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.340791][ T29] audit: type=1326 audit(1757832985.989:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.364115][ T29] audit: type=1326 audit(1757832985.989:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.387656][ T29] audit: type=1326 audit(1757832985.989:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.411093][ T29] audit: type=1326 audit(1757832985.989:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.434802][ T29] audit: type=1326 audit(1757832985.989:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.458331][ T29] audit: type=1326 audit(1757832985.989:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.481857][ T29] audit: type=1326 audit(1757832985.989:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.505580][ T29] audit: type=1326 audit(1757832985.989:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9536 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf6d2eba9 code=0x7ffc0000 [ 130.552829][ T9539] loop4: detected capacity change from 0 to 8192 [ 130.563465][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.572587][ T9543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1169'. [ 130.582402][ T9541] loop2: detected capacity change from 0 to 2048 [ 130.590221][ T9539] loop4: p1 p2 < > p3 p4 < p5 > [ 130.591767][ T9543] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 130.595184][ T9539] loop4: partition table partially beyond EOD, truncated [ 130.609681][ T9541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.612014][ T9539] loop4: p1 size 100663296 extends beyond EOD, truncated [ 130.631037][ T9543] SELinux: failed to load policy [ 130.659106][ T9539] loop4: p2 start 591104 is beyond EOD, truncated [ 130.665680][ T9539] loop4: p3 start 33572980 is beyond EOD, truncated [ 130.673239][ T9539] loop4: p5 size 100663296 extends beyond EOD, truncated [ 130.689635][ T9551] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1171'. [ 130.702304][ T9541] netem: change failed [ 130.772585][ T9562] FAULT_INJECTION: forcing a failure. [ 130.772585][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 130.773018][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.785392][ T9562] CPU: 1 UID: 0 PID: 9562 Comm: syz.4.1176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.785468][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.785488][ T9562] Call Trace: [ 130.785498][ T9562] [ 130.785509][ T9562] __dump_stack+0x1d/0x30 [ 130.785574][ T9562] dump_stack_lvl+0xe8/0x140 [ 130.785603][ T9562] dump_stack+0x15/0x1b [ 130.785627][ T9562] should_fail_ex+0x265/0x280 [ 130.785670][ T9562] should_failslab+0x8c/0xb0 [ 130.785714][ T9562] kmem_cache_alloc_noprof+0x50/0x310 [ 130.785755][ T9562] ? skb_clone+0x151/0x1f0 [ 130.785796][ T9562] skb_clone+0x151/0x1f0 [ 130.785873][ T9562] __netlink_deliver_tap+0x2c9/0x500 [ 130.785916][ T9562] netlink_unicast+0x66b/0x690 [ 130.785951][ T9562] netlink_sendmsg+0x58b/0x6b0 [ 130.786068][ T9562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.786152][ T9562] __sock_sendmsg+0x145/0x180 [ 130.786199][ T9562] ____sys_sendmsg+0x31e/0x4e0 [ 130.786285][ T9562] ___sys_sendmsg+0x17b/0x1d0 [ 130.786366][ T9562] __x64_sys_sendmsg+0xd4/0x160 [ 130.786411][ T9562] x64_sys_call+0x191e/0x2ff0 [ 130.786452][ T9562] do_syscall_64+0xd2/0x200 [ 130.786499][ T9562] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.786565][ T9562] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.786609][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.786639][ T9562] RIP: 0033:0x7f4bf6d2eba9 [ 130.786662][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.786760][ T9562] RSP: 002b:00007f4bf5797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.786787][ T9562] RAX: ffffffffffffffda RBX: 00007f4bf6f75fa0 RCX: 00007f4bf6d2eba9 [ 130.786805][ T9562] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 130.786822][ T9562] RBP: 00007f4bf5797090 R08: 0000000000000000 R09: 0000000000000000 [ 130.786840][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.786858][ T9562] R13: 00007f4bf6f76038 R14: 00007f4bf6f75fa0 R15: 00007ffe225e5fe8 [ 130.786888][ T9562] [ 130.786927][ T9562] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 130.833408][ T9566] loop5: detected capacity change from 0 to 128 [ 131.053379][ T9566] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 131.061310][ T9566] FAT-fs (loop5): Filesystem has been set read-only [ 131.080152][ T9566] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 131.088137][ T9566] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 131.213880][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 131.233917][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 131.311765][ T9598] loop4: detected capacity change from 0 to 2048 [ 131.324890][ T9605] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.346972][ T9605] SELinux: failed to load policy [ 131.347359][ T9598] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.409795][ T3307] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 131.704069][ T9663] loop3: detected capacity change from 0 to 2048 [ 131.734979][ T9663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 131.799770][ T9670] Falling back ldisc for ttyS3. [ 131.815207][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 131.865572][ T9677] loop5: detected capacity change from 0 to 1764 [ 131.884094][ T9677] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 131.893539][ T9677] isofs_fill_super: root inode is not a directory. Corrupted media? [ 132.013303][ T9677] rdma_op ffff88813383e180 conn xmit_rdma 0000000000000000 [ 132.088288][ T9697] loop3: detected capacity change from 0 to 128 [ 132.101295][ T9697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 132.109667][ T9697] FAT-fs (loop3): Filesystem has been set read-only [ 132.126375][ T9697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 132.134444][ T9697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 132.153099][ T9700] loop4: detected capacity change from 0 to 2048 [ 132.203358][ T9700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 132.218295][ T9706] Falling back ldisc for ttyS3. [ 132.268029][ T9710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9710 comm=syz.1.1207 [ 132.286175][ T9712] loop5: detected capacity change from 0 to 2048 [ 132.300512][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 132.319236][ T9712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.345868][ T9717] loop2: detected capacity change from 0 to 512 [ 132.383265][ T9712] netem: change failed [ 132.492338][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.523124][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.617590][ T9717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.643359][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.719518][ T9729] __nla_validate_parse: 4 callbacks suppressed [ 132.719533][ T9729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1211'. [ 132.753585][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.890154][ T9748] serio: Serial port ptm0 [ 132.922492][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1218'. [ 132.942749][ T9750] Falling back ldisc for ttyS3. [ 132.981978][ T9756] loop5: detected capacity change from 0 to 2048 [ 132.992657][ T9756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 133.016980][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 133.436652][ T9787] loop3: detected capacity change from 0 to 128 [ 133.459886][ T9787] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 133.467802][ T9787] FAT-fs (loop3): Filesystem has been set read-only [ 133.476453][ T9787] bio_check_eod: 137229 callbacks suppressed [ 133.476471][ T9787] syz.3.1227: attempt to access beyond end of device [ 133.476471][ T9787] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 133.496361][ T9787] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 133.504276][ T9787] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 133.512576][ T9787] syz.3.1227: attempt to access beyond end of device [ 133.512576][ T9787] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.526161][ T9789] Falling back ldisc for ttyS3. [ 133.527154][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.527154][ T9791] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 133.544494][ T9791] buffer_io_error: 133718 callbacks suppressed [ 133.544510][ T9791] Buffer I/O error on dev loop3, logical block 2065, async page read [ 133.559380][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.559380][ T9791] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 133.572713][ T9791] Buffer I/O error on dev loop3, logical block 2066, async page read [ 133.599794][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.599794][ T9791] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 133.613112][ T9791] Buffer I/O error on dev loop3, logical block 2067, async page read [ 133.622560][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.622560][ T9791] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 133.635931][ T9791] Buffer I/O error on dev loop3, logical block 2068, async page read [ 133.657591][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.657591][ T9791] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 133.670927][ T9791] Buffer I/O error on dev loop3, logical block 2069, async page read [ 133.689639][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.689639][ T9791] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 133.702982][ T9791] Buffer I/O error on dev loop3, logical block 2070, async page read [ 133.747039][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.747039][ T9791] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 133.760461][ T9791] Buffer I/O error on dev loop3, logical block 2071, async page read [ 133.838038][ T9791] syz.3.1227: attempt to access beyond end of device [ 133.838038][ T9791] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 133.851324][ T9791] Buffer I/O error on dev loop3, logical block 2072, async page read [ 133.859775][ T9787] Buffer I/O error on dev loop3, logical block 2065, async page read [ 133.904231][ T9787] Buffer I/O error on dev loop3, logical block 2066, async page read [ 134.216011][ T9820] loop2: detected capacity change from 0 to 512 [ 134.419265][ T9823] loop4: detected capacity change from 0 to 128 [ 134.763826][ T9826] FAULT_INJECTION: forcing a failure. [ 134.763826][ T9826] name failslab, interval 1, probability 0, space 0, times 0 [ 134.776676][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.776788][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.776805][ T9826] Call Trace: [ 134.776814][ T9826] [ 134.776823][ T9826] __dump_stack+0x1d/0x30 [ 134.776845][ T9826] dump_stack_lvl+0xe8/0x140 [ 134.776898][ T9826] dump_stack+0x15/0x1b [ 134.776915][ T9826] should_fail_ex+0x265/0x280 [ 134.776986][ T9826] should_failslab+0x8c/0xb0 [ 134.777090][ T9826] kmem_cache_alloc_noprof+0x50/0x310 [ 134.777129][ T9826] ? __anon_vma_prepare+0xcd/0x2f0 [ 134.777221][ T9826] __anon_vma_prepare+0xcd/0x2f0 [ 134.777250][ T9826] handle_mm_fault+0x1d58/0x2c20 [ 134.777282][ T9826] ? __rcu_read_unlock+0x4f/0x70 [ 134.777317][ T9826] do_user_addr_fault+0x3fe/0x1090 [ 134.777487][ T9826] exc_page_fault+0x62/0xa0 [ 134.777520][ T9826] asm_exc_page_fault+0x26/0x30 [ 134.777546][ T9826] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 134.777607][ T9826] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 134.777632][ T9826] RSP: 0018:ffffc900018bfdc0 EFLAGS: 00050216 [ 134.777652][ T9826] RAX: 0000000000000001 RBX: 0000000000000030 RCX: 0000000000000030 [ 134.777679][ T9826] RDX: 0000000000000000 RSI: ffffc900018bfdf8 RDI: 0000200000001300 [ 134.777693][ T9826] RBP: 0000000000000000 R08: 000000000000055b R09: 0000000000000000 [ 134.777704][ T9826] R10: 0001c900018bfdf8 R11: 0001c900018bfe27 R12: 0000200000001330 [ 134.777717][ T9826] R13: 00007ffffffff000 R14: 0000200000001300 R15: ffffc900018bfdf8 [ 134.777740][ T9826] _copy_to_user+0x7c/0xa0 [ 134.777792][ T9826] __se_sys_shmctl+0x3d1/0x420 [ 134.777839][ T9826] __x64_sys_shmctl+0x43/0x50 [ 134.777873][ T9826] x64_sys_call+0x18c9/0x2ff0 [ 134.777955][ T9826] do_syscall_64+0xd2/0x200 [ 134.777996][ T9826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.778026][ T9826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.778180][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.778208][ T9826] RIP: 0033:0x7f841abbeba9 [ 134.778228][ T9826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.778251][ T9826] RSP: 002b:00007f8419627038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 134.778272][ T9826] RAX: ffffffffffffffda RBX: 00007f841ae05fa0 RCX: 00007f841abbeba9 [ 134.778284][ T9826] RDX: 0000200000001300 RSI: 000000000000000e RDI: 0000000000000000 [ 134.778314][ T9826] RBP: 00007f8419627090 R08: 0000000000000000 R09: 0000000000000000 [ 134.778371][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.778387][ T9826] R13: 00007f841ae06038 R14: 00007f841ae05fa0 R15: 00007ffe3cb41148 [ 134.778413][ T9826] [ 135.109429][ T9831] loop2: detected capacity change from 0 to 512 [ 135.122000][ T9828] loop5: detected capacity change from 0 to 512 [ 135.128733][ T9828] EXT4-fs: Ignoring removed bh option [ 135.134238][ T9828] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.179494][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 135.179527][ T29] audit: type=1326 audit(1757832991.133:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.209904][ T9828] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 135.222512][ T29] audit: type=1326 audit(1757832991.154:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.246095][ T29] audit: type=1326 audit(1757832991.154:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.269536][ T29] audit: type=1326 audit(1757832991.154:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.293070][ T29] audit: type=1326 audit(1757832991.154:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.316537][ T29] audit: type=1326 audit(1757832991.154:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.340242][ T29] audit: type=1326 audit(1757832991.154:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.342880][ T9828] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 135.363810][ T29] audit: type=1326 audit(1757832991.154:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.372348][ T9828] EXT4-fs (loop5): orphan cleanup on readonly fs [ 135.395637][ T29] audit: type=1326 audit(1757832991.154:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4a4ad2eba9 code=0x7ffc0000 [ 135.402838][ T9828] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 135.435349][ T9828] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1241: Failed to acquire dquot type 1 [ 135.448229][ T9828] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1241: Invalid block bitmap block 0 in block_group 0 [ 135.457776][ T9831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.474149][ T9828] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1241: Invalid block bitmap block 0 in block_group 0 [ 135.488622][ T9846] loop4: detected capacity change from 0 to 4096 [ 135.495035][ T9828] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1241: Invalid block bitmap block 0 in block_group 0 [ 135.508755][ T9846] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.520078][ T9831] FAULT_INJECTION: forcing a failure. [ 135.520078][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 135.520746][ T9846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.532914][ T9831] CPU: 0 UID: 0 PID: 9831 Comm: syz.2.1242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.532965][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.532984][ T9831] Call Trace: [ 135.533076][ T9831] [ 135.533086][ T9831] __dump_stack+0x1d/0x30 [ 135.533119][ T9831] dump_stack_lvl+0xe8/0x140 [ 135.533226][ T9831] dump_stack+0x15/0x1b [ 135.533250][ T9831] should_fail_ex+0x265/0x280 [ 135.533286][ T9831] should_failslab+0x8c/0xb0 [ 135.533323][ T9831] __kmalloc_noprof+0xa5/0x3e0 [ 135.533363][ T9831] ? __d_alloc+0x90/0x340 [ 135.533549][ T9831] __d_alloc+0x90/0x340 [ 135.533593][ T9831] d_alloc_parallel+0x53/0xc60 [ 135.533640][ T9831] ? __rcu_read_unlock+0x4f/0x70 [ 135.533732][ T9831] ? __d_lookup+0x316/0x340 [ 135.533776][ T9831] ? try_to_unlazy+0x25e/0x3a0 [ 135.533827][ T9831] path_openat+0x6b5/0x2170 [ 135.533872][ T9831] do_filp_open+0x109/0x230 [ 135.533917][ T9831] do_sys_openat2+0xa6/0x110 [ 135.534020][ T9831] __x64_sys_creat+0x65/0x90 [ 135.534047][ T9831] x64_sys_call+0x2d94/0x2ff0 [ 135.534100][ T9831] do_syscall_64+0xd2/0x200 [ 135.534146][ T9831] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.534181][ T9831] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.534224][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.534274][ T9831] RIP: 0033:0x7f841abbeba9 [ 135.534296][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.534321][ T9831] RSP: 002b:00007f8419627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 135.534348][ T9831] RAX: ffffffffffffffda RBX: 00007f841ae05fa0 RCX: 00007f841abbeba9 [ 135.534368][ T9831] RDX: 0000000000000000 RSI: 00000000000001a2 RDI: 0000200000000100 [ 135.534384][ T9831] RBP: 00007f8419627090 R08: 0000000000000000 R09: 0000000000000000 [ 135.534403][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.534437][ T9831] R13: 00007f841ae06038 R14: 00007f841ae05fa0 R15: 00007ffe3cb41148 [ 135.534468][ T9831] [ 135.555256][ T9828] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1241: Failed to acquire dquot type 1 [ 135.758997][ T9828] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1241: Failed to acquire dquot type 1 [ 135.770692][ T9828] EXT4-fs (loop5): 1 orphan inode deleted [ 135.777859][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.778267][ T9828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.813822][ T9828] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1241: deleted inode referenced: 12 [ 135.817848][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 135.850286][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.870207][ T9860] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1252'. [ 135.957721][ T9869] loop3: detected capacity change from 0 to 128 [ 135.969031][ T9869] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 135.977232][ T9869] FAT-fs (loop3): Filesystem has been set read-only [ 135.985105][ T9869] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 135.993142][ T9869] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 136.006882][ T9873] loop5: detected capacity change from 0 to 2048 [ 136.017943][ T9871] loop2: detected capacity change from 0 to 2048 [ 136.027605][ T9873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.049618][ T9871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 136.077802][ T9873] netem: change failed [ 136.099084][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 136.160899][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 136.191546][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.211777][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.427459][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 136.436445][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 136.450261][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 136.459393][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 136.543363][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 136.563311][ T9910] netlink: 'syz.4.1270': attribute type 27 has an invalid length. [ 136.674412][ T9915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9915 comm=syz.4.1270 [ 136.806773][ T9915] syz_tun: entered allmulticast mode [ 136.812518][ T5084] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.822908][ T5084] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.831798][ T5084] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.864141][ T5084] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.889040][ T9909] syz_tun: left allmulticast mode [ 137.046526][ T9931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9931 comm=syz.5.1275 [ 137.089702][ T9931] loop5: detected capacity change from 0 to 128 [ 137.186159][ T9954] loop3: detected capacity change from 0 to 128 [ 137.209863][ T9954] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 137.217883][ T9954] FAT-fs (loop3): Filesystem has been set read-only [ 137.242427][ T9954] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 137.250456][ T9954] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 137.262513][ T9958] loop2: detected capacity change from 0 to 256 [ 137.289917][ T9961] sd 0:0:1:0: device reset [ 137.567584][ T9987] loop4: detected capacity change from 0 to 8192 [ 138.021973][ T9994] SELinux: policydb version 1535867334 does not match my version range 15-35 [ 138.031581][ T9994] SELinux: failed to load policy [ 138.072259][ T9997] sd 0:0:1:0: device reset [ 138.543454][T10015] Falling back ldisc for ttyS3. [ 138.722954][T10021] netlink: 'syz.3.1309': attribute type 21 has an invalid length. [ 138.731174][T10021] __nla_validate_parse: 2 callbacks suppressed [ 138.731190][T10021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1309'. [ 138.945460][T10024] netem: change failed [ 138.951728][T10029] loop2: detected capacity change from 0 to 512 [ 138.991565][T10026] Falling back ldisc for ttyS3. [ 139.049869][T10029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.118668][T10029] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.195834][T10029] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 139.226198][T10037] loop4: detected capacity change from 0 to 2048 [ 139.269311][T10037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 139.376644][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 139.564851][T10049] sd 0:0:1:0: device reset [ 139.577931][T10053] loop4: detected capacity change from 0 to 128 [ 139.590748][T10053] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 139.598709][T10053] FAT-fs (loop4): Filesystem has been set read-only [ 139.605507][T10053] bio_check_eod: 141385 callbacks suppressed [ 139.605595][T10053] syz.4.1318: attempt to access beyond end of device [ 139.605595][T10053] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 139.625667][T10053] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 139.633710][T10053] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 139.643536][T10053] syz.4.1318: attempt to access beyond end of device [ 139.643536][T10053] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 139.674011][T10058] syz.4.1318: attempt to access beyond end of device [ 139.674011][T10058] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 139.687493][T10058] buffer_io_error: 140470 callbacks suppressed [ 139.687511][T10058] Buffer I/O error on dev loop4, logical block 2065, async page read [ 139.687880][T10051] loop3: detected capacity change from 0 to 512 [ 139.697379][T10058] syz.4.1318: attempt to access beyond end of device [ 139.697379][T10058] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 139.721348][T10058] Buffer I/O error on dev loop4, logical block 2066, async page read [ 139.722875][T10051] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm wޡ: casefold flag without casefold feature [ 139.752037][T10051] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm wޡ: couldn't read orphan inode 15 (err -117) [ 139.764973][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.774862][T10051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.782495][T10058] syz.4.1318: attempt to access beyond end of device [ 139.782495][T10058] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 139.800667][T10058] Buffer I/O error on dev loop4, logical block 2067, async page read [ 139.826855][T10058] syz.4.1318: attempt to access beyond end of device [ 139.826855][T10058] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 139.840371][T10058] Buffer I/O error on dev loop4, logical block 2068, async page read [ 139.849046][T10058] syz.4.1318: attempt to access beyond end of device [ 139.849046][T10058] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 139.862433][T10058] Buffer I/O error on dev loop4, logical block 2069, async page read [ 139.880672][T10058] syz.4.1318: attempt to access beyond end of device [ 139.880672][T10058] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 139.894176][T10058] Buffer I/O error on dev loop4, logical block 2070, async page read [ 139.902852][T10058] syz.4.1318: attempt to access beyond end of device [ 139.902852][T10058] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 139.916162][T10058] Buffer I/O error on dev loop4, logical block 2071, async page read [ 139.924647][T10058] syz.4.1318: attempt to access beyond end of device [ 139.924647][T10058] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 139.925813][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.937962][T10058] Buffer I/O error on dev loop4, logical block 2072, async page read [ 139.955313][T10058] Buffer I/O error on dev loop4, logical block 2065, async page read [ 140.000812][T10058] Buffer I/O error on dev loop4, logical block 2066, async page read [ 140.074554][T10070] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1325'. [ 140.084260][T10066] Falling back ldisc for ttyS3. [ 140.139460][T10078] loop5: detected capacity change from 0 to 256 [ 140.161845][T10075] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1326'. [ 140.247323][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 140.247341][ T29] audit: type=1326 audit(1757832996.456:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 140.251157][T10085] loop3: detected capacity change from 0 to 128 [ 140.253646][ T29] audit: type=1326 audit(1757832996.456:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 140.306925][ T29] audit: type=1326 audit(1757832996.466:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 140.330532][ T29] audit: type=1326 audit(1757832996.466:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 140.354060][ T29] audit: type=1326 audit(1757832996.466:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 140.377630][ T29] audit: type=1326 audit(1757832996.466:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff74da7ebe3 code=0x7ffc0000 [ 140.401082][ T29] audit: type=1326 audit(1757832996.466:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff74da7d65f code=0x7ffc0000 [ 140.424483][ T29] audit: type=1326 audit(1757832996.466:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff74da7ec37 code=0x7ffc0000 [ 140.448067][ T29] audit: type=1326 audit(1757832996.466:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff74da7d510 code=0x7ffc0000 [ 140.471683][ T29] audit: type=1326 audit(1757832996.466:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff74da7e7ab code=0x7ffc0000 [ 140.573680][T10097] loop3: detected capacity change from 0 to 128 [ 140.598850][T10099] loop4: detected capacity change from 0 to 128 [ 140.606289][T10099] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.618378][T10099] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.631648][T10099] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 140.647898][T10101] loop3: detected capacity change from 0 to 1024 [ 140.658372][T10101] EXT4-fs: Ignoring removed orlov option [ 140.672000][T10101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.805141][T10117] loop4: detected capacity change from 0 to 128 [ 140.813907][T10117] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.826447][T10117] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.863610][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1342'. [ 140.883342][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.904795][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.939000][T10119] loop2: detected capacity change from 0 to 2048 [ 140.948463][T10119] EXT4-fs: Ignoring removed i_version option [ 140.955086][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 140.970611][ T5084] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.978270][ T5084] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.991654][ T3463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.000408][T10119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.015700][T10119] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.053644][T10135] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1347'. [ 141.086537][ T3463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.168396][T10127] loop5: detected capacity change from 0 to 32768 [ 141.182359][T10137] Falling back ldisc for ttyS3. [ 141.326866][T10152] loop5: detected capacity change from 0 to 1024 [ 141.333844][T10152] EXT4-fs: Ignoring removed orlov option [ 141.339610][T10152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.365856][T10152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.403401][T10158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1355'. [ 141.429854][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.461179][T10165] loop5: detected capacity change from 0 to 256 [ 141.583574][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 141.605250][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.625440][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 141.650111][T10183] sd 0:0:1:0: device reset [ 141.715672][T10185] Falling back ldisc for ttyS3. [ 141.734355][ T3463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.797956][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 141.807480][T10193] IPVS: Error joining to the multicast group [ 141.839733][T10195] loop2: detected capacity change from 0 to 512 [ 141.901619][T10201] FAULT_INJECTION: forcing a failure. [ 141.901619][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 141.914592][T10201] CPU: 0 UID: 0 PID: 10201 Comm: syz.2.1369 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.914680][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.914713][T10201] Call Trace: [ 141.914718][T10201] [ 141.914724][T10201] __dump_stack+0x1d/0x30 [ 141.914742][T10201] dump_stack_lvl+0xe8/0x140 [ 141.914759][T10201] dump_stack+0x15/0x1b [ 141.914773][T10201] should_fail_ex+0x265/0x280 [ 141.914803][T10201] should_failslab+0x8c/0xb0 [ 141.914854][T10201] __kvmalloc_node_noprof+0x123/0x4e0 [ 141.914882][T10201] ? io_alloc_cache_init+0x31/0xa0 [ 141.914953][T10201] io_alloc_cache_init+0x31/0xa0 [ 141.915012][T10201] io_ring_ctx_alloc+0x299/0x6a0 [ 141.915045][T10201] io_uring_create+0x10f/0x610 [ 141.915071][T10201] __se_sys_io_uring_setup+0x1f7/0x210 [ 141.915120][T10201] __x64_sys_io_uring_setup+0x31/0x40 [ 141.915143][T10201] x64_sys_call+0x2b21/0x2ff0 [ 141.915276][T10201] do_syscall_64+0xd2/0x200 [ 141.915318][T10201] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.915352][T10201] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.915442][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.915462][T10201] RIP: 0033:0x7f841abbeba9 [ 141.915475][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.915491][T10201] RSP: 002b:00007f8419626fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 141.915508][T10201] RAX: ffffffffffffffda RBX: 00007f841ae05fa0 RCX: 00007f841abbeba9 [ 141.915594][T10201] RDX: 0000200000000580 RSI: 0000200000000140 RDI: 00000000000005c2 [ 141.915605][T10201] RBP: 0000200000000140 R08: 0000000000000000 R09: 0000200000000580 [ 141.915615][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.915626][T10201] R13: 0000200000000300 R14: 00000000000005c2 R15: 0000200000000580 [ 141.915646][T10201] [ 142.274284][T10210] 9pnet_fd: Insufficient options for proto=fd [ 142.403726][T10215] netlink: 'syz.3.1374': attribute type 12 has an invalid length. [ 142.695690][T10224] loop5: detected capacity change from 0 to 128 [ 142.764532][T10224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 142.772527][T10224] FAT-fs (loop5): Filesystem has been set read-only [ 142.783725][T10224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 142.791636][T10224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 142.882129][T10229] loop2: detected capacity change from 0 to 128 [ 142.926830][T10229] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.001995][T10231] loop1: detected capacity change from 0 to 2048 [ 143.013001][T10229] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.050030][T10231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.114797][T10231] netem: change failed [ 143.173916][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.702750][ T5075] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.769414][T10260] loop3: detected capacity change from 0 to 2048 [ 143.794485][T10264] __nla_validate_parse: 3 callbacks suppressed [ 143.794500][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 143.841160][T10264] IPVS: Error joining to the multicast group [ 143.848227][T10260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 143.942813][T10260] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.1390: inline data xattr refers to an external xattr inode [ 144.033197][T10260] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.083337][T10260] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 370 with error 28 [ 144.095783][T10260] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.095783][T10260] [ 144.105467][T10260] EXT4-fs (loop3): Total free blocks count 0 [ 144.111613][T10260] EXT4-fs (loop3): Free/Dirty block details [ 144.117657][T10260] EXT4-fs (loop3): free_blocks=2415919104 [ 144.123585][T10260] EXT4-fs (loop3): dirty_blocks=384 [ 144.128897][T10260] EXT4-fs (loop3): Block reservation details [ 144.135101][T10260] EXT4-fs (loop3): i_reserved_data_blocks=24 [ 144.145804][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'. [ 144.155682][T10279] IPVS: Error joining to the multicast group [ 144.165647][T10283] ./file0: Can't lookup blockdev [ 144.177587][T10283] loop2: detected capacity change from 0 to 1024 [ 144.189744][T10283] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.220058][ T5072] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 144.220737][T10283] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1397: Invalid block bitmap block 0 in block_group 0 [ 144.246370][T10283] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1397: Failed to acquire dquot type 0 [ 144.258269][T10283] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1397: Freeing blocks not in datazone - block = 0, count = 4096 [ 144.277602][T10283] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1397: Invalid inode bitmap blk 0 in block_group 0 [ 144.291598][ T5072] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:49: Failed to release dquot type 0 [ 144.318342][T10283] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 144.338915][T10283] EXT4-fs (loop2): 1 orphan inode deleted [ 144.349744][T10297] loop3: detected capacity change from 0 to 2048 [ 144.359674][T10283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.364141][T10298] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.397562][T10298] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 144.409486][T10297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.423158][T10283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.487506][T10297] netem: change failed [ 144.553863][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.675028][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.698813][T10310] loop2: detected capacity change from 0 to 2048 [ 144.705605][T10313] netlink: 'syz.1.1408': attribute type 26 has an invalid length. [ 144.727872][T10310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 144.777273][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 145.007317][T10334] lo speed is unknown, defaulting to 1000 [ 145.021799][T10334] lo speed is unknown, defaulting to 1000 [ 145.027792][T10334] lo speed is unknown, defaulting to 1000 [ 145.077159][T10338] rdma_rxe: rxe_newlink: failed to add lo [ 145.084893][T10334] infiniband syz2: set down [ 145.089606][T10334] infiniband syz2: added lo [ 145.094350][ T3412] lo speed is unknown, defaulting to 1000 [ 145.114693][T10334] RDS/IB: syz2: added [ 145.118961][T10334] smc: adding ib device syz2 with port count 1 [ 145.125746][T10334] smc: ib device syz2 port 1 has pnetid [ 145.131715][ T23] lo speed is unknown, defaulting to 1000 [ 145.154707][T10334] lo speed is unknown, defaulting to 1000 [ 145.169833][T10347] loop3: detected capacity change from 0 to 512 [ 145.201963][T10347] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 145.208106][T10334] lo speed is unknown, defaulting to 1000 [ 145.252274][T10334] lo speed is unknown, defaulting to 1000 [ 145.288935][T10334] lo speed is unknown, defaulting to 1000 [ 145.307828][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 145.307848][ T29] audit: type=1326 audit(1757833001.778:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 145.334187][T10334] lo speed is unknown, defaulting to 1000 [ 145.348299][ T29] audit: type=1326 audit(1757833001.778:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 145.372139][ T29] audit: type=1326 audit(1757833001.820:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74da7eba9 code=0x7ffc0000 [ 145.449110][T10334] lo speed is unknown, defaulting to 1000 [ 145.469846][ T29] audit: type=1326 audit(1757833001.936:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.493480][ T29] audit: type=1326 audit(1757833001.936:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.517074][ T29] audit: type=1326 audit(1757833001.936:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.540721][ T29] audit: type=1326 audit(1757833001.936:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.564260][ T29] audit: type=1326 audit(1757833001.936:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.587781][ T29] audit: type=1326 audit(1757833001.936:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.611310][ T29] audit: type=1326 audit(1757833001.936:8303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.5.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 145.657042][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 145.673159][T10362] IPVS: Error joining to the multicast group [ 145.765321][T10370] loop3: detected capacity change from 0 to 1024 [ 145.813476][T10370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.832170][T10370] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.931589][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 145.940710][T10393] IPVS: Unknown mcast interface: vcan0 [ 145.978458][ T5072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 393: padding at end of block bitmap is not set [ 146.004782][ T5072] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 146.017615][ T5072] EXT4-fs (loop3): This should not happen!! Data will be lost [ 146.017615][ T5072] [ 146.064612][T10404] loop5: detected capacity change from 0 to 1024 [ 146.067234][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.072054][T10404] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 146.108275][T10404] loop5: detected capacity change from 0 to 512 [ 146.120820][T10413] loop4: detected capacity change from 0 to 1024 [ 146.128749][T10413] EXT4-fs: Ignoring removed orlov option [ 146.154726][T10404] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1443: iget: bad extended attribute block 1 [ 146.168861][T10404] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1443: couldn't read orphan inode 15 (err -117) [ 146.181915][T10404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.218286][T10418] loop1: detected capacity change from 0 to 2048 [ 146.219285][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.235367][T10413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.254341][T10418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.270427][T10423] FAULT_INJECTION: forcing a failure. [ 146.270427][T10423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.283777][T10423] CPU: 0 UID: 0 PID: 10423 Comm: syz.5.1449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.283814][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.283836][T10423] Call Trace: [ 146.283842][T10423] [ 146.283850][T10423] __dump_stack+0x1d/0x30 [ 146.283876][T10423] dump_stack_lvl+0xe8/0x140 [ 146.283899][T10423] dump_stack+0x15/0x1b [ 146.283917][T10423] should_fail_ex+0x265/0x280 [ 146.283992][T10423] should_fail+0xb/0x20 [ 146.284091][T10423] should_fail_usercopy+0x1a/0x20 [ 146.284117][T10423] _copy_to_user+0x20/0xa0 [ 146.284150][T10423] simple_read_from_buffer+0xb5/0x130 [ 146.284226][T10423] proc_fail_nth_read+0x10e/0x150 [ 146.284258][T10423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.284294][T10423] vfs_read+0x1a8/0x770 [ 146.284326][T10423] ? __rcu_read_unlock+0x4f/0x70 [ 146.284352][T10423] ? __fget_files+0x184/0x1c0 [ 146.284391][T10423] ksys_read+0xda/0x1a0 [ 146.284528][T10423] __x64_sys_read+0x40/0x50 [ 146.284626][T10423] x64_sys_call+0x27bc/0x2ff0 [ 146.284662][T10423] do_syscall_64+0xd2/0x200 [ 146.284706][T10423] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.284739][T10423] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.284799][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.284824][T10423] RIP: 0033:0x7f56aee5d5bc [ 146.284841][T10423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.284862][T10423] RSP: 002b:00007f56ad8c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.284911][T10423] RAX: ffffffffffffffda RBX: 00007f56af0a5fa0 RCX: 00007f56aee5d5bc [ 146.284926][T10423] RDX: 000000000000000f RSI: 00007f56ad8c70a0 RDI: 0000000000000006 [ 146.284939][T10423] RBP: 00007f56ad8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.284956][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.284972][T10423] R13: 00007f56af0a6038 R14: 00007f56af0a5fa0 R15: 00007ffc184d1b08 [ 146.284999][T10423] [ 146.507650][T10426] netem: change failed [ 146.666570][T10437] loop1: detected capacity change from 0 to 1024 [ 146.686914][T10437] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.731285][T10443] loop1: detected capacity change from 0 to 256 [ 146.792829][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 146.839216][T10443] IPVS: set_ctl: invalid protocol: 58 172.20.20.24:20004 [ 147.012194][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 147.036546][ T5084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.055749][ T5084] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.076012][T10451] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1458'. [ 147.078873][ T5084] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.107054][ T5084] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.157381][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 147.167877][T10456] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 147.247719][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 147.351529][T10466] FAULT_INJECTION: forcing a failure. [ 147.351529][T10466] name failslab, interval 1, probability 0, space 0, times 0 [ 147.364337][T10466] CPU: 0 UID: 0 PID: 10466 Comm: syz.2.1463 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.364380][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.364392][T10466] Call Trace: [ 147.364399][T10466] [ 147.364406][T10466] __dump_stack+0x1d/0x30 [ 147.364500][T10466] dump_stack_lvl+0xe8/0x140 [ 147.364527][T10466] dump_stack+0x15/0x1b [ 147.364548][T10466] should_fail_ex+0x265/0x280 [ 147.364581][T10466] ? alloc_fs_context+0x44/0x4e0 [ 147.364604][T10466] should_failslab+0x8c/0xb0 [ 147.364647][T10466] __kmalloc_cache_noprof+0x4c/0x320 [ 147.364690][T10466] alloc_fs_context+0x44/0x4e0 [ 147.364721][T10466] fs_context_for_mount+0x22/0x30 [ 147.364748][T10466] do_new_mount+0xe9/0x5e0 [ 147.364779][T10466] ? security_capable+0x83/0x90 [ 147.364874][T10466] path_mount+0x4a4/0xb20 [ 147.364897][T10466] ? user_path_at+0x109/0x130 [ 147.364978][T10466] __se_sys_mount+0x28f/0x2e0 [ 147.365001][T10466] ? fput+0x8f/0xc0 [ 147.365068][T10466] __x64_sys_mount+0x67/0x80 [ 147.365095][T10466] x64_sys_call+0x2b4d/0x2ff0 [ 147.365116][T10466] do_syscall_64+0xd2/0x200 [ 147.365260][T10466] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.365331][T10466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.365379][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.365421][T10466] RIP: 0033:0x7f841abbeba9 [ 147.365440][T10466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.365502][T10466] RSP: 002b:00007f8419627038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.365524][T10466] RAX: ffffffffffffffda RBX: 00007f841ae05fa0 RCX: 00007f841abbeba9 [ 147.365540][T10466] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 147.365556][T10466] RBP: 00007f8419627090 R08: 0000200000000240 R09: 0000000000000000 [ 147.365572][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.365587][T10466] R13: 00007f841ae06038 R14: 00007f841ae05fa0 R15: 00007ffe3cb41148 [ 147.365646][T10466] [ 147.573780][T10468] syz_tun: entered allmulticast mode [ 147.587001][ T3305] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 147.594671][ T3305] FAT-fs (loop1): Filesystem has been set read-only [ 147.595589][T10468] team_slave_0: entered promiscuous mode [ 147.601393][ T3305] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 147.639803][T10468] ipvlan0: entered promiscuous mode [ 147.645744][T10468] ipvlan0: left promiscuous mode [ 147.664172][T10468] team_slave_0: left promiscuous mode [ 147.700025][T10473] loop2: detected capacity change from 0 to 1024 [ 147.730624][T10465] syz_tun: left allmulticast mode [ 147.739140][T10473] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 147.778933][T10473] loop2: detected capacity change from 0 to 512 [ 147.806976][T10473] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1467: iget: bad extended attribute block 1 [ 147.862945][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 147.875730][T10473] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1467: couldn't read orphan inode 15 (err -117) [ 147.942275][T10482] IPVS: Error joining to the multicast group [ 147.960134][ T5084] bridge_slave_1: left allmulticast mode [ 147.965863][ T5084] bridge_slave_1: left promiscuous mode [ 147.971593][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.988720][ T5084] bridge_slave_0: left allmulticast mode [ 147.994610][ T5084] bridge_slave_0: left promiscuous mode [ 148.000296][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.095454][T10502] loop2: detected capacity change from 0 to 2048 [ 148.189570][ T5084] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.198613][ T5084] bond_slave_0: left promiscuous mode [ 148.206503][ T5084] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.215604][ T5084] bond_slave_1: left promiscuous mode [ 148.221891][ T5084] $H (unregistering): (slave dummy0): Releasing backup interface [ 148.230344][ T5084] dummy0: left promiscuous mode [ 148.236177][ T5084] $H (unregistering): Released all slaves [ 148.260090][T10502] netem: change failed [ 148.301958][T10518] loop3: detected capacity change from 0 to 2048 [ 148.329536][T10518] EXT4-fs (loop3): failed to initialize system zone (-117) [ 148.338960][T10518] EXT4-fs (loop3): mount failed [ 148.350078][ T5084] hsr_slave_0: left promiscuous mode [ 148.358167][ T5084] hsr_slave_1: left promiscuous mode [ 148.385365][T10530] loop3: detected capacity change from 0 to 256 [ 148.410576][ T5084] team0 (unregistering): Port device team_slave_1 removed [ 148.420643][ T5084] team0 (unregistering): Port device team_slave_0 removed [ 148.458247][T10483] lo speed is unknown, defaulting to 1000 [ 148.504079][T10529] lo speed is unknown, defaulting to 1000 [ 148.518334][T10529] lo speed is unknown, defaulting to 1000 [ 148.525349][T10529] lo speed is unknown, defaulting to 1000 [ 148.540914][T10529] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.549718][T10529] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 148.565395][T10529] lo speed is unknown, defaulting to 1000 [ 148.574803][T10529] lo speed is unknown, defaulting to 1000 [ 148.579156][T10538] __nla_validate_parse: 2 callbacks suppressed [ 148.579176][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1485'. [ 148.586090][T10529] lo speed is unknown, defaulting to 1000 [ 148.587443][T10538] IPVS: Error joining to the multicast group [ 148.607595][T10529] lo speed is unknown, defaulting to 1000 [ 148.612660][T10483] chnl_net:caif_netlink_parms(): no params data found [ 148.623402][T10529] lo speed is unknown, defaulting to 1000 [ 148.640336][T10529] lo speed is unknown, defaulting to 1000 [ 148.685669][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.693048][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.704409][T10483] bridge_slave_0: entered allmulticast mode [ 148.712156][T10483] bridge_slave_0: entered promiscuous mode [ 148.724542][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.731727][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.739565][T10483] bridge_slave_1: entered allmulticast mode [ 148.747270][T10483] bridge_slave_1: entered promiscuous mode [ 148.774605][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.797085][T10547] loop2: detected capacity change from 0 to 164 [ 148.798836][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.804424][T10547] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 148.848391][T10483] team0: Port device team_slave_0 added [ 148.855431][T10483] team0: Port device team_slave_1 added [ 148.890546][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.897640][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.923616][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.925426][T10554] loop5: detected capacity change from 0 to 2048 [ 148.935312][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.947804][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.973823][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.005707][T10483] hsr_slave_0: entered promiscuous mode [ 149.011877][T10483] hsr_slave_1: entered promiscuous mode [ 149.017991][T10483] debugfs: 'hsr0' already exists in 'hsr' [ 149.023848][T10483] Cannot create hsr debugfs directory [ 149.029750][T10554] netem: change failed [ 149.146267][T10483] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.156324][T10483] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.169246][T10483] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.183944][T10483] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.191500][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 149.213329][T10573] IPVS: Unknown mcast interface: vcan0 [ 149.260845][T10583] loop3: detected capacity change from 0 to 1024 [ 149.276233][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.286096][T10583] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 149.294241][T10483] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.427522][T10583] loop3: detected capacity change from 0 to 512 [ 149.436359][T10583] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1499: iget: bad extended attribute block 1 [ 149.441668][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.455960][ T5063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.465705][T10583] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1499: couldn't read orphan inode 15 (err -117) [ 149.470987][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.484740][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.549111][T10591] lo speed is unknown, defaulting to 1000 [ 149.609104][T10591] lo speed is unknown, defaulting to 1000 [ 149.861017][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 150.026086][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 150.042071][T10602] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1502'. [ 150.051298][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 150.069733][T10605] ipvlan2: entered promiscuous mode [ 150.108373][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.344643][T10483] veth0_vlan: entered promiscuous mode [ 150.365254][T10483] veth1_vlan: entered promiscuous mode [ 150.371106][T10649] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1516'. [ 150.397781][T10483] veth0_macvtap: entered promiscuous mode [ 150.406908][T10483] veth1_macvtap: entered promiscuous mode [ 150.421442][T10483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.442594][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 150.442613][ T29] audit: type=1400 audit(1757833007.164:8716): avc: denied { ioctl } for pid=10636 comm="syz.4.1511" path="socket:[21078]" dev="sockfs" ino=21078 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.454615][T10483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.481571][T10654] loop5: detected capacity change from 0 to 512 [ 150.488424][T10658] netlink: 'syz.4.1511': attribute type 12 has an invalid length. [ 150.503148][T10658] loop4: detected capacity change from 0 to 512 [ 150.510207][T10658] EXT4-fs: Ignoring removed oldalloc option [ 150.516943][T10658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.530594][ T5055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.537639][T10654] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm wޡ: casefold flag without casefold feature [ 150.546894][T10658] EXT4-fs (loop4): 1 truncate cleaned up [ 150.553270][T10654] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm wޡ: couldn't read orphan inode 15 (err -117) [ 150.567472][ T5055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.583601][ T5055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.602893][ T5055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.700250][T10676] netlink: 360 bytes leftover after parsing attributes in process `syz.6.1470'. [ 150.727038][T10678] loop5: detected capacity change from 0 to 2048 [ 150.769080][T10686] loop6: detected capacity change from 0 to 1024 [ 150.776481][T10686] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 150.785221][T10678] netem: change failed [ 150.791552][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 150.805671][T10686] loop6: detected capacity change from 0 to 512 [ 150.820028][T10686] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1524: iget: bad extended attribute block 1 [ 150.833206][T10686] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1524: couldn't read orphan inode 15 (err -117) [ 150.857901][ T29] audit: type=1326 audit(1757833007.594:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 150.883168][ T29] audit: type=1326 audit(1757833007.594:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 150.906984][ T29] audit: type=1326 audit(1757833007.594:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 150.930497][ T29] audit: type=1326 audit(1757833007.636:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.5.1526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x0 [ 150.955541][ T29] audit: type=1326 audit(1757833007.699:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 150.979297][ T29] audit: type=1326 audit(1757833007.731:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.5.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 151.087021][ T29] audit: type=1400 audit(1757833007.836:8723): avc: denied { connect } for pid=10712 comm="syz.6.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.135432][ T29] audit: type=1400 audit(1757833007.888:8724): avc: denied { write } for pid=10712 comm="syz.6.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.170438][T10715] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1534'. [ 151.192973][T10719] loop6: detected capacity change from 0 to 1764 [ 151.274127][T10725] loop3: detected capacity change from 0 to 164 [ 151.282542][T10725] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 151.342839][T10741] netlink: 'syz.6.1544': attribute type 3 has an invalid length. [ 151.508041][T10756] loop6: detected capacity change from 0 to 164 [ 151.516978][T10756] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 152.031270][T10774] futex_wake_op: syz.2.1556 tries to shift op by -1; fix this program [ 152.190772][ T29] audit: type=1326 audit(1757833009.001:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.5.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56aee5eba9 code=0x7ffc0000 [ 152.228816][T10785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.250984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.361948][T10793] loop2: detected capacity change from 0 to 128 [ 152.379435][T10802] netlink: 'syz.3.1567': attribute type 4 has an invalid length. [ 152.481492][T10813] loop2: detected capacity change from 0 to 512 [ 152.493087][T10813] EXT4-fs: dax option not supported [ 152.625482][T10838] loop5: detected capacity change from 0 to 512 [ 152.652830][T10838] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.667510][T10841] loop4: detected capacity change from 0 to 512 [ 152.674494][T10841] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.682921][T10841] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 152.703860][T10841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 152.728316][T10841] System zones: 1-12 [ 152.739038][T10841] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1579: corrupted in-inode xattr: e_value size too large [ 152.753356][T10841] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1579: couldn't read orphan inode 15 (err -117) [ 152.785761][T10853] netlink: 'syz.4.1581': attribute type 4 has an invalid length. [ 152.822593][T10851] usb usb8: usbfs: process 10851 (syz.5.1580) did not claim interface 0 before use [ 152.907730][T10861] FAULT_INJECTION: forcing a failure. [ 152.907730][T10861] name failslab, interval 1, probability 0, space 0, times 0 [ 152.920591][T10861] CPU: 1 UID: 0 PID: 10861 Comm: syz.4.1584 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.920685][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.920701][T10861] Call Trace: [ 152.920709][T10861] [ 152.920719][T10861] __dump_stack+0x1d/0x30 [ 152.920793][T10861] dump_stack_lvl+0xe8/0x140 [ 152.920820][T10861] dump_stack+0x15/0x1b [ 152.920841][T10861] should_fail_ex+0x265/0x280 [ 152.920866][T10861] should_failslab+0x8c/0xb0 [ 152.920897][T10861] kmem_cache_alloc_node_noprof+0x57/0x320 [ 152.921000][T10861] ? __alloc_skb+0x101/0x320 [ 152.921020][T10861] ? __rtnl_unlock+0x95/0xb0 [ 152.921072][T10861] __alloc_skb+0x101/0x320 [ 152.921097][T10861] netlink_ack+0xfd/0x500 [ 152.921121][T10861] ? avc_has_perm_noaudit+0x1b1/0x200 [ 152.921156][T10861] netlink_rcv_skb+0x192/0x220 [ 152.921193][T10861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.921234][T10861] rtnetlink_rcv+0x1c/0x30 [ 152.921343][T10861] netlink_unicast+0x5bd/0x690 [ 152.921377][T10861] netlink_sendmsg+0x58b/0x6b0 [ 152.921411][T10861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.921438][T10861] __sock_sendmsg+0x145/0x180 [ 152.921543][T10861] ____sys_sendmsg+0x345/0x4e0 [ 152.921599][T10861] ___sys_sendmsg+0x17b/0x1d0 [ 152.921652][T10861] __sys_sendmmsg+0x178/0x300 [ 152.921700][T10861] __x64_sys_sendmmsg+0x57/0x70 [ 152.921747][T10861] x64_sys_call+0x1c4a/0x2ff0 [ 152.921775][T10861] do_syscall_64+0xd2/0x200 [ 152.921910][T10861] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.921938][T10861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.921968][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.921989][T10861] RIP: 0033:0x7f4bf6d2eba9 [ 152.922015][T10861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.922038][T10861] RSP: 002b:00007f4bf5797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.922068][T10861] RAX: ffffffffffffffda RBX: 00007f4bf6f75fa0 RCX: 00007f4bf6d2eba9 [ 152.922084][T10861] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 152.922178][T10861] RBP: 00007f4bf5797090 R08: 0000000000000000 R09: 0000000000000000 [ 152.922199][T10861] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.922213][T10861] R13: 00007f4bf6f76038 R14: 00007f4bf6f75fa0 R15: 00007ffe225e5fe8 [ 152.922239][T10861] [ 152.923760][T10861] netlink: 'syz.4.1584': attribute type 30 has an invalid length. [ 153.224167][T10863] loop5: detected capacity change from 0 to 2048 [ 153.273211][T10863] netlink: 'syz.5.1585': attribute type 21 has an invalid length. [ 153.281354][T10863] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 153.362318][T10871] loop5: detected capacity change from 0 to 2048 [ 153.379150][T10871] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1588: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 153.398168][T10876] __nla_validate_parse: 7 callbacks suppressed [ 153.398211][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1589'. [ 153.398486][T10871] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1588: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 153.495859][T10878] loop2: detected capacity change from 0 to 164 [ 153.504060][T10878] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 153.527467][T10885] netlink: 'syz.4.1593': attribute type 10 has an invalid length. [ 153.557288][T10889] program syz.3.1595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.568594][T10889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 153.590698][T10890] loop5: detected capacity change from 0 to 164 [ 153.599994][T10897] loop6: detected capacity change from 0 to 512 [ 153.614082][T10890] iso9660: Unknown parameter '0177777777777777777777700000000000000000007' [ 153.634028][T10897] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.637536][T10905] loop3: detected capacity change from 0 to 128 [ 153.654412][T10897] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1597: bg 0: block 248: padding at end of block bitmap is not set [ 153.686823][T10897] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1597: Failed to acquire dquot type 1 [ 153.705965][T10897] EXT4-fs (loop6): 1 truncate cleaned up [ 153.707257][T10905] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 153.719506][T10905] FAT-fs (loop3): Filesystem has been set read-only [ 153.719673][T10911] loop5: detected capacity change from 0 to 2048 [ 153.735961][T10905] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 153.797992][T10911] netem: change failed [ 153.804625][T10923] loop6: detected capacity change from 0 to 512 [ 153.853032][T10923] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.899269][T10924] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1602: bg 0: block 361: padding at end of block bitmap is not set [ 153.931811][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1605'. [ 154.013727][T10949] Q6\bY4: renamed from lo (while UP) [ 154.050753][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1608'. [ 154.208485][T10962] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 154.316129][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1612'. [ 154.391717][T10973] IPVS: Error joining to the multicast group [ 154.563369][T11008] loop4: detected capacity change from 0 to 512 [ 154.575682][T11008] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 154.598252][T11012] netlink: 'syz.5.1617': attribute type 1 has an invalid length. [ 154.606122][T11012] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1617'. [ 154.620808][T11013] loop6: detected capacity change from 0 to 512 [ 154.634243][T11008] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.642935][T11013] EXT4-fs (loop6): orphan cleanup on readonly fs [ 154.653093][T11012] loop5: detected capacity change from 0 to 164 [ 154.670088][T11008] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1616: Block bitmap for bg 0 marked uninitialized [ 154.689714][T11013] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1615: bg 0: block 248: padding at end of block bitmap is not set [ 154.716734][T11013] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1615: Failed to acquire dquot type 1 [ 154.733631][T11008] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 154.744243][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'. [ 154.765082][T11013] EXT4-fs (loop6): 1 truncate cleaned up [ 154.766738][T11008] EXT4-fs (loop4): 1 orphan inode deleted [ 154.831784][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.842313][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.981061][T11038] loop4: detected capacity change from 0 to 512 [ 154.991078][T11038] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm wޡ: casefold flag without casefold feature [ 155.013443][T11038] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm wޡ: couldn't read orphan inode 15 (err -117) [ 155.041175][T11038] EXT4-fs mount: 37 callbacks suppressed [ 155.041196][T11038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.157449][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.186115][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 155.399577][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.426306][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1635'. [ 155.460348][T11110] loop6: detected capacity change from 0 to 512 [ 155.471869][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 155.471965][ T29] audit: type=1400 audit(1757833012.444:9009): avc: denied { create } for pid=11108 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 155.559337][T11125] sd 0:0:1:0: device reset [ 155.626154][T11131] loop6: detected capacity change from 0 to 512 [ 155.642657][T11131] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm wޡ: casefold flag without casefold feature [ 155.662945][T11131] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm wޡ: couldn't read orphan inode 15 (err -117) [ 155.675105][T11131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.805249][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.852964][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1642'. [ 155.874127][T11166] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1640'. [ 156.084197][T11183] sd 0:0:1:0: device reset [ 156.125910][ T29] audit: type=1326 audit(1757833013.127:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.187841][ T29] audit: type=1326 audit(1757833013.158:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.211550][ T29] audit: type=1326 audit(1757833013.158:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.235240][ T29] audit: type=1326 audit(1757833013.158:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.258746][ T29] audit: type=1326 audit(1757833013.158:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.282371][ T29] audit: type=1326 audit(1757833013.158:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.295396][T11185] lo speed is unknown, defaulting to 1000 [ 156.306053][ T29] audit: type=1326 audit(1757833013.158:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.335437][ T29] audit: type=1326 audit(1757833013.158:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.359165][ T29] audit: type=1326 audit(1757833013.158:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.2.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841abbeba9 code=0x7ffc0000 [ 156.450170][T11185] lo speed is unknown, defaulting to 1000 [ 156.580501][T11207] IPVS: Unknown mcast interface: vcan0 [ 156.646220][T11225] loop4: detected capacity change from 0 to 256 [ 156.666451][T11227] loop6: detected capacity change from 0 to 128 [ 156.689251][T11227] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.697177][T11227] FAT-fs (loop6): Filesystem has been set read-only [ 156.728873][T11227] bio_check_eod: 44882 callbacks suppressed [ 156.728890][T11227] syz.6.1659: attempt to access beyond end of device [ 156.728890][T11227] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 156.792680][T11227] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.800938][T11227] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 156.809730][T11233] syz.6.1659: attempt to access beyond end of device [ 156.809730][T11233] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 156.823072][T11233] buffer_io_error: 44879 callbacks suppressed [ 156.823088][T11233] Buffer I/O error on dev loop6, logical block 2065, async page read [ 156.839441][T11233] syz.6.1659: attempt to access beyond end of device [ 156.839441][T11233] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 156.852903][T11233] Buffer I/O error on dev loop6, logical block 2066, async page read [ 156.866618][T11233] syz.6.1659: attempt to access beyond end of device [ 156.866618][T11233] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 156.879997][T11233] Buffer I/O error on dev loop6, logical block 2067, async page read [ 156.888945][T11233] syz.6.1659: attempt to access beyond end of device [ 156.888945][T11233] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 156.902412][T11233] Buffer I/O error on dev loop6, logical block 2068, async page read [ 156.980198][T11273] sd 0:0:1:0: device reset [ 156.990733][T11233] syz.6.1659: attempt to access beyond end of device [ 156.990733][T11233] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 157.004147][T11233] Buffer I/O error on dev loop6, logical block 2069, async page read [ 157.081837][T11233] syz.6.1659: attempt to access beyond end of device [ 157.081837][T11233] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 157.095227][T11233] Buffer I/O error on dev loop6, logical block 2070, async page read [ 157.141362][T11233] syz.6.1659: attempt to access beyond end of device [ 157.141362][T11233] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 157.154766][T11233] Buffer I/O error on dev loop6, logical block 2071, async page read [ 157.154922][T11277] loop5: detected capacity change from 0 to 2048 [ 157.165346][T11233] syz.6.1659: attempt to access beyond end of device [ 157.165346][T11233] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 157.182665][T11233] Buffer I/O error on dev loop6, logical block 2072, async page read [ 157.190892][T11227] syz.6.1659: attempt to access beyond end of device [ 157.190892][T11227] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 157.204302][T11227] Buffer I/O error on dev loop6, logical block 2065, async page read [ 157.227293][T11227] Buffer I/O error on dev loop6, logical block 2066, async page read [ 157.236758][T11227] ================================================================== [ 157.237545][T11277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 157.244879][T11227] BUG: KCSAN: data-race in filemap_read_folio / filemap_read_folio [ 157.244914][T11227] [ 157.267204][T11227] read-write to 0xffff88810f4b29a0 of 4 bytes by task 11233 on cpu 1: [ 157.275373][T11227] filemap_read_folio+0xea/0x110 [ 157.280358][T11227] filemap_fault+0x56a/0xb40 [ 157.284987][T11227] __do_fault+0xb9/0x200 [ 157.289246][T11227] handle_mm_fault+0xf78/0x2c20 [ 157.294106][T11227] do_user_addr_fault+0x793/0x1090 [ 157.299242][T11227] exc_page_fault+0x62/0xa0 [ 157.303767][T11227] asm_exc_page_fault+0x26/0x30 [ 157.308630][T11227] fault_in_readable+0xad/0x170 [ 157.313499][T11227] fault_in_iov_iter_readable+0x129/0x210 [ 157.319237][T11227] generic_perform_write+0x3cf/0x490 [ 157.324535][T11227] __generic_file_write_iter+0xec/0x120 [ 157.330094][T11227] generic_file_write_iter+0x8d/0x2f0 [ 157.335502][T11227] vfs_write+0x52a/0x960 [ 157.339759][T11227] ksys_write+0xda/0x1a0 [ 157.344012][T11227] __x64_sys_write+0x40/0x50 [ 157.348614][T11227] x64_sys_call+0x27fe/0x2ff0 [ 157.353304][T11227] do_syscall_64+0xd2/0x200 [ 157.357835][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.363761][T11227] [ 157.366088][T11227] read-write to 0xffff88810f4b29a0 of 4 bytes by task 11227 on cpu 0: [ 157.374244][T11227] filemap_read_folio+0xea/0x110 [ 157.379192][T11227] filemap_fault+0x56a/0xb40 [ 157.383797][T11227] __do_fault+0xb9/0x200 [ 157.388057][T11227] handle_mm_fault+0xf78/0x2c20 [ 157.392920][T11227] __get_user_pages+0x102e/0x1fa0 [ 157.397953][T11227] __mm_populate+0x243/0x3a0 [ 157.402552][T11227] vm_mmap_pgoff+0x232/0x2e0 [ 157.407162][T11227] ksys_mmap_pgoff+0x268/0x310 [ 157.411931][T11227] x64_sys_call+0x14a3/0x2ff0 [ 157.416620][T11227] do_syscall_64+0xd2/0x200 [ 157.421152][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.427077][T11227] [ 157.429400][T11227] value changed: 0x00000002 -> 0x00000000 [ 157.435119][T11227] [ 157.437453][T11227] Reported by Kernel Concurrency Sanitizer on: [ 157.443613][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.6.1659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.453430][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.463491][T11227] ================================================================== [ 157.496757][ T9271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 157.750698][ T5084] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.777264][ T5084] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.824390][ T5084] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.863423][ T5084] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.922856][ T5084] bridge_slave_1: left allmulticast mode [ 157.928569][ T5084] bridge_slave_1: left promiscuous mode [ 157.934251][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.942173][ T5084] bridge_slave_0: left allmulticast mode [ 157.947878][ T5084] bridge_slave_0: left promiscuous mode [ 157.953630][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.054457][ T5084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.064544][ T5084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.074044][ T5084] bond0 (unregistering): Released all slaves [ 158.111635][ T5084] tipc: Disabling bearer [ 158.116970][ T5084] tipc: Left network mode [ 158.140027][ T5084] hsr_slave_0: left promiscuous mode [ 158.145707][ T5084] hsr_slave_1: left promiscuous mode [ 158.153825][ T5084] veth1_macvtap: left promiscuous mode [ 158.160050][ T5084] veth0_macvtap: left promiscuous mode [ 158.166539][ T5084] veth1_vlan: left promiscuous mode [ 158.171904][ T5084] veth0_vlan: left promiscuous mode [ 158.233602][ T5084] team0 (unregistering): Port device team_slave_1 removed [ 158.243831][ T5084] team0 (unregistering): Port device team_slave_0 removed [ 166.881966][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!