last executing test programs: 40.080579047s ago: executing program 1 (id=486): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="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"/305, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8], 0x4, 0x301, &(0x7f0000000080)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@mptcp=@mp_join={0x1e, 0x3, 0x3}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x62}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500"], 0xc3}, 0x1, 0x100000000000000}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f00000005c0)={0x0, 0xfb, 0xf0, 0x0, 0x0, "388c035cff6ff5d07186eb2a89b1c3f6", "81de95d520450859a573e0aeaa0062b99a677bb2c17b55ad20dac10db4de59422cb2ea032c05a0f1835a0ef2357196125ea0fc2143c51eef7e8035be5752f888d2d32878ccf56aa686a056537465adfeba94896d37ecc7ed7552b231210bfb99d99c91bc64f910aeeb92f0c083eecd785a91120d99f8417f9d0320ea635db32559934616dcaea3419455a7ffa088a5cc3ea6c4b127d01ff93eb6f2da6bf76940788156b376de312d9792f5408dbbed46bb51f6f73236ac36c402ae45928d93e097766f52113adfd44f4d7705a3b219cd7dcd0aadc1b02ab5e466f1"}, 0xf0, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r6 = socket(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0xa298) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@delqdisc={0xd0, 0x25, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x2, 0x8}, {0xa, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x52}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3e4}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xf9, 0x7, 0x7, 0x2, 0x0, 0x8000, 0x1}}, {0x6, 0x2, [0x71cc]}}, {{0x1c, 0x1, {0xd1, 0xb, 0x7, 0x2, 0x1, 0x5, 0x5, 0x3}}, {0xa, 0x2, [0x7ff, 0x1, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xbb, 0x7, 0x1, 0xc00, 0x2, 0xffff, 0x9, 0x7}}, {0x12, 0x2, [0x9f9d, 0x9, 0x6, 0xf800, 0x8, 0xcc33, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8041}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.188647556s ago: executing program 1 (id=502): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x4, 0x642, 0x29, @private0, @mcast2, 0x8, 0x20, 0x4, 0xc5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0xc08, 0x3, 0x460, 0x330, 0x5002004a, 0xb, 0x0, 0xea13, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {0x0, 0x0, 0x0, 0x4}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x231}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {0xfffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb, 0x5, 0x7, 0xfffffff3, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r6, 0x500}, 0x38) 39.104572093s ago: executing program 1 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 39.088881244s ago: executing program 1 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8=0x0], 0x42, 0x300, &(0x7f00000003c0)="$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") creat(&(0x7f0000000a00)='./file0\x00', 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) unshare(0x2a020400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = syz_open_dev$loop(&(0x7f0000000080), 0xa344, 0x40) ioctl$BLKDISCARD(r7, 0x1277, &(0x7f0000000180)=0x8) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x3, 0x1, @thr={&(0x7f0000003040)="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", &(0x7f00000000c0)="24d1a1d85a8f577ebd3d33c849c28ae2230874e9c16141016faf97a5f2ca2776d108ca26fd5d554fbad3f53d578a8807ea5bb9e784638046d4b66b78202d5b308934053ccf74a752f3747b7e03d534b141408ee9206eaa391cfeac149efcf1a6460ae282b4384dac1492beb730676df6657f2014b9e2cc730c9387b773806410307403d32212c4e3a87b739e325c35a1b4c65b451f3343aee1429e"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 38.894967089s ago: executing program 1 (id=510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x95, 0x7, 0x7ffc0003}]}) inotify_init() ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) 38.677227006s ago: executing program 1 (id=514): socket$kcm(0x1e, 0x4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, 0x0, &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='cachefiles_link\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32=0x0, @ANYBLOB="05b94d00"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b850e, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000140)={r11, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 38.676780446s ago: executing program 32 (id=514): socket$kcm(0x1e, 0x4, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, 0x0, &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='cachefiles_link\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32=0x0, @ANYBLOB="05b94d00"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b850e, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000140)={r11, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.80530899s ago: executing program 4 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x260, 0x11, 0x148, 0x0, 0x0, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x8001, 0xf, [0x0, 0x13, 0x36, 0x34, 0x3, 0x12, 0x2e, 0x18, 0x10, 0x39, 0x3b, 0x3b, 0x39, 0x0, 0x20, 0x17], 0x2, 0x7, 0x520}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @loopback, 0xff, 0x0, '\x00', 'veth0\x00', {}, {0xff}, 0x8, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @sco, @hci={0x1f, 0x1, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='pimreg1\x00', 0x7fffffff, 0xffffffff, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.593010527s ago: executing program 4 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.565453898s ago: executing program 4 (id=1239): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0x4, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)={0xf56, 0x29, 0x2, {0x6cba5e4a, [{{0x10, 0x3, 0x7}, 0x5, 0x8, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x1, 0x8, 0xef5, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, {{0x1, 0x4, 0x6}, 0x8, 0xa, 0x7, './file0'}]}}, 0xf56) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x4000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 1.507677323s ago: executing program 3 (id=1242): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000d80)='sys_enter\x00', r7, 0x0, 0x7}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 1.239360754s ago: executing program 3 (id=1244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) 1.232255135s ago: executing program 0 (id=1245): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0xc, 0x8, 0x3ff}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.114446864s ago: executing program 0 (id=1246): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xa362, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x7df33ad1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0x8, 0x2a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x20, 0xfffffff9, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r8 = epoll_create(0x201) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf250200000008000400000000001c000680060001000a00000008000300e00000020600010002000000280006800800060000000000060001000a00000014000400ff0100000000000000000800000000010800030003000000080002000300000008000300030000000500050003000000"], 0x80}, 0x1, 0x0, 0x0, 0x40008014}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x90000001}) io_uring_setup(0x7291, &(0x7f0000000140)={0x0, 0xb32, 0x2, 0x0, 0x382}) accept4$inet(r8, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.069357817s ago: executing program 2 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 985.950234ms ago: executing program 2 (id=1249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 921.063209ms ago: executing program 2 (id=1251): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, 0x0, 0x93) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$rfkill(r5, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r7 = semget$private(0x0, 0x4, 0x0) semop(r7, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r7, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) r8 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r8, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x30b) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 841.429005ms ago: executing program 3 (id=1252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 794.551539ms ago: executing program 3 (id=1253): creat(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) write$P9_RWALK(r3, 0x0, 0xfffffd18) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) close(r4) 783.25998ms ago: executing program 2 (id=1254): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000d1413043dbd7000fddbdf2508003e00020900"/32], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r7 = io_uring_setup(0x641b, &(0x7f00000000c0)={0x0, 0x742a, 0x2, 0x3, 0x2ea}) io_uring_register$IORING_REGISTER_MEM_REGION(r7, 0x22, &(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000740)="410ece9970270fbf253f8cafa1bead3e03c5504503d22922083bff8ec86c711c4e02df2699b4820fa031dc8213fbd984edb5e0b4769902dfaee8f6060840c28ae2114f5129bc13e019cda039dbca3faebe00c47b3484e78f329d69cbe2f9c658b17ddd25d282f22d601840aa332b39f421b14a7cbbfd93dfe5c18b36092f736b2b3b26b1d6a653a4bbf50d507dcb55d6be7877d16686bbc82957fa1d8d08fa0a5fa67e4732c14ec1cc5a97b446a5fec69d7499bc22a7cde3009421bff78597d23019742afa4afe6c6d269eaffaaf452daa70", 0xd2, 0x1, 0x4, 0x9}}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000006c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c45820862ba47e0f22f68c465ab300e2c997854f1d94dad6b5b098dced97ab3ebc00f036577112bfe0c71c8c2641372b404f687e33aa3da9b5996d4a640c4a4113c540e733220cc3160bf681c6e5ac29f0bcffe0c5c2174a329269a1a5fc6406a35027fc43140e6861537a40816f9c4c38c988ceb9940b979e81454990f0badc26c14f38861a17db894247d689b772", @ANYRES16, @ANYRES32], 0xc4}}, 0x2400c880) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250e0000000800060002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x8}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x10ed}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a0004002abd7000fddbdf250a000100"], 0x14}, 0x1, 0x0, 0x0, 0x2004881}, 0x4) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x0, 0x1, @local, 0x4, 0x3}, 0x20) 635.117811ms ago: executing program 3 (id=1255): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_io_uring_setup(0x110d4, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noblock_validity}, {}, {@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee01}}, {}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@init_itable}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x91) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000003140100000e000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000540)={0x100010, 0x100048, 0x100000}, 0x20) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) 553.425387ms ago: executing program 4 (id=1256): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r7 = socket(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) connect$netlink(r7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000200)={[{@grpid}, {@grpquota}]}, 0x4, 0x4fb, &(0x7f0000000f80)="$eJzs3b9vXEkdAPDvW3tjn29zzsEVgIALx0FAUdY/cmdFoSBpQCiKhIioKBJjbyzLu1nLa4fYpHBKeiQiUcGfQEeBlIqCjg46mlAgGYhAMRLFnt7bF3tje20nsb3O7ucjPb83Mxt/Z7yemfcm2UwAfet8RKxHxJmIuBMRo3l+kh9xrXWkr3v+7OHM5rOHM0k0m7f+lWTlaV60/ZnUu/n3HI6IH30/4qfJ7riN1bWF6Wq1spSnx5Zri2ON1bVL84U8Z3JqYmr8yuVPJ4+srR/WfrfxvfkbP/7D77/y9M/r3/55Wq3SL85mZe3teGWFzkWtphej1JY3GBE3XjvY6TOY//7w9kl/dT8XER9l/X80BrJ3EwDoZc3maDRH29MAQK9Ln/9LkRTK+VpAKQqFcrm1hvdBjBSq9cbyxdH6yr3ZyNawzkWxcHe+WhnP1wrPRTFJ0xPZ9XZ6ckf6ckS8HxG/HHonS5dn6tXZbt74AEAfe3fH/P/fodb8DwD0uOFuVwAAOHHmfwDoP+Z/AOg/rzD/+3QgAPQIz/8A0H/M/wDQfw6c/x+dTD0AgBPxw5s306O5mf//17P3V1e+U7p/abbSWCjXVmbKM/WlxfJcvT5XrZRnms2Dvl+1Xl+c+GQr2Vhdu12rr9xbvj1fm56r3K4Uj7k9AMDB3v/wyV+TiFi/+k52RNteDuZq6G37bF0D9LiBblcA6Bqf54H+dYhnfMsA0OP22KL3JR3/idBjm7/C2+rCF63/Q7+y/g/96/XW/7975PUATp71f+hfzWZiz38A6DPW+IE3+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FOl7EgK5Wwv8PX0a6FcjjgbEeeimNydr1bGI+K9iPjLUHEoTU90u9IAwBsq/CPJ9/+6MPpxaWfpmeR/Q9k5In7261u/ejC9vLw0keb/eyt/+XGeP3mmGw0AANpd253Vmqfzc9uD/PNnD2deHCdZxY3rrc1F07ib+dEqGYzB7DwcxYgY+U+Sp1vS+5WBI4i//igivrDd/gdtEUrZGkhr59Od8dPYZ48h/vbPf2f8wkvxC1lZei5mP4vPH0FdoN88ud4aJ/O+l3axvP8V4nx23rv/D2cj1Jt7Mf5t7hr/Clvj38Cu+EnW589vpfevycYnf/zBrszmaKvsUcSXBveKn2zFTzqMvx8fso1/+/JXP+pU1vxNxIXYO35LLRtmx5Zri2ON1bVL87Xpucpc5d7k5NTE1PiVy59OjmVr1K2vf9orxj+vXnyvU/y0/SMd4g8f0P5vHLL9v/3/nZ98bZ/43/r63u//B/vET+fEbx4y/vTItY7bd2+8KHmN9//iIeM//fva7CFfCgCcgMbq2sJ0tVpZOuAivdc86DWn4iK9WT4F1XibLmI94hRUw8WeF0N5Tz3p6F0emIBjt93pu10TAAAAAAAAAAAAAACgk8bq2sLQMX9grtttBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHd9FgAA//9XucgS") 449.301325ms ago: executing program 3 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x561a, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = getpid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) r8 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[], 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0xe, 0x9, 0x9, 0x6, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x17, 0x32, 0x60, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x30}, 0x1, 0x7}, 0x440c0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB="c36a21fcca6b98f5885287b6dc44d97bd1b11663cd2643b3d6fd6fa7"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 423.170417ms ago: executing program 5 (id=1259): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000007f0000009500000000000000a08cf8e16db995b0c22ee8000aa49a1e3a8c3757863c09029a8404611c7747455f8c3d96"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {0x7}, {0x3}}}, 0x24}}, 0x2000) 248.147711ms ago: executing program 5 (id=1260): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r1, 0x0, r0, 0x0, 0x46) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000000c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) gettid() ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0xfffffffb, 0x78b468bf, {{0x1c, 0x4, 0x0, 0x6, 0x70, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010102, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xef, [@rand_addr=0x64010102, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x21, [@dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @broadcast]}, @rr={0x7, 0xf, 0x22, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x8, [0x5, 0x6, 0x802]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0x0, [0x1]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000180)="aa", 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa4}, 0x7}, 0x1c) 220.265574ms ago: executing program 0 (id=1261): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r1, 0x0, r0, 0x0, 0x46) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f00000000c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) gettid() ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0xfffffffb, 0x78b468bf, {{0x1c, 0x4, 0x0, 0x6, 0x70, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010102, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xef, [@rand_addr=0x64010102, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x21, [@dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @broadcast]}, @rr={0x7, 0xf, 0x22, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x8, [0x5, 0x6, 0x802]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0x0, [0x1]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000a80)="f82d56b1f632564f6197f20db684a88cf6a2a1e15098a7e91bbab069d20d36593b266f7e48c25f8d738b8dec20bfb27e5fd1f854dd3fbb8b5df881bb79534a1d5fa96e7cbe06638b92ba044f2c630618667181815eca11ad8bbdde13a0ae1c63ebeab4cde2b85607fed3055fda3b1ab339da50bc62a436c0c1ae875329831fc69cd18aa47d51b9bd2cc2596fef3a134bafc33d0c8aabc519830d597a749a7bf700526bc6cb502c0168c0ed014c0edc4ee6a20325571979b19a7a9b0a2a9508ed01f137de16e3e07270447f0104082093670643013528800b9600b80f4b78494766c5449fd861340ed2f88648808785132da8d13f94f9aa113e36814b92aedf07582c50fcc6322d06e5dbc9126bc33edbdf81d68580ff3c251271942537bf9525bd9d2a813897c9ecb50d4a9acfb3da274f6308d765072671f93bebe6cd436a1d556f88526090a0af5a5584b47ddd688ee1adbd34d3c21cde12cdf0be5e0253b79c596baf2fb90e75a1d37ce05b16051c04ff882636bff51063e80224193ee73b85de33f34f88a4e5a586189f6986446c18e1e21f88aeaae1c77f7212e8ad846f9c5304115746b1f29be10626cc2040a1d3521df4cb87a457aba64da6ced43d0d01fe9ba48b1aea491118fe0e455cae5949d1be4e79fb1ddad40bdfcbb0895c1bd60a2c0c3423dd27261497ec830f41dcc7bf10c4810cf7a7b5f7540128b2dc286bff67233d40b363e5f12731e26c301585cf021d2e0be4aba4dc3a741b7881e269100a9ecf1170d19af1fb0e731512bc372ef38d3d373d1417a381ccedd01ea343fc0fdc934a33b64d9f0d96dc1fd8d19541fb27d256d508e13e57b374881360bc375fb46729117e7505dba742078e4a5a3d3bbb48d6a22930513c4fed91704043747ed1e9964d699bf1d522e3ccbd470c7e3210320a1401de274291f3b3a3a315875da026ec3a3c9ccbce9f75efc6ebe11ed563dc68f43caf7af4a6d4e9842c8c872000ac228fa22ab00527e1e98776e752bafe49c1daacf7996b289265224a2bd4763c9f33b9499c2e7acf06c4d40cdf1417b6b7f93c60357f8e0b86ff07412f3285db15ad0d5f67a2f8a00f0400c2ca6e25be3db7f14edd80fb52c7ea5a3106bdad19010e7d55f024dd3f7d3c0ce9e9ad123fc6501c07d153014686bc5d79827cceccee72460f0d9eeb025472e34c4b143ba4d53d5c72eccfea9f45bb2631fee63dc25a005dbbe3ab50c377b263f3e292bddfb3a44e24ef092b1266d82c4ce784bf745311c357377bec0c03c8b9bfa34c4ce3d9100747a587d7a2664eea12b695d093a1d2ba6f5662dcbf6f5b428551d3bb316342ca4d0a8d8a2ca1c9a762454ccd051ceade96102c5a50bdda06882b14ad56c0a232f38a2dd41e66c8250c541a450986eda780321039d5aed7d13b2c0ef3ffeb491581c80f40637d8b337060e3256efd69ecd8423ba55b2cc7a0da934c265063b904b805b448c7744c1102c06613b1d828000366db8f41ae7544a303c50b27151ee95261d0f08ec8d957e2f416b94663a477431b693f8456c799243892414fd8e619fb06619f14b4309b4f4cb23878e489a142641401cc0c76d0ab0001036bce3fac01981d1f6c3bf895cd03ec318df02476e916eb189f287994647adb11fdab9026dafbb948d9dc216bfcbbb328df2e0dc655e6b21eb3c13e207f54b2bca3e977da9cadae16504783bcfebdb087235a74c03f52e534cc33301301a0800816dbbe140fe74d7c48e12d1b49fca9e696ed0d0bcee46050b8eb230f318b872b78149bef85a874a22c89527be7c289af19eb2586b14c97aeb5524376148f364701d7f2a69c5337e17a44b0f32c61b34dd373f25b2f680adb2ab1fcc3f8547a645c73b3d4f89dd20322a6d1c06f777a01aa5ace688680db9ff6529de637f60bcd71409f05acc3aa75c6845d09c956bd6e56fde545809eff01af18b5f365be72717530d6d77ec36066c8b766a8d668ae1b057a4c949c25755c9da848e27f7a152cf7de0d2b473d17329e5b86f217e149a7006ff1a03379e6bb9c4cc06eb711f757fe1d8a80b224d152636ee86f1f65917516a34632be47fe718d03ab769e917b8f3ac8a998b0497df79ba5607cfb865ff45b279f164b8ad3597f109bedbf96488dc0a6f454b055bb02b606d536c6c65b1acc4ace0b46e884341188cbd8ccba7eba125cb572903ed6c3507ef9a6bb605c3b63ebb688b6c9ae879e554a391f410e0a0d75a6e6e65d3d2941f2d60818139a84eb4a1a340708d6a7b2f9770cec7d6b79ecf470503095c03f1d81850e471b1c7acbda2d7847e86806a18d24379d167d0ed210029e4b35e6c776fc2ab7b3ccd123499e31d93d5a53a1153efb0aab9c73d53024649ef56c16032576002ad695335c909c565047b17c9c8866f5aa2aa922997fe688eca79519fb70cde710bb6a49703c87becde4c6259e5eda3f93702069fd44555048cbdc676aad8699787a8bc209805f3e93af9c611c201439c4f7d7985d9fec4e7a1104d2ad36a17c97a972be27bcce6c4a3b63736fc4f527548a7983ff0343256ab9f4ffd47c9444c9957c41a215861df5c47672a3f78092fb473c68721721ffc5700345f668cc709436c928a5f81b8074ca46aef514650108949f3e1399873aa0dc7caa033005745fce762c8564117a219cc844769161f8999d7d621d52bd81c9cb7ec9e34a5281519950635081c56b32075610117872c0230c2e312e97fd722977105e7547e6fe6a82269d1e30ff8cea1fd10c0c56c25d3721e163a49d2fa10313f2264320e570be01e8187996652c098aa696c81325c14dce2ddbbfa0125e3c90442dee55c48216fc1e3c6e7790eaec6d40390412f56818f290b8bae78e8b86d0c6ce0078a60751a5407f98cc918d82f3f8c06ffaf70f33a8a0cabc45464e1f6f0db5d7deac6546b91bee9aa34976e4b2b7658dd8270be35b100c7b6abf1fce3e426e0d4857fc8e81a731c49ab6384b50445dc40703b9302a7e56e84bec7031ca864965fbe99bc8cfefba0b5e6892808960b0bc8bfcdd40194d313fe219830b60738b94f58b07b4fafab8c5090846389279056739958ba093a75b70c628ab518f447f52034f7bd837a7b31d79b23179324eb8106fbff3ebe8ed9f8912a04fbd7fe010298edbd0a4523d5c2e7fcaa8e8eb7cf8c7d0441d0dd47ff6ea899904773e716e0dc53edd741aa051255dd1ec9c96e3e5422c51cf2db270f46c92db2fdf5983445e7b12203fae25ed48563ddfd2384d6256676e5132fbc8d9ff7e557d34170df3303de207ca9ef2100744031332e594ab13b11d40d567231832f0f39141c019211314719f866f1d198ddba952ce6aa05e8e22821bf4651904d1b1e930494f23f19465849b62a2e9a612b6b837ab953ef50d5a233e254152efbd4f83d34c7489352c50d0c672bd5aef47c5ff0f4881d316831487864ff0636dd0e709ceb63bd8706e34a92ac16abb4d538b469c75973e3994b705570f7875bb4da4b3530df5dc51e915e31ec2611573049b8dc2eb85c456a28a86756e22b45baeec00947466b46043195296b65e38d077aff4cb0ccd4f82e7808561eaa34bcee822d0fb63acf5592d292bbc51544f8f256b1ec54eb065909b21d94a412111ca8a78f741f2c55e90823cd72d521a13417065aa5f08dbaed50756fe30d5f87ab2b119a33fa477128301d833333df4a39190c3dadfff82fa1e34087d8a911627d7011b6630229538a1d7342ad3c134e4b1d0623e6c24411092ec8b75b844036da6ec5905d7a6b84a15d4bac069f8412fec9207c5688503da170d535cb32183c9d65a06e5ce4e8aefe05fda111508f6212808861f541ffa999c7872edd95540c0a49940fb7866fbe0a3357e53cd26ff328119b53733dc6ea699dce5f224380f9254551e1f98225f11584b2d923a7068db7a65b7323826ed6c1c99d9a5f3295eb9a8969f5a465b504da28636fb5e98925768489a53492db16505c8ed1d16a43ff4d9a1c6badc452fc18f1e77f27d9c7f7d404a5521e02c6fbd2661c75ae502d210fecb0a69229d7949bc9b4534734a75499f1083063fd6875d55af53a761e5aee810236cf2b93883c759994729bc38b704702e3ffa39686ff78f0945865cce890ee33026df7384313540cfce924056371475eaef6d38bd3b645ec7f1fa95d11b5a62dd859907299f25ee2b7ff3e2223f9d57b10358b438efe97e03e2f6057b22faf2daf1b769a442ec2d02fc0d507c3ee7d35b5177a70da4f1eefd58bd790e78eeefd09d8983a866a3d2eaacab65e292ffd91a552d681af676946dd3b4e12bd3d5ab616e86e974fe5eda504303665de5ab0d33dd3cd0dd9a8ae2598b8d0bd60e4da40dfbee603f0a034e1bac0bdf77bab2f8752e88a6610985631aa5ec609f51db2c2c4ae99547e1cf013fb35d10433aa288aebfd675efedfc303c20a71e16964431c1e07e6aeccce08b7fda0ff8b6353d0e7b4231416a9e14627b72916bdd4a828fe92680edfec7ff7acbe172d976e2cb7f49db85e84e32073c97ceff6838d0eac58f8d2f11afcfbe6637fb25378a75adea25b765998a23be59f7a80985f94a179f7218347b497090c1b32db5b83a60d4cb55185edbabb4d4d8b877b45253eae4d32d60291d6058bac5a8bdc2b5ba3e6581f795050f86837db1264660cce9ab6959e000237bf20ad7d56f7ee9bdd74dfcdd3281c3a5e30d9bd64c3e1d58a71e89454d2e55a3ccbe3dc061ad58b30a088f6659442fcacee5a3e0330ed043ef0a0e081794c6ab067262d191ace05dc87acb40e35e831082b3fd69dae5a6876ffde23828080632c63d8f8267377e40b16dff8ccc142aac1c51d1a8789cf0b437aa0fded4361e77702b2d32d96df02dea5a8acce40a06ad5cbced604126c675ab87e09689b2fd236297eea281cb414ade816ffa4895cd06990d256eb9de5d0be57385d15617719e1d517c57a02064423dfeba45de6d519deb41009a0639898441494404f2358ce20de0f5a4a74bb80b896860cfc29a99e658c4b782b7a25393d115a04207909d2eaeac72a8301a29820b86021b5d39b45c6adc88dab8658464dfd240d6cfe9eb67e8d03b9dd35a8f9a978ef1e596c5d66348bdac3b181e26672cf9f86003e3c8d83172b88d8dde74b3d6eee4295d44fde1a27c07cfa5458e0b319d262daf6a47f70fe18e4eadde4c046c1b0a161565d9e4cc511fe90ef543554ffe120c88ba7569b61fa0ed55847b686eeaa2840c5ddd8081f68f47d7c6ce907ec686b617ce9f4e8e2cbd2d149f370aaf4d108e566028ec105ec82ac229e958e023b331dbc6ffbad27998a448c8d71340228100138859db3d31b4f7ca328b418cbf8da46c5f5a4f64ebbbcc7b791200670dc98ddf771dda14141c8d72a6b4f0dc732def5cf1ac49b6172bee7edddadd087effc5fa6c2a27526c0569503a9f23cd2226753391b4fecdfb9d3b086d1ebfc5b39e95ef2dc5961cbca9f41588ace3857b621f46c0e336bc038355f9dad3e1a5927af0f509f24f5cae23dfd4edab5d5e4048c42981c0f0eb7952764e8e0266592d7b58ae72102b05aab8db8dcb37f322f66058456b08a5a20911819667a94d5edf656c51b885444f5affd3fb26c86b727df2b919d309e3f3e4c820f4b723960b4a066a159adf22018c969812bb26a607918638975c92ee2aa0e1306241699bc6e0b0804606721c0ca4221140397c0fbd500155373200ca076b648e65bb60769c178c72ae720cb70c514cfdf242eebd8848a3533fdc9b7f7203b69e58b4f092724c", 0x1000, 0x0, &(0x7f00000004c0)={0x11, 0x1b, r6, 0x1, 0xb, 0x6, @remote}, 0x14) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000180)="aa", 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa4}, 0x7}, 0x1c) 214.427664ms ago: executing program 5 (id=1262): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x28) 181.375376ms ago: executing program 4 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 173.956117ms ago: executing program 5 (id=1264): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000440)="b9ff0331684403", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000d80)='sys_enter\x00', r7, 0x0, 0x7}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 153.237419ms ago: executing program 0 (id=1265): creat(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) write$P9_RWALK(r3, 0x0, 0xfffffd18) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) close(r4) 150.841819ms ago: executing program 2 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x8, 0x1, 0x7ffc1ffb}]}) mlockall(0x7) 141.97411ms ago: executing program 4 (id=1267): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) 68.095395ms ago: executing program 5 (id=1268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) gettid() syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x1, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) 67.456625ms ago: executing program 0 (id=1269): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_io_uring_setup(0x110d4, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noblock_validity}, {}, {@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee01}}, {}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@init_itable}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r2, 0x4b32, 0x91) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000003140100000e000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000540)={0x100010, 0x100048, 0x100000}, 0x20) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) 19.115779ms ago: executing program 5 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0xbdae, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") 12.84925ms ago: executing program 0 (id=1271): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xprtrdma_mrs_zap\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200900, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x38}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0xfffffeff}], "aafada"}, @datasec={0x9, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r11}, 0x18) ioctl$TCSETSW2(r10, 0x5453, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r9, 0x308000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1272): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xa362, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x7df33ad1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0x8, 0x2a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x20, 0xfffffff9, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r8 = epoll_create(0x201) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf250200000008000400000000001c000680060001000a00000008000300e00000020600010002000000280006800800060000000000060001000a00000014000400ff0100000000000000000800000000010800030003000000080002000300000008000300030000000500050003000000"], 0x80}, 0x1, 0x0, 0x0, 0x40008014}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x90000001}) io_uring_setup(0x7291, &(0x7f0000000140)={0x0, 0xb32, 0x2, 0x0, 0x382}) accept4$inet(r8, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) kernel console output (not intermixed with test programs): nd 0x1003 tx timeout [ 63.988418][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.034645][ T5103] xt_CT: No such helper "snmp" [ 64.040324][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 64.040340][ T29] audit: type=1326 audit(1765908288.834:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f446def2005 code=0x7ffc0000 [ 64.070729][ T29] audit: type=1326 audit(1765908288.864:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f446def2005 code=0x7ffc0000 [ 64.094661][ T29] audit: type=1326 audit(1765908288.884:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f446def2005 code=0x7ffc0000 [ 64.118778][ T29] audit: type=1326 audit(1765908288.914:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f446def2005 code=0x7ffc0000 [ 64.142449][ T29] audit: type=1326 audit(1765908288.914:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 64.165909][ T29] audit: type=1326 audit(1765908288.914:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 64.189951][ T29] audit: type=1326 audit(1765908288.934:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 64.216494][ T29] audit: type=1326 audit(1765908289.014:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 64.275711][ T5106] 9p: Could not find request transport: = [ 64.336269][ T5109] __nla_validate_parse: 14 callbacks suppressed [ 64.336284][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.500'. [ 64.351612][ T5109] netlink: 108 bytes leftover after parsing attributes in process `syz.3.500'. [ 64.360832][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.500'. [ 64.370007][ T5109] netlink: 108 bytes leftover after parsing attributes in process `syz.3.500'. [ 64.379015][ T5109] netlink: 84 bytes leftover after parsing attributes in process `syz.3.500'. [ 64.391096][ T5110] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.451437][ T5114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.502'. [ 64.486022][ T5114] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 64.534164][ T5122] loop1: detected capacity change from 0 to 128 [ 64.545672][ T5122] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 64.555862][ T29] audit: type=1400 audit(1765908289.344:3165): avc: denied { mount } for pid=5121 comm="syz.1.506" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.628773][ T29] audit: type=1400 audit(1765908289.374:3166): avc: denied { create } for pid=5121 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 64.874497][ T3558] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 65.023990][ T5146] netlink: 'syz.0.513': attribute type 2 has an invalid length. [ 65.032591][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 65.061317][ T3569] bridge_slave_1: left allmulticast mode [ 65.067188][ T3569] bridge_slave_1: left promiscuous mode [ 65.073225][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.124598][ T3569] bridge_slave_0: left allmulticast mode [ 65.130518][ T3569] bridge_slave_0: left promiscuous mode [ 65.136239][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.300468][ T5166] syz1: rxe_newlink: already configured on vcan0 [ 65.307414][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 65.341089][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 65.370567][ T3569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.380525][ T3569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.391432][ T3569] bond0 (unregistering): Released all slaves [ 65.401029][ T3569] bond1 (unregistering): Released all slaves [ 65.415494][ T5146] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 65.426418][ T5146] bond1 (unregistering): Released all slaves [ 65.553315][ T3569] hsr_slave_0: left promiscuous mode [ 65.565530][ T3569] hsr_slave_1: left promiscuous mode [ 65.633608][ T3569] team0 (unregistering): Port device team_slave_1 removed [ 65.653262][ T3569] team0 (unregistering): Port device team_slave_0 removed [ 65.661259][ T3558] smc: removing ib device !yz! [ 65.796411][ T5200] loop2: detected capacity change from 0 to 512 [ 65.815736][ T5200] EXT4-fs: inline encryption not supported [ 65.855207][ T5200] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.520: bg 0: block 5: invalid block bitmap [ 65.921917][ T5200] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.520: error while reading EA inode 32 err=-116 [ 65.961253][ T5196] vcan0 speed is unknown, defaulting to 1000 [ 66.002327][ T5200] EXT4-fs (loop2): 1 orphan inode deleted [ 66.015146][ T5200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.118647][ T5189] vcan0 speed is unknown, defaulting to 1000 [ 66.203622][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.221794][ T5143] vcan0 speed is unknown, defaulting to 1000 [ 66.378515][ T5239] FAULT_INJECTION: forcing a failure. [ 66.378515][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 66.391267][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz.2.527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.391372][ T5239] Tainted: [W]=WARN [ 66.391378][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.391390][ T5239] Call Trace: [ 66.391398][ T5239] [ 66.391407][ T5239] __dump_stack+0x1d/0x30 [ 66.391435][ T5239] dump_stack_lvl+0xe8/0x140 [ 66.391504][ T5239] dump_stack+0x15/0x1b [ 66.391522][ T5239] should_fail_ex+0x265/0x280 [ 66.391613][ T5239] should_failslab+0x8c/0xb0 [ 66.391633][ T5239] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 66.391655][ T5239] ? __alloc_skb+0x324/0x4d0 [ 66.391705][ T5239] __alloc_skb+0x324/0x4d0 [ 66.391727][ T5239] ? __alloc_skb+0x24d/0x4d0 [ 66.391752][ T5239] netlink_ack+0xfd/0x500 [ 66.391818][ T5239] netlink_rcv_skb+0x192/0x220 [ 66.391848][ T5239] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.391928][ T5239] rtnetlink_rcv+0x1c/0x30 [ 66.391961][ T5239] netlink_unicast+0x5c0/0x690 [ 66.391987][ T5239] netlink_sendmsg+0x58b/0x6b0 [ 66.392019][ T5239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.392093][ T5239] __sock_sendmsg+0x145/0x180 [ 66.392149][ T5239] ____sys_sendmsg+0x31e/0x4a0 [ 66.392217][ T5239] ___sys_sendmsg+0x17b/0x1d0 [ 66.392255][ T5239] __x64_sys_sendmsg+0xd4/0x160 [ 66.392281][ T5239] x64_sys_call+0x17ba/0x3000 [ 66.392302][ T5239] do_syscall_64+0xd8/0x2c0 [ 66.392394][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.392484][ T5239] RIP: 0033:0x7f1f3725f749 [ 66.392498][ T5239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.392541][ T5239] RSP: 002b:00007f1f35cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.392564][ T5239] RAX: ffffffffffffffda RBX: 00007f1f374b5fa0 RCX: 00007f1f3725f749 [ 66.392586][ T5239] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000004 [ 66.392667][ T5239] RBP: 00007f1f35cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.392678][ T5239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.392690][ T5239] R13: 00007f1f374b6038 R14: 00007f1f374b5fa0 R15: 00007ffd208ff288 [ 66.392706][ T5239] [ 66.764739][ T5254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 66.814760][ T5258] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 66.856643][ T5143] chnl_net:caif_netlink_parms(): no params data found [ 66.910102][ T5258] loop2: detected capacity change from 0 to 512 [ 66.969149][ T5258] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 67.035480][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.035544][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.037026][ T5143] bridge_slave_0: entered allmulticast mode [ 67.037671][ T5143] bridge_slave_0: entered promiscuous mode [ 67.041708][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.041750][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.041844][ T5143] bridge_slave_1: entered allmulticast mode [ 67.042639][ T5143] bridge_slave_1: entered promiscuous mode [ 67.076231][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.077575][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.104687][ T5143] team0: Port device team_slave_0 added [ 67.105744][ T5143] team0: Port device team_slave_1 added [ 67.145821][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.145835][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.145864][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.146396][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.146409][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.146436][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.214016][ T5143] hsr_slave_0: entered promiscuous mode [ 67.417606][ T5143] hsr_slave_1: entered promiscuous mode [ 67.424573][ T5143] debugfs: 'hsr0' already exists in 'hsr' [ 67.430860][ T5143] Cannot create hsr debugfs directory [ 67.545512][ T5298] loop4: detected capacity change from 0 to 512 [ 67.604305][ T5298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.617397][ T5298] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.644511][ T5143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.684844][ T5143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.791386][ T5143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.862795][ T5143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.891227][ T5298] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.540: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 68.039407][ T5298] EXT4-fs error (device loop4) in ext4_free_inode:361: Filesystem failed CRC [ 68.114523][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.157648][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.176109][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.183238][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.183739][ T5329] loop2: detected capacity change from 0 to 512 [ 68.192883][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.204114][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.223292][ T5143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.233963][ T5143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.236486][ T5329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 68.278629][ T5329] System zones: 0-2, 18-18, 34-34 [ 68.299152][ T5329] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.546: bg 0: block 248: padding at end of block bitmap is not set [ 68.314112][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.323919][ T5329] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.546: Failed to acquire dquot type 1 [ 68.337697][ T5329] EXT4-fs (loop2): 1 truncate cleaned up [ 68.344032][ T5329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.356885][ T5329] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.443966][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.602278][ T5354] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 68.616468][ T5354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.636991][ T5354] bond1: (slave geneve2): making interface the new active one [ 68.646044][ T5354] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 68.671316][ T5371] syz1: rxe_newlink: already configured on vcan0 [ 68.718652][ T5354] vcan0 speed is unknown, defaulting to 1000 [ 68.815333][ T5386] syz.4.556: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 68.825966][ T5387] ipvlan2: entered promiscuous mode [ 68.830141][ T5386] CPU: 0 UID: 0 PID: 5386 Comm: syz.4.556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.830175][ T5386] Tainted: [W]=WARN [ 68.830182][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.830193][ T5386] Call Trace: [ 68.830200][ T5386] [ 68.830208][ T5386] __dump_stack+0x1d/0x30 [ 68.830274][ T5386] dump_stack_lvl+0xe8/0x140 [ 68.830296][ T5386] dump_stack+0x15/0x1b [ 68.830316][ T5386] warn_alloc+0x12b/0x1a0 [ 68.830340][ T5386] ? __schedule+0x85f/0xcd0 [ 68.830425][ T5386] ? __rcu_read_unlock+0x4f/0x70 [ 68.830450][ T5386] __vmalloc_node_range_noprof+0xa0/0x1310 [ 68.830485][ T5386] ? __futex_wait+0x1fa/0x260 [ 68.830552][ T5386] ? __pfx_futex_wake_mark+0x10/0x10 [ 68.830571][ T5386] ? __rcu_read_unlock+0x4f/0x70 [ 68.830590][ T5386] ? avc_has_perm_noaudit+0xab/0x130 [ 68.830739][ T5386] ? should_fail_ex+0x30/0x280 [ 68.830762][ T5386] ? should_failslab+0x8c/0xb0 [ 68.830784][ T5386] vmalloc_user_noprof+0x7d/0xb0 [ 68.830848][ T5386] ? xskq_create+0x80/0xe0 [ 68.830878][ T5386] xskq_create+0x80/0xe0 [ 68.830953][ T5386] xsk_init_queue+0x95/0xf0 [ 68.830982][ T5386] xsk_setsockopt+0x3f5/0x640 [ 68.831011][ T5386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.831108][ T5386] __sys_setsockopt+0x184/0x200 [ 68.831135][ T5386] __x64_sys_setsockopt+0x64/0x80 [ 68.831160][ T5386] x64_sys_call+0x21d5/0x3000 [ 68.831184][ T5386] do_syscall_64+0xd8/0x2c0 [ 68.831224][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.831245][ T5386] RIP: 0033:0x7f7d5f54f749 [ 68.831261][ T5386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.831279][ T5386] RSP: 002b:00007f7d5dfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.831299][ T5386] RAX: ffffffffffffffda RBX: 00007f7d5f7a5fa0 RCX: 00007f7d5f54f749 [ 68.831312][ T5386] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 68.831325][ T5386] RBP: 00007f7d5f5d3f91 R08: 0000000000000004 R09: 0000000000000000 [ 68.831384][ T5386] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.831397][ T5386] R13: 00007f7d5f7a6038 R14: 00007f7d5f7a5fa0 R15: 00007ffc50c03ba8 [ 68.831414][ T5386] [ 68.831421][ T5386] Mem-Info: [ 68.836036][ T5387] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 68.846762][ T5386] active_anon:10990 inactive_anon:0 isolated_anon:0 [ 68.846762][ T5386] active_file:19687 inactive_file:2713 isolated_file:0 [ 68.846762][ T5386] unevictable:29 dirty:193 writeback:0 [ 68.846762][ T5386] slab_reclaimable:3393 slab_unreclaimable:45628 [ 68.846762][ T5386] mapped:32588 shmem:3144 pagetables:1467 [ 68.846762][ T5386] sec_pagetables:0 bounce:0 [ 68.846762][ T5386] kernel_misc_reclaimable:0 [ 68.846762][ T5386] free:1801590 free_pcp:30101 free_cma:0 [ 69.115464][ T5386] Node 0 active_anon:43960kB inactive_anon:0kB active_file:78748kB inactive_file:10852kB unevictable:116kB isolated(anon):0kB isolated(file):0kB mapped:130352kB dirty:772kB writeback:0kB shmem:12576kB kernel_stack:4656kB pagetables:5868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 69.143042][ T5386] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.172897][ T5386] lowmem_reserve[]: 0 2880 7859 7859 [ 69.178351][ T5386] Node 0 DMA32 free:2945972kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949500kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 69.209774][ T5386] lowmem_reserve[]: 0 0 4978 4978 [ 69.214882][ T5386] Node 0 Normal free:4245028kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43960kB inactive_anon:0kB active_file:78748kB inactive_file:10852kB unevictable:116kB writepending:760kB zspages:0kB present:5242880kB managed:5098240kB mlocked:116kB bounce:0kB free_pcp:117040kB local_pcp:72340kB free_cma:0kB [ 69.248424][ T5386] lowmem_reserve[]: 0 0 0 0 [ 69.252967][ T5386] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.265828][ T5386] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945972kB [ 69.282625][ T5386] Node 0 Normal: 473*4kB (U) 124*8kB (UME) 78*16kB (UME) 124*32kB (UM) 324*64kB (UME) 249*128kB (UME) 155*256kB (UM) 67*512kB (UME) 40*1024kB (UME) 27*2048kB (UM) 980*4096kB (UM) = 4245028kB [ 69.301954][ T5386] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 69.311296][ T5386] 25505 total pagecache pages [ 69.316065][ T5386] 0 pages in swap cache [ 69.320286][ T5386] Free swap = 124996kB [ 69.324497][ T5386] Total swap = 124996kB [ 69.328681][ T5386] 2097051 pages RAM [ 69.332498][ T5386] 0 pages HighMem/MovableOnly [ 69.337431][ T5386] 81276 pages reserved [ 69.342052][ T5329] syz.2.546 (5329) used greatest stack depth: 9416 bytes left [ 69.387705][ T5143] veth0_vlan: entered promiscuous mode [ 69.396508][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.405652][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 69.405740][ T29] audit: type=1326 audit(1765908294.194:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 69.435745][ T29] audit: type=1326 audit(1765908294.194:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 69.460061][ T29] audit: type=1400 audit(1765908294.234:3492): avc: denied { name_connect } for pid=5393 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 69.497451][ T29] audit: type=1400 audit(1765908294.284:3493): avc: denied { shutdown } for pid=5393 comm="syz.4.559" lport=38782 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.504457][ T5143] veth1_vlan: entered promiscuous mode [ 69.562181][ T5143] veth0_macvtap: entered promiscuous mode [ 69.563698][ T5143] veth1_macvtap: entered promiscuous mode [ 69.610705][ T5401] FAULT_INJECTION: forcing a failure. [ 69.610705][ T5401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.610750][ T5401] CPU: 0 UID: 0 PID: 5401 Comm: syz.2.561 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.610784][ T5401] Tainted: [W]=WARN [ 69.610792][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.610842][ T5401] Call Trace: [ 69.610849][ T5401] [ 69.610857][ T5401] __dump_stack+0x1d/0x30 [ 69.610892][ T5401] dump_stack_lvl+0xe8/0x140 [ 69.610912][ T5401] dump_stack+0x15/0x1b [ 69.610956][ T5401] should_fail_ex+0x265/0x280 [ 69.610979][ T5401] should_fail_alloc_page+0xf2/0x100 [ 69.611030][ T5401] __alloc_frozen_pages_noprof+0x109/0x360 [ 69.611062][ T5401] alloc_pages_mpol+0xb3/0x260 [ 69.611093][ T5401] vma_alloc_folio_noprof+0x1aa/0x300 [ 69.611126][ T5401] do_wp_page+0xf60/0x2510 [ 69.611229][ T5401] ? css_rstat_updated+0xbb/0x280 [ 69.611251][ T5401] ? __rcu_read_lock+0x37/0x50 [ 69.611275][ T5401] handle_mm_fault+0x7b0/0x2c60 [ 69.611310][ T5401] do_user_addr_fault+0x630/0x1080 [ 69.611431][ T5401] ? ksys_mmap_pgoff+0xc2/0x310 [ 69.611465][ T5401] exc_page_fault+0x62/0xa0 [ 69.611536][ T5401] asm_exc_page_fault+0x26/0x30 [ 69.611554][ T5401] RIP: 0033:0x7f1f37120943 [ 69.611571][ T5401] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 69.611655][ T5401] RSP: 002b:00007f1f35cc64a0 EFLAGS: 00010202 [ 69.611673][ T5401] RAX: 0000000000000400 RBX: 00007f1f35cc6540 RCX: 00007f1f2d8a7000 [ 69.611759][ T5401] RDX: 00007f1f35cc66e0 RSI: 0000000000000000 RDI: 00007f1f35cc65e0 [ 69.611775][ T5401] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 69.611788][ T5401] R10: 00000000000000bc R11: 00007f1f35cc6540 R12: 0000000000000001 [ 69.611800][ T5401] R13: 00007f1f372ffc40 R14: 0000000000000020 R15: 00007f1f35cc65e0 [ 69.611819][ T5401] [ 69.611829][ T5401] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 69.614194][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.627211][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.653699][ T5401] loop2: detected capacity change from 0 to 512 [ 69.664909][ T3561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.756179][ T5401] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.561: iget: bad extra_isize 90 (inode size 256) [ 69.784471][ T3561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875876][ T5401] EXT4-fs (loop2): Remounting filesystem read-only [ 69.883456][ T5401] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 69.883486][ T5401] EXT4-fs (loop2): 1 orphan inode deleted [ 69.883935][ T5401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.924209][ T29] audit: type=1400 audit(1765908294.714:3494): avc: denied { mounton } for pid=5143 comm="syz-executor" path="/root/syzkaller.EzRaVz/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.925086][ T29] audit: type=1400 audit(1765908294.714:3495): avc: denied { mount } for pid=5143 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.925518][ T29] audit: type=1400 audit(1765908294.714:3496): avc: denied { mounton } for pid=5143 comm="syz-executor" path="/root/syzkaller.EzRaVz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.925859][ T29] audit: type=1400 audit(1765908294.714:3497): avc: denied { mounton } for pid=5143 comm="syz-executor" path="/root/syzkaller.EzRaVz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.930929][ T3561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931350][ T4523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.934398][ T29] audit: type=1400 audit(1765908294.714:3498): avc: denied { bind } for pid=5408 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.934429][ T29] audit: type=1400 audit(1765908294.724:3499): avc: denied { mounton } for pid=5143 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.989082][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.018972][ T5412] loop4: detected capacity change from 0 to 1024 [ 70.019350][ T5412] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.019986][ T5412] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.072882][ T5424] rdma_rxe: rxe_newlink: failed to add vcan0 [ 70.073334][ T5424] __nla_validate_parse: 8 callbacks suppressed [ 70.073346][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 70.076916][ T5426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.563'. [ 70.076938][ T5426] netlink: 108 bytes leftover after parsing attributes in process `syz.4.563'. [ 70.077006][ T5426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.563'. [ 70.077082][ T5426] netlink: 108 bytes leftover after parsing attributes in process `syz.4.563'. [ 70.077097][ T5426] netlink: 84 bytes leftover after parsing attributes in process `syz.4.563'. [ 70.094130][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 70.203160][ T5426] infiniband !yz!: set active [ 70.285814][ T5426] infiniband !yz!: added team_slave_0 [ 70.318558][ T5426] RDS/IB: !yz!: added [ 70.318580][ T5426] smc: adding ib device !yz! with port count 1 [ 70.318593][ T5426] smc: ib device !yz! port 1 has no pnetid [ 70.413948][ T5438] loop2: detected capacity change from 0 to 1024 [ 70.446239][ T5438] EXT4-fs: Ignoring removed orlov option [ 70.480960][ T5438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.532563][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.760417][ T5461] vcan0 speed is unknown, defaulting to 1000 [ 70.818939][ T5466] sch_tbf: peakrate 12500000 is lower than or equals to rate 6829859379779001161 ! [ 71.030900][ T5485] netlink: 'syz.0.584': attribute type 2 has an invalid length. [ 71.038742][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 71.054852][ T5485] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 71.079679][ T5485] bond1 (unregistering): Released all slaves [ 71.337513][ T5501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.591'. [ 71.363624][ T5503] netlink: 'syz.2.592': attribute type 30 has an invalid length. [ 71.395490][ T5501] ipvlan2: entered promiscuous mode [ 71.401866][ T5501] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 71.663139][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 71.672113][ T5509] netlink: 'syz.5.594': attribute type 30 has an invalid length. [ 71.696790][ T3573] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.716904][ T3573] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.732756][ T3573] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.770264][ T3573] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.450664][ T5563] ŞŞŞŞŞ!: renamed from bond_slave_1 [ 72.458997][ T5565] rdma_rxe: rxe_newlink: failed to add vcan0 [ 72.480180][ T5560] loop5: detected capacity change from 0 to 8192 [ 72.497227][ T5561] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 72.526622][ T5561] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 72.528721][ T5571] loop4: detected capacity change from 0 to 1024 [ 72.545117][ T5571] EXT4-fs: Ignoring removed orlov option [ 72.553387][ T5561] bond1 (unregistering): Released all slaves [ 72.569852][ T5571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.599380][ T5578] pimreg: tun_chr_ioctl cmd 2148553947 [ 72.606419][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.632516][ T5580] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2 [ 72.700393][ T5588] rdma_rxe: rxe_newlink: failed to add vcan0 [ 72.811287][ T5597] rdma_rxe: rxe_newlink: failed to add vcan0 [ 72.817565][ T5599] loop2: detected capacity change from 0 to 1024 [ 72.825361][ T5599] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.854945][ T5599] EXT4-fs: Mount option(s) incompatible with ext2 [ 72.879410][ T5599] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.890432][ T5604] loop4: detected capacity change from 0 to 1024 [ 72.915510][ T5604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.927822][ T5604] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.939662][ T5604] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.626: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.957903][ T5604] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 72.970292][ T5604] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.970292][ T5604] [ 72.987269][ T5610] loop2: detected capacity change from 0 to 1024 [ 72.994166][ T5610] EXT4-fs: Ignoring removed orlov option [ 73.002759][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.014321][ T5610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.040835][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.216663][ T5623] vcan0 speed is unknown, defaulting to 1000 [ 73.297485][ T5627] rdma_rxe: rxe_newlink: failed to add vcan0 [ 73.413239][ T5643] program syz.5.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.446942][ T5649] loop4: detected capacity change from 0 to 128 [ 73.473627][ T5651] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20000 [ 73.490823][ T5653] bridge1: entered promiscuous mode [ 73.496192][ T5653] bridge1: entered allmulticast mode [ 73.515114][ T5653] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 73.529732][ T5653] veth9: entered promiscuous mode [ 73.618927][ T5665] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.681303][ T5672] loop5: detected capacity change from 0 to 1024 [ 73.688962][ T5672] EXT4-fs: Ignoring removed nobh option [ 73.688989][ T5672] EXT4-fs: Ignoring removed bh option [ 73.704313][ T5672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.708551][ T5672] netlink: 'syz.5.652': attribute type 1 has an invalid length. [ 73.791618][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.869728][ T5682] netlink: 'syz.0.654': attribute type 30 has an invalid length. [ 73.963083][ T5681] mmap: syz.5.653 (5681): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 74.194828][ T3554] bio_check_eod: 32 callbacks suppressed [ 74.194844][ T3554] kworker/u8:26: attempt to access beyond end of device [ 74.194844][ T3554] loop4: rw=1, sector=154, nr_sectors = 6 limit=128 [ 74.267718][ T5697] loop5: detected capacity change from 0 to 1024 [ 74.287583][ T5697] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.304612][ T5697] EXT4-fs: Mount option(s) incompatible with ext2 [ 74.343218][ T5697] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.439853][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 74.439872][ T29] audit: type=1326 audit(1765908299.204:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 74.469626][ T29] audit: type=1326 audit(1765908299.204:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 74.566949][ T5704] loop5: detected capacity change from 0 to 1024 [ 74.584632][ T5704] EXT4-fs: Ignoring removed oldalloc option [ 74.605602][ T5708] FAULT_INJECTION: forcing a failure. [ 74.605602][ T5708] name failslab, interval 1, probability 0, space 0, times 0 [ 74.618374][ T5708] CPU: 1 UID: 0 PID: 5708 Comm: syz.4.664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.618409][ T5708] Tainted: [W]=WARN [ 74.618417][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.618436][ T5708] Call Trace: [ 74.618443][ T5708] [ 74.618451][ T5708] __dump_stack+0x1d/0x30 [ 74.618508][ T5708] dump_stack_lvl+0xe8/0x140 [ 74.618532][ T5708] dump_stack+0x15/0x1b [ 74.618553][ T5708] should_fail_ex+0x265/0x280 [ 74.618578][ T5708] should_failslab+0x8c/0xb0 [ 74.618603][ T5708] __kmalloc_noprof+0xb9/0x5a0 [ 74.618723][ T5708] ? offload_action_alloc+0x2b/0x180 [ 74.618753][ T5708] offload_action_alloc+0x2b/0x180 [ 74.618780][ T5708] tcf_action_offload_add_ex+0x11f/0x3c0 [ 74.618879][ T5708] tcf_action_init+0x333/0x6d0 [ 74.618920][ T5708] tc_ctl_action+0x291/0x830 [ 74.618957][ T5708] ? __pfx_tc_ctl_action+0x10/0x10 [ 74.619053][ T5708] rtnetlink_rcv_msg+0x65a/0x6d0 [ 74.619089][ T5708] netlink_rcv_skb+0x123/0x220 [ 74.619163][ T5708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.619266][ T5708] rtnetlink_rcv+0x1c/0x30 [ 74.619318][ T5708] netlink_unicast+0x5c0/0x690 [ 74.619411][ T5708] netlink_sendmsg+0x58b/0x6b0 [ 74.619540][ T5708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.619573][ T5708] __sock_sendmsg+0x145/0x180 [ 74.619645][ T5708] ____sys_sendmsg+0x31e/0x4a0 [ 74.619674][ T5708] ___sys_sendmsg+0x17b/0x1d0 [ 74.619731][ T5708] __x64_sys_sendmsg+0xd4/0x160 [ 74.619762][ T5708] x64_sys_call+0x17ba/0x3000 [ 74.619789][ T5708] do_syscall_64+0xd8/0x2c0 [ 74.619853][ T5708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.619877][ T5708] RIP: 0033:0x7f7d5f54f749 [ 74.619895][ T5708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.619913][ T5708] RSP: 002b:00007f7d5dfb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.619935][ T5708] RAX: ffffffffffffffda RBX: 00007f7d5f7a5fa0 RCX: 00007f7d5f54f749 [ 74.619948][ T5708] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 74.619968][ T5708] RBP: 00007f7d5dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.619982][ T5708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.619994][ T5708] R13: 00007f7d5f7a6038 R14: 00007f7d5f7a5fa0 R15: 00007ffc50c03ba8 [ 74.620011][ T5708] [ 74.620884][ T5704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.889757][ T5704] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.925335][ T5704] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.663: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.939985][ T5704] EXT4-fs (loop5): Remounting filesystem read-only [ 74.945987][ T5716] rdma_rxe: rxe_newlink: failed to add vcan0 [ 74.981800][ T5715] vcan0 speed is unknown, defaulting to 1000 [ 74.988825][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.178447][ T29] audit: type=1400 audit(1765908299.924:3763): avc: denied { map } for pid=5731 comm="syz.5.672" path="/dev/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 75.202509][ T29] audit: type=1400 audit(1765908299.934:3764): avc: denied { read append } for pid=5731 comm="syz.5.672" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.226044][ T29] audit: type=1400 audit(1765908299.934:3765): avc: denied { open } for pid=5731 comm="syz.5.672" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.249335][ T29] audit: type=1400 audit(1765908299.934:3766): avc: denied { ioctl } for pid=5731 comm="syz.5.672" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.336143][ T29] audit: type=1400 audit(1765908300.124:3767): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.425037][ T5738] loop5: detected capacity change from 0 to 1024 [ 75.432978][ T29] audit: type=1326 audit(1765908300.184:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.5.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf77df749 code=0x7ffc0000 [ 75.456435][ T29] audit: type=1326 audit(1765908300.184:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.5.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaf77df749 code=0x7ffc0000 [ 75.479878][ T29] audit: type=1326 audit(1765908300.184:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.5.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf77df749 code=0x7ffc0000 [ 75.521784][ T5738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.544379][ T5738] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.603056][ T5738] netlink: 'syz.5.673': attribute type 21 has an invalid length. [ 75.615339][ T5738] __nla_validate_parse: 37 callbacks suppressed [ 75.615357][ T5738] netlink: 132 bytes leftover after parsing attributes in process `syz.5.673'. [ 75.819932][ T5738] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.673: Freeing blocks not in datazone - block = 0, count = 16 [ 75.944963][ T3558] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:30: bg 0: block 112: padding at end of block bitmap is not set [ 75.976691][ T3558] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.989135][ T3558] EXT4-fs (loop5): This should not happen!! Data will be lost [ 75.989135][ T3558] [ 76.046568][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 76.066382][ T4335] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 76.066409][ T4335] EXT4-fs (loop5): This should not happen!! Data will be lost [ 76.066409][ T4335] [ 76.066421][ T4335] EXT4-fs (loop5): Total free blocks count 0 [ 76.066445][ T4335] EXT4-fs (loop5): Free/Dirty block details [ 76.066460][ T4335] EXT4-fs (loop5): free_blocks=16 [ 76.066474][ T4335] EXT4-fs (loop5): dirty_blocks=64 [ 76.066489][ T4335] EXT4-fs (loop5): Block reservation details [ 76.154519][ T5760] netlink: 'syz.5.678': attribute type 30 has an invalid length. [ 76.174169][ T5762] syz1: rxe_newlink: already configured on vcan0 [ 76.186131][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 76.435295][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 76.872848][ T5796] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.899997][ T5796] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.909261][ T5796] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.690: corrupted inode contents [ 76.921860][ T5796] EXT4-fs (loop2): Remounting filesystem read-only [ 76.960916][ T5796] EXT4-fs (loop2): 1 truncate cleaned up [ 76.967144][ T4336] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.977855][ T4336] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.005130][ T4336] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.026783][ T5796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.083708][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.116489][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 77.131269][ T5806] hsr_slave_1 (unregistering): left promiscuous mode [ 77.153308][ T5810] EXT4-fs: Ignoring removed oldalloc option [ 77.213437][ T5810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.245036][ T5810] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.343472][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.353175][ T5827] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.364160][ T5827] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.389148][ T5827] JBD2: no valid journal superblock found [ 77.395003][ T5827] EXT4-fs (loop4): Could not load journal inode [ 77.441044][ T5832] syz1: rxe_newlink: already configured on vcan0 [ 77.484560][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 77.509340][ T5837] netlink: 'syz.2.705': attribute type 30 has an invalid length. [ 77.602335][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 77.688264][ T5846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.706'. [ 78.186336][ T5851] set_capacity_and_notify: 3 callbacks suppressed [ 78.186384][ T5851] loop4: detected capacity change from 0 to 1024 [ 78.229409][ T5851] EXT4-fs: Ignoring removed orlov option [ 78.280640][ T5851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.375055][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.407960][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 78.416963][ T5865] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 78.484895][ T5874] loop5: detected capacity change from 0 to 512 [ 78.494718][ T5874] EXT4-fs: dax option not supported [ 78.547019][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 78.563841][ T5874] loop5: detected capacity change from 0 to 512 [ 78.572143][ T5874] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 78.607388][ T5874] EXT4-fs (loop5): failed to open journal device unknown-block(8,0) -16 [ 78.689226][ T5883] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 78.779185][ T5889] rdma_rxe: rxe_newlink: failed to add vcan0 [ 78.893616][ T5899] loop5: detected capacity change from 0 to 512 [ 78.980862][ T5909] Cannot find set identified by id 0 to match [ 79.050911][ T5909] lo speed is unknown, defaulting to 1000 [ 79.058027][ T5909] lo speed is unknown, defaulting to 1000 [ 79.074675][ T5909] lo speed is unknown, defaulting to 1000 [ 79.152859][ T5929] rdma_rxe: rxe_newlink: failed to add vcan0 [ 79.183005][ T5909] infiniband syz2: set active [ 79.187786][ T5909] infiniband syz2: added lo [ 79.192681][ T3488] lo speed is unknown, defaulting to 1000 [ 79.215148][ T5909] RDS/IB: syz2: added [ 79.219535][ T5909] smc: adding ib device syz2 with port count 1 [ 79.226029][ T5909] smc: ib device syz2 port 1 has no pnetid [ 79.232415][ T3488] lo speed is unknown, defaulting to 1000 [ 79.243900][ T5937] loop4: detected capacity change from 0 to 1024 [ 79.247169][ T5909] lo speed is unknown, defaulting to 1000 [ 79.283016][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.334916][ T5937] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.386556][ T5909] lo speed is unknown, defaulting to 1000 [ 79.398960][ T3555] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:27: lblock 0 mapped to illegal pblock 0 (length 6) [ 79.439472][ T5909] lo speed is unknown, defaulting to 1000 [ 79.452194][ T3555] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 79.464677][ T3555] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.464677][ T3555] [ 79.476631][ T3555] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:27: lblock 8 mapped to illegal pblock 8 (length 8) [ 79.522571][ T5909] lo speed is unknown, defaulting to 1000 [ 79.527965][ T3555] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 79.540889][ T3555] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.540889][ T3555] [ 79.560095][ T5909] lo speed is unknown, defaulting to 1000 [ 79.626934][ T5973] loop2: detected capacity change from 0 to 128 [ 79.639730][ T5973] FAT-fs (loop2): bogus number of reserved sectors [ 79.646370][ T5973] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 79.649196][ T29] kauditd_printk_skb: 1010 callbacks suppressed [ 79.649212][ T29] audit: type=1400 audit(1765908304.434:4775): avc: denied { mount } for pid=5961 comm="syz.3.749" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 79.655803][ T5973] FAT-fs (loop2): Can't find a valid FAT filesystem [ 79.663807][ T5967] xt_hashlimit: max too large, truncated to 1048576 [ 79.697958][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.806405][ T5979] netlink: 'syz.2.752': attribute type 2 has an invalid length. [ 79.823609][ T29] audit: type=1400 audit(1765908304.614:4776): avc: denied { setopt } for pid=5974 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.824016][ T5979] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 79.915986][ T5979] bond2 (unregistering): Released all slaves [ 80.037724][ T5990] loop4: detected capacity change from 0 to 4096 [ 80.037908][ T29] audit: type=1326 audit(1765908304.804:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.067562][ T29] audit: type=1326 audit(1765908304.804:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.091008][ T29] audit: type=1326 audit(1765908304.804:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.114377][ T29] audit: type=1326 audit(1765908304.804:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.137755][ T29] audit: type=1326 audit(1765908304.804:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.161206][ T29] audit: type=1326 audit(1765908304.804:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.184889][ T29] audit: type=1326 audit(1765908304.804:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.185872][ T5990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.208170][ T29] audit: type=1326 audit(1765908304.804:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5985 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 80.390670][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.429578][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.461884][ T6006] bond0 (unregistering): Released all slaves [ 80.535251][ T6015] loop5: detected capacity change from 0 to 1024 [ 80.542258][ T6015] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.549099][ T6015] EXT4-fs: Mount option(s) incompatible with ext2 [ 80.571169][ T6017] loop2: detected capacity change from 0 to 1024 [ 80.577925][ T6017] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.595707][ T6015] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.656510][ T6021] loop5: detected capacity change from 0 to 4096 [ 80.665432][ T6017] EXT4-fs: Mount option(s) incompatible with ext2 [ 80.677345][ T6017] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.701172][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.734538][ T6021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.831989][ T6034] xt_hashlimit: max too large, truncated to 1048576 [ 80.841968][ T6033] __nla_validate_parse: 20 callbacks suppressed [ 80.841986][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 80.903314][ T6038] netlink: 14 bytes leftover after parsing attributes in process `syz.5.766'. [ 80.917365][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.976599][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.011196][ T6038] bond0 (unregistering): Released all slaves [ 81.025035][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 81.041248][ T6043] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.052396][ T6043] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 81.063198][ T6043] EXT4-fs (loop2): invalid journal inode [ 81.069866][ T6043] EXT4-fs (loop2): can't get journal size [ 81.077273][ T6043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.129594][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.159674][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.249179][ T6069] vcan0 speed is unknown, defaulting to 1000 [ 81.258678][ T6072] FAULT_INJECTION: forcing a failure. [ 81.258678][ T6072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.272167][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.5.780 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.272203][ T6072] Tainted: [W]=WARN [ 81.272209][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.272220][ T6072] Call Trace: [ 81.272227][ T6072] [ 81.272263][ T6072] __dump_stack+0x1d/0x30 [ 81.272292][ T6072] dump_stack_lvl+0xe8/0x140 [ 81.272317][ T6072] dump_stack+0x15/0x1b [ 81.272339][ T6072] should_fail_ex+0x265/0x280 [ 81.272420][ T6072] should_fail_alloc_page+0xf2/0x100 [ 81.272444][ T6072] __alloc_frozen_pages_noprof+0x109/0x360 [ 81.272479][ T6072] alloc_pages_mpol+0xb3/0x260 [ 81.272513][ T6072] alloc_pages_noprof+0x90/0x130 [ 81.272584][ T6072] kimage_alloc_control_pages+0x2ec/0x7d0 [ 81.272613][ T6072] machine_kexec_prepare+0xf6/0xb30 [ 81.272712][ T6072] ? kimage_alloc_control_pages+0x77b/0x7d0 [ 81.272737][ T6072] ? __pfx_alloc_pgt_page+0x10/0x10 [ 81.272768][ T6072] do_kexec_load+0x401/0x530 [ 81.272790][ T6072] __se_sys_kexec_load+0x134/0x160 [ 81.272864][ T6072] __x64_sys_kexec_load+0x55/0x70 [ 81.272890][ T6072] x64_sys_call+0x2e77/0x3000 [ 81.272917][ T6072] do_syscall_64+0xd8/0x2c0 [ 81.272963][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.272982][ T6072] RIP: 0033:0x7fcaf77df749 [ 81.272998][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.273019][ T6072] RSP: 002b:00007fcaf6247038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 81.273042][ T6072] RAX: ffffffffffffffda RBX: 00007fcaf7a35fa0 RCX: 00007fcaf77df749 [ 81.273087][ T6072] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 81.273112][ T6072] RBP: 00007fcaf6247090 R08: 0000000000000000 R09: 0000000000000000 [ 81.273126][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.273138][ T6072] R13: 00007fcaf7a36038 R14: 00007fcaf7a35fa0 R15: 00007ffc0e2d0998 [ 81.273156][ T6072] [ 81.551762][ T6069] lo speed is unknown, defaulting to 1000 [ 81.587264][ T6080] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.615277][ T6080] vhci_hcd vhci_hcd.2: invalid port number 96 [ 81.621429][ T6080] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 81.718149][ T6086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.774016][ T6100] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.786352][ T6100] vhci_hcd vhci_hcd.2: invalid port number 96 [ 81.792653][ T6100] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 81.851933][ T6102] netlink: 'syz.2.793': attribute type 3 has an invalid length. [ 81.868593][ T6102] netlink: 'syz.2.793': attribute type 3 has an invalid length. [ 81.943758][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.976297][ T6110] EXT4-fs: Ignoring removed orlov option [ 81.995479][ T6115] FAULT_INJECTION: forcing a failure. [ 81.995479][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 82.008275][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.5.796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.008308][ T6115] Tainted: [W]=WARN [ 82.008324][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.008337][ T6115] Call Trace: [ 82.008346][ T6115] [ 82.008356][ T6115] __dump_stack+0x1d/0x30 [ 82.008382][ T6115] dump_stack_lvl+0xe8/0x140 [ 82.008406][ T6115] dump_stack+0x15/0x1b [ 82.008426][ T6115] should_fail_ex+0x265/0x280 [ 82.008472][ T6115] should_failslab+0x8c/0xb0 [ 82.008518][ T6115] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 82.008545][ T6115] ? alloc_unbound_pwq+0x641/0x7e0 [ 82.008573][ T6115] alloc_unbound_pwq+0x641/0x7e0 [ 82.008617][ T6115] apply_wqattrs_prepare+0x1eb/0x670 [ 82.008642][ T6115] alloc_workqueue_noprof+0xd63/0x1320 [ 82.008712][ T6115] ? dev_set_name+0x83/0xb0 [ 82.008747][ T6115] hci_register_dev+0x167/0x570 [ 82.008771][ T6115] hci_uart_tty_ioctl+0x520/0x5c0 [ 82.008800][ T6115] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 82.008861][ T6115] tty_ioctl+0x83f/0xb80 [ 82.008882][ T6115] ? __pfx_tty_ioctl+0x10/0x10 [ 82.008903][ T6115] __se_sys_ioctl+0xce/0x140 [ 82.008994][ T6115] __x64_sys_ioctl+0x43/0x50 [ 82.009022][ T6115] x64_sys_call+0x14b0/0x3000 [ 82.009047][ T6115] do_syscall_64+0xd8/0x2c0 [ 82.009101][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.009124][ T6115] RIP: 0033:0x7fcaf77df749 [ 82.009140][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.009156][ T6115] RSP: 002b:00007fcaf6247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.009238][ T6115] RAX: ffffffffffffffda RBX: 00007fcaf7a35fa0 RCX: 00007fcaf77df749 [ 82.009252][ T6115] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000006 [ 82.009267][ T6115] RBP: 00007fcaf6247090 R08: 0000000000000000 R09: 0000000000000000 [ 82.009280][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.009292][ T6115] R13: 00007fcaf7a36038 R14: 00007fcaf7a35fa0 R15: 00007ffc0e2d0998 [ 82.009311][ T6115] [ 82.222625][ T6115] Bluetooth: Can't register HCI device [ 82.239273][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.269555][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.349531][ T6123] FAULT_INJECTION: forcing a failure. [ 82.349531][ T6123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.362824][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.0.801 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.362856][ T6123] Tainted: [W]=WARN [ 82.362863][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.362874][ T6123] Call Trace: [ 82.362880][ T6123] [ 82.362888][ T6123] __dump_stack+0x1d/0x30 [ 82.362964][ T6123] dump_stack_lvl+0xe8/0x140 [ 82.362987][ T6123] dump_stack+0x15/0x1b [ 82.363008][ T6123] should_fail_ex+0x265/0x280 [ 82.363063][ T6123] should_fail+0xb/0x20 [ 82.363084][ T6123] should_fail_usercopy+0x1a/0x20 [ 82.363109][ T6123] _copy_to_iter+0xd2/0xe70 [ 82.363136][ T6123] ? chacha_block_generic+0x218/0x240 [ 82.363244][ T6123] get_random_bytes_user+0x12d/0x290 [ 82.363285][ T6123] ? import_ubuf+0xe8/0x120 [ 82.363315][ T6123] __x64_sys_getrandom+0xcf/0x1a0 [ 82.363356][ T6123] x64_sys_call+0x1beb/0x3000 [ 82.363382][ T6123] do_syscall_64+0xd8/0x2c0 [ 82.363456][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.363479][ T6123] RIP: 0033:0x7f157505f749 [ 82.363518][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.363538][ T6123] RSP: 002b:00007f1573ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 82.363560][ T6123] RAX: ffffffffffffffda RBX: 00007f15752b5fa0 RCX: 00007f157505f749 [ 82.363573][ T6123] RDX: 0000000000000001 RSI: fffffffffffffdfa RDI: 0000200000000280 [ 82.363592][ T6123] RBP: 00007f1573ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.363607][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.363621][ T6123] R13: 00007f15752b6038 R14: 00007f15752b5fa0 R15: 00007fff60238868 [ 82.363643][ T6123] [ 82.683684][ T6162] EXT4-fs: Ignoring removed orlov option [ 82.708254][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.752447][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.804731][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 82.952311][ T6185] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.959554][ T6185] EXT4-fs: Mount option(s) incompatible with ext2 [ 82.985730][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 82.994769][ T6185] netlink: 108 bytes leftover after parsing attributes in process `syz.4.821'. [ 83.015723][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 83.024817][ T6185] netlink: 108 bytes leftover after parsing attributes in process `syz.4.821'. [ 83.033926][ T6185] netlink: 84 bytes leftover after parsing attributes in process `syz.4.821'. [ 83.045404][ T6185] !yz!: rxe_newlink: already configured on team_slave_0 [ 83.087449][ T6193] SELinux: Context GPL is not valid (left unmapped). [ 83.101288][ T6193] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 83.188251][ T887] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.209322][ T887] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.232609][ T887] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.264922][ T887] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.354198][ T6223] set_capacity_and_notify: 6 callbacks suppressed [ 83.354215][ T6223] loop4: detected capacity change from 0 to 512 [ 83.381797][ T6223] EXT4-fs: Ignoring removed nobh option [ 83.398818][ T6223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.446321][ T6223] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.835: corrupted inode contents [ 83.446525][ T6223] EXT4-fs (loop4): Remounting filesystem read-only [ 83.466334][ T6231] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 83.466412][ T6231] FAULT_INJECTION: forcing a failure. [ 83.466412][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 83.466481][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.0.837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 83.466515][ T6231] Tainted: [W]=WARN [ 83.466523][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.466537][ T6231] Call Trace: [ 83.466546][ T6231] [ 83.466591][ T6231] __dump_stack+0x1d/0x30 [ 83.466702][ T6231] dump_stack_lvl+0xe8/0x140 [ 83.466772][ T6231] dump_stack+0x15/0x1b [ 83.466794][ T6231] should_fail_ex+0x265/0x280 [ 83.466820][ T6231] should_failslab+0x8c/0xb0 [ 83.466907][ T6231] __kmalloc_noprof+0xb9/0x5a0 [ 83.466934][ T6231] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 83.467062][ T6231] usb_hcd_submit_urb+0x5d3/0x1200 [ 83.467113][ T6231] usb_submit_urb+0xaa3/0xbb0 [ 83.467219][ T6231] proc_do_submiturb+0x19c7/0x1d20 [ 83.467252][ T6231] proc_submiturb+0x7b/0xa0 [ 83.467313][ T6231] usbdev_ioctl+0xcb6/0x1700 [ 83.467337][ T6231] ? __pfx_usbdev_ioctl+0x10/0x10 [ 83.467363][ T6231] __se_sys_ioctl+0xce/0x140 [ 83.467445][ T6231] __x64_sys_ioctl+0x43/0x50 [ 83.467479][ T6231] x64_sys_call+0x14b0/0x3000 [ 83.467550][ T6231] do_syscall_64+0xd8/0x2c0 [ 83.467596][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.467619][ T6231] RIP: 0033:0x7f157505f749 [ 83.467638][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.467657][ T6231] RSP: 002b:00007f1573ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.467722][ T6231] RAX: ffffffffffffffda RBX: 00007f15752b5fa0 RCX: 00007f157505f749 [ 83.467737][ T6231] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 83.467752][ T6231] RBP: 00007f1573ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.467766][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.467780][ T6231] R13: 00007f15752b6038 R14: 00007f15752b5fa0 R15: 00007fff60238868 [ 83.467801][ T6231] [ 83.484593][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 83.484733][ T6223] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 83.484776][ T6223] EXT4-fs (loop4): 1 orphan inode deleted [ 83.485461][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.560770][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.943214][ T6276] loop5: detected capacity change from 0 to 1024 [ 83.992306][ T6278] loop2: detected capacity change from 0 to 1024 [ 84.010266][ T6278] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.017630][ T6278] EXT4-fs: Mount option(s) incompatible with ext2 [ 84.026651][ T6276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.059926][ T6278] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.122263][ T6289] loop2: detected capacity change from 0 to 512 [ 84.127627][ T6288] loop4: detected capacity change from 0 to 1024 [ 84.128070][ T6288] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.131334][ T6289] EXT4-fs: Ignoring removed nobh option [ 84.152526][ T6289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.152993][ T6289] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.855: corrupted inode contents [ 84.153192][ T6289] EXT4-fs (loop2): Remounting filesystem read-only [ 84.153241][ T6289] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 84.153281][ T6289] EXT4-fs (loop2): 1 orphan inode deleted [ 84.153935][ T6289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.154462][ T6288] EXT4-fs: Mount option(s) incompatible with ext2 [ 84.178486][ T6288] !yz!: rxe_newlink: already configured on team_slave_0 [ 84.225921][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.320769][ T6297] vcan0 speed is unknown, defaulting to 1000 [ 84.427389][ T6297] lo speed is unknown, defaulting to 1000 [ 84.605246][ T6321] loop4: detected capacity change from 0 to 1024 [ 84.621205][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.622644][ T6321] EXT4-fs: Ignoring removed orlov option [ 84.653926][ T6323] hsr_slave_0: left promiscuous mode [ 84.668237][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.694180][ T6329] loop5: detected capacity change from 0 to 1024 [ 84.700825][ T6323] hsr_slave_1: left promiscuous mode [ 84.705562][ T6329] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.713278][ T6329] EXT4-fs: Mount option(s) incompatible with ext2 [ 84.732200][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 84.732237][ T29] audit: type=1326 audit(1765908309.524:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 84.762180][ T29] audit: type=1326 audit(1765908309.524:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 84.785662][ T29] audit: type=1326 audit(1765908309.524:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 84.809181][ T29] audit: type=1326 audit(1765908309.544:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 84.833001][ T29] audit: type=1326 audit(1765908309.544:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 84.858110][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.858417][ T6334] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.930692][ T6338] FAULT_INJECTION: forcing a failure. [ 84.930692][ T6338] name failslab, interval 1, probability 0, space 0, times 0 [ 84.943573][ T6338] CPU: 1 UID: 0 PID: 6338 Comm: syz.4.871 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.943604][ T6338] Tainted: [W]=WARN [ 84.943611][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.943625][ T6338] Call Trace: [ 84.943634][ T6338] [ 84.943642][ T6338] __dump_stack+0x1d/0x30 [ 84.943730][ T6338] dump_stack_lvl+0xe8/0x140 [ 84.943756][ T6338] dump_stack+0x15/0x1b [ 84.943778][ T6338] should_fail_ex+0x265/0x280 [ 84.943802][ T6338] should_failslab+0x8c/0xb0 [ 84.943823][ T6338] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 84.943849][ T6338] ? alloc_inode+0x9a/0x170 [ 84.943870][ T6338] alloc_inode+0x9a/0x170 [ 84.943966][ T6338] path_from_stashed+0xec/0x330 [ 84.943986][ T6338] ? _raw_spin_unlock+0x26/0x50 [ 84.944034][ T6338] ? __pfx_proc_ns_get_link+0x10/0x10 [ 84.944064][ T6338] ns_get_path+0x62/0x80 [ 84.944084][ T6338] proc_ns_get_link+0x80/0x160 [ 84.944185][ T6338] ? __pfx_proc_ns_get_link+0x10/0x10 [ 84.944214][ T6338] pick_link+0x4b0/0x8d0 [ 84.944239][ T6338] step_into_slowpath+0x351/0x480 [ 84.944326][ T6338] path_openat+0x18db/0x23b0 [ 84.944360][ T6338] do_filp_open+0x109/0x230 [ 84.944507][ T6338] do_sys_openat2+0xa6/0x150 [ 84.944539][ T6338] __x64_sys_openat+0xf2/0x120 [ 84.944573][ T6338] x64_sys_call+0x2b07/0x3000 [ 84.944595][ T6338] do_syscall_64+0xd8/0x2c0 [ 84.944705][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.944719][ T6338] RIP: 0033:0x7f7d5f54df90 [ 84.944731][ T6338] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 84.944765][ T6338] RSP: 002b:00007f7d5dfb6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 84.944780][ T6338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d5f54df90 [ 84.944789][ T6338] RDX: 0000000000000000 RSI: 00007f7d5f5d407e RDI: 00000000ffffff9c [ 84.944797][ T6338] RBP: 00007f7d5f5d407e R08: 0000000000000000 R09: 0000000000000000 [ 84.944805][ T6338] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 84.944840][ T6338] R13: 00007f7d5f7a6038 R14: 00007f7d5f7a5fa0 R15: 00007ffc50c03ba8 [ 84.944852][ T6338] [ 85.331801][ T29] audit: type=1400 audit(1765908310.124:5332): avc: denied { write } for pid=6348 comm="syz.4.877" path="socket:[14690]" dev="sockfs" ino=14690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.362795][ T6359] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.406867][ T6355] loop5: detected capacity change from 0 to 512 [ 85.478461][ T29] audit: type=1326 audit(1765908310.264:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3725f749 code=0x7ffc0000 [ 85.501999][ T29] audit: type=1326 audit(1765908310.264:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3725f749 code=0x7ffc0000 [ 85.525469][ T29] audit: type=1326 audit(1765908310.264:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3725f749 code=0x7ffc0000 [ 85.549040][ T29] audit: type=1326 audit(1765908310.264:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3725f749 code=0x7ffc0000 [ 85.574899][ T6355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.591355][ T6355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.610402][ T6355] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.641392][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.708635][ T6388] rdma_rxe: rxe_newlink: failed to add vcan0 [ 85.725249][ T6386] FAULT_INJECTION: forcing a failure. [ 85.725249][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.738508][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.5.888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.738542][ T6386] Tainted: [W]=WARN [ 85.738549][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.738562][ T6386] Call Trace: [ 85.738568][ T6386] [ 85.738577][ T6386] __dump_stack+0x1d/0x30 [ 85.738604][ T6386] dump_stack_lvl+0xe8/0x140 [ 85.738693][ T6386] dump_stack+0x15/0x1b [ 85.738711][ T6386] should_fail_ex+0x265/0x280 [ 85.738736][ T6386] should_fail+0xb/0x20 [ 85.738837][ T6386] should_fail_usercopy+0x1a/0x20 [ 85.738864][ T6386] copy_to_user_nofault+0x7f/0x120 [ 85.738937][ T6386] bpf_probe_write_user+0x83/0xc0 [ 85.738966][ T6386] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 85.739044][ T6386] bpf_trace_run2+0x107/0x1d0 [ 85.739187][ T6386] ? mutex_unlock+0x4f/0x90 [ 85.739215][ T6386] __bpf_trace_sys_enter+0x10/0x30 [ 85.739235][ T6386] trace_sys_enter+0x86/0xf0 [ 85.739255][ T6386] syscall_trace_enter+0x13e/0x1e0 [ 85.739280][ T6386] do_syscall_64+0xb2/0x2c0 [ 85.739370][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.739391][ T6386] RIP: 0033:0x7fcaf77df749 [ 85.739406][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.739428][ T6386] RSP: 002b:00007fcaf6247038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 85.739450][ T6386] RAX: ffffffffffffffda RBX: 00007fcaf7a35fa0 RCX: 00007fcaf77df749 [ 85.739462][ T6386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 85.739474][ T6386] RBP: 00007fcaf6247090 R08: 0000000000000000 R09: 0000000000000000 [ 85.739486][ T6386] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 85.739497][ T6386] R13: 00007fcaf7a36038 R14: 00007fcaf7a35fa0 R15: 00007ffc0e2d0998 [ 85.739611][ T6386] [ 85.760764][ T6394] FAULT_INJECTION: forcing a failure. [ 85.760764][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.918623][ T6402] __nla_validate_parse: 22 callbacks suppressed [ 85.918640][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.897'. [ 85.922740][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.3.893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.922841][ T6394] Tainted: [W]=WARN [ 85.922848][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.922934][ T6394] Call Trace: [ 85.922941][ T6394] [ 85.922949][ T6394] __dump_stack+0x1d/0x30 [ 85.922974][ T6394] dump_stack_lvl+0xe8/0x140 [ 85.922996][ T6394] dump_stack+0x15/0x1b [ 85.923016][ T6394] should_fail_ex+0x265/0x280 [ 85.923038][ T6394] should_fail+0xb/0x20 [ 85.923126][ T6394] should_fail_usercopy+0x1a/0x20 [ 85.923148][ T6394] copy_to_user_nofault+0x7f/0x120 [ 85.923175][ T6394] bpf_probe_write_user+0x83/0xc0 [ 85.923201][ T6394] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 85.923278][ T6394] bpf_trace_run2+0x107/0x1d0 [ 85.923311][ T6394] __bpf_trace_sys_enter+0x10/0x30 [ 85.923333][ T6394] trace_sys_enter+0x86/0xf0 [ 85.923355][ T6394] syscall_trace_enter+0x13e/0x1e0 [ 85.923378][ T6394] do_syscall_64+0xb2/0x2c0 [ 85.923409][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.923438][ T6394] RIP: 0033:0x7f446debf749 [ 85.923454][ T6394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.923472][ T6394] RSP: 002b:00007f446c91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 85.923493][ T6394] RAX: ffffffffffffffda RBX: 00007f446e115fa0 RCX: 00007f446debf749 [ 85.923506][ T6394] RDX: 00000000000001dd RSI: 0000000000000008 RDI: 0000000000000003 [ 85.923519][ T6394] RBP: 00007f446c91f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.923600][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.923618][ T6394] R13: 00007f446e116038 R14: 00007f446e115fa0 R15: 00007ffc1c7b0948 [ 85.923636][ T6394] [ 85.988330][ T6404] loop4: detected capacity change from 0 to 1024 [ 86.155278][ T6404] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.165778][ T6404] EXT4-fs: Mount option(s) incompatible with ext2 [ 86.176313][ T6409] netlink: 'syz.3.899': attribute type 30 has an invalid length. [ 86.192022][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 86.200964][ T6404] netlink: 108 bytes leftover after parsing attributes in process `syz.4.898'. [ 86.210372][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 86.220915][ T6404] netlink: 108 bytes leftover after parsing attributes in process `syz.4.898'. [ 86.229960][ T6404] netlink: 84 bytes leftover after parsing attributes in process `syz.4.898'. [ 86.278611][ T6415] !yz!: rxe_newlink: already configured on team_slave_0 [ 86.328588][ T6419] FAULT_INJECTION: forcing a failure. [ 86.328588][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.341767][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.4.902 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.341799][ T6419] Tainted: [W]=WARN [ 86.341805][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.341816][ T6419] Call Trace: [ 86.341824][ T6419] [ 86.341832][ T6419] __dump_stack+0x1d/0x30 [ 86.341919][ T6419] dump_stack_lvl+0xe8/0x140 [ 86.341939][ T6419] dump_stack+0x15/0x1b [ 86.341957][ T6419] should_fail_ex+0x265/0x280 [ 86.341982][ T6419] should_fail+0xb/0x20 [ 86.342085][ T6419] should_fail_usercopy+0x1a/0x20 [ 86.342143][ T6419] copy_to_user_nofault+0x7f/0x120 [ 86.342169][ T6419] bpf_probe_write_user+0x83/0xc0 [ 86.342210][ T6419] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 86.342306][ T6419] bpf_trace_run2+0x107/0x1d0 [ 86.342333][ T6419] ? mutex_unlock+0x4f/0x90 [ 86.342357][ T6419] __bpf_trace_sys_enter+0x10/0x30 [ 86.342378][ T6419] trace_sys_enter+0x86/0xf0 [ 86.342475][ T6419] syscall_trace_enter+0x13e/0x1e0 [ 86.342499][ T6419] do_syscall_64+0xb2/0x2c0 [ 86.342531][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.342553][ T6419] RIP: 0033:0x7f7d5f54f749 [ 86.342579][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.342596][ T6419] RSP: 002b:00007f7d5dfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.342615][ T6419] RAX: ffffffffffffffda RBX: 00007f7d5f7a5fa0 RCX: 00007f7d5f54f749 [ 86.342634][ T6419] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 86.342645][ T6419] RBP: 00007f7d5dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.342702][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.342712][ T6419] R13: 00007f7d5f7a6038 R14: 00007f7d5f7a5fa0 R15: 00007ffc50c03ba8 [ 86.342729][ T6419] [ 86.722081][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 86.784287][ T6441] FAULT_INJECTION: forcing a failure. [ 86.784287][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 86.797237][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.0.910 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.797311][ T6441] Tainted: [W]=WARN [ 86.797319][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.797332][ T6441] Call Trace: [ 86.797339][ T6441] [ 86.797348][ T6441] __dump_stack+0x1d/0x30 [ 86.797374][ T6441] dump_stack_lvl+0xe8/0x140 [ 86.797477][ T6441] dump_stack+0x15/0x1b [ 86.797501][ T6441] should_fail_ex+0x265/0x280 [ 86.797530][ T6441] should_failslab+0x8c/0xb0 [ 86.797627][ T6441] kmem_cache_alloc_noprof+0x69/0x4b0 [ 86.797695][ T6441] ? audit_log_start+0x342/0x720 [ 86.797716][ T6441] audit_log_start+0x342/0x720 [ 86.797734][ T6441] ? audit_seccomp+0x32/0x100 [ 86.797785][ T6441] audit_seccomp+0x48/0x100 [ 86.797812][ T6441] ? __seccomp_filter+0x832/0x1260 [ 86.797866][ T6441] __seccomp_filter+0x843/0x1260 [ 86.797891][ T6441] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 86.797994][ T6441] ? vfs_write+0x7e8/0x960 [ 86.798015][ T6441] ? __cond_resched+0x4e/0x90 [ 86.798067][ T6441] __secure_computing+0x82/0x150 [ 86.798093][ T6441] syscall_trace_enter+0xcf/0x1e0 [ 86.798115][ T6441] do_syscall_64+0xb2/0x2c0 [ 86.798229][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.798249][ T6441] RIP: 0033:0x7f157505f749 [ 86.798265][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.798299][ T6441] RSP: 002b:00007f1573ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 86.798322][ T6441] RAX: ffffffffffffffda RBX: 00007f15752b5fa0 RCX: 00007f157505f749 [ 86.798335][ T6441] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000006 [ 86.798392][ T6441] RBP: 00007f1573ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.798404][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.798433][ T6441] R13: 00007f15752b6038 R14: 00007f15752b5fa0 R15: 00007fff60238868 [ 86.798449][ T6441] [ 86.803667][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.908'. [ 87.059346][ T6450] loop5: detected capacity change from 0 to 1024 [ 87.074509][ T6450] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.081534][ T6450] EXT4-fs: Mount option(s) incompatible with ext2 [ 87.115115][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.912'. [ 87.124206][ T6450] netlink: 108 bytes leftover after parsing attributes in process `syz.5.912'. [ 87.134662][ T6450] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.197219][ T6460] EXT4-fs: Ignoring removed orlov option [ 87.250549][ T6460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.297824][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.421278][ T6483] rdma_rxe: rxe_newlink: failed to add vcan0 [ 87.497294][ T6491] IPv6: Can't replace route, no match found [ 87.504536][ T6490] !yz!: rxe_newlink: already configured on team_slave_0 [ 87.508473][ T6493] FAT-fs (loop5): bogus number of reserved sectors [ 87.515562][ T6491] netlink: 'syz.2.924': attribute type 4 has an invalid length. [ 87.518410][ T6493] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 87.535515][ T6493] FAT-fs (loop5): Can't find a valid FAT filesystem [ 87.707216][ T6506] netlink: 'syz.5.926': attribute type 2 has an invalid length. [ 87.724806][ T6506] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 87.738124][ T6506] bond0 (unregistering): Released all slaves [ 87.826000][ T6516] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.837068][ T6516] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.861262][ T6516] JBD2: no valid journal superblock found [ 87.867039][ T6516] EXT4-fs (loop4): Could not load journal inode [ 87.893680][ T6516] vcan0 speed is unknown, defaulting to 1000 [ 88.005086][ T6516] lo speed is unknown, defaulting to 1000 [ 88.317232][ T6518] vcan0 speed is unknown, defaulting to 1000 [ 88.336239][ T6522] syz1: rxe_newlink: already configured on vcan0 [ 88.542212][ T6518] lo speed is unknown, defaulting to 1000 [ 88.602418][ T6536] vcan0 speed is unknown, defaulting to 1000 [ 88.775448][ T6536] lo speed is unknown, defaulting to 1000 [ 88.893567][ T6534] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.913897][ T6515] siw: device registration error -23 [ 89.121055][ T6570] set_capacity_and_notify: 3 callbacks suppressed [ 89.121071][ T6570] loop4: detected capacity change from 0 to 512 [ 89.183844][ T6578] vcan0 speed is unknown, defaulting to 1000 [ 89.218781][ T6570] EXT4-fs (loop4): too many log groups per flexible block group [ 89.230478][ T6570] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 89.265837][ T6570] EXT4-fs (loop4): mount failed [ 89.390636][ T6578] lo speed is unknown, defaulting to 1000 [ 89.443843][ T6584] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 89.721139][ T3491] hid_parser_main: 8 callbacks suppressed [ 89.721157][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.734396][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.741954][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.749413][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.756862][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.764340][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.771901][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.779392][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.786793][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.794458][ T3491] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 89.805601][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 89.805617][ T29] audit: type=1400 audit(1765908314.494:6000): avc: denied { create } for pid=6626 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.831558][ T29] audit: type=1400 audit(1765908314.494:6001): avc: denied { read write } for pid=6626 comm="syz.0.971" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.841933][ T6636] loop4: detected capacity change from 0 to 1024 [ 89.855162][ T29] audit: type=1400 audit(1765908314.494:6002): avc: denied { open } for pid=6626 comm="syz.0.971" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.885504][ T29] audit: type=1400 audit(1765908314.504:6003): avc: denied { create } for pid=6626 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.905397][ T29] audit: type=1400 audit(1765908314.504:6004): avc: denied { setopt } for pid=6626 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.905875][ T6636] EXT4-fs: Ignoring removed orlov option [ 89.925145][ T29] audit: type=1326 audit(1765908314.514:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.0.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 89.925179][ T29] audit: type=1400 audit(1765908314.544:6006): avc: denied { create } for pid=6603 comm="syz.5.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.976080][ T29] audit: type=1400 audit(1765908314.664:6007): avc: denied { write } for pid=6622 comm="syz.2.969" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.999665][ T29] audit: type=1400 audit(1765908314.664:6008): avc: denied { open } for pid=6622 comm="syz.2.969" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.023208][ T29] audit: type=1400 audit(1765908314.664:6009): avc: denied { ioctl } for pid=6622 comm="syz.2.969" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.049760][ T3491] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 90.066730][ T6604] siw: device registration error -23 [ 90.087309][ T6636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.125713][ T6647] netlink: 'syz.0.976': attribute type 30 has an invalid length. [ 90.232375][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.261301][ T6654] vcan0 speed is unknown, defaulting to 1000 [ 90.299936][ T6665] loop2: detected capacity change from 0 to 512 [ 90.349601][ T6665] EXT4-fs (loop2): too many log groups per flexible block group [ 90.358457][ T6665] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 90.398103][ T6665] EXT4-fs (loop2): mount failed [ 90.458521][ T6681] loop4: detected capacity change from 0 to 1024 [ 90.461786][ T6654] lo speed is unknown, defaulting to 1000 [ 90.476091][ T6681] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.503891][ T6681] EXT4-fs: Mount option(s) incompatible with ext2 [ 90.522287][ T6681] !yz!: rxe_newlink: already configured on team_slave_0 [ 90.594368][ T6658] rdma_rxe: rxe_newlink: failed to add vcan0 [ 90.692071][ T6696] sch_fq: defrate 4294967295 ignored. [ 90.808529][ T6704] syz.0.993 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.037237][ T6712] __nla_validate_parse: 35 callbacks suppressed [ 91.037320][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.052517][ T6712] netlink: 108 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.078677][ T6713] loop5: detected capacity change from 0 to 512 [ 91.098840][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.113732][ T6712] netlink: 108 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.122757][ T6712] netlink: 84 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.132005][ T6713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.159064][ T6714] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.179059][ T6713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.194754][ T6722] rdma_rxe: rxe_newlink: failed to add vcan0 [ 91.201443][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 91.216369][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 91.216732][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 91.234737][ T6713] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.261093][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 91.347356][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.358928][ T6728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6728 comm=syz.3.998 [ 91.388990][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.998'. [ 91.442349][ T6736] FAULT_INJECTION: forcing a failure. [ 91.442349][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 91.455275][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.2.1006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.455367][ T6736] Tainted: [W]=WARN [ 91.455376][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.455389][ T6736] Call Trace: [ 91.455398][ T6736] [ 91.455407][ T6736] __dump_stack+0x1d/0x30 [ 91.455437][ T6736] dump_stack_lvl+0xe8/0x140 [ 91.455463][ T6736] dump_stack+0x15/0x1b [ 91.455556][ T6736] should_fail_ex+0x265/0x280 [ 91.455586][ T6736] should_failslab+0x8c/0xb0 [ 91.455647][ T6736] kmem_cache_alloc_noprof+0x69/0x4b0 [ 91.455672][ T6736] ? skb_clone+0x151/0x1f0 [ 91.455699][ T6736] skb_clone+0x151/0x1f0 [ 91.455723][ T6736] nfnetlink_rcv+0x2fc/0x16c0 [ 91.455830][ T6736] ? kmem_cache_free+0xe3/0x3a0 [ 91.455858][ T6736] ? __kfree_skb+0x109/0x150 [ 91.455885][ T6736] ? consume_skb+0x49/0x150 [ 91.455911][ T6736] ? nlmon_xmit+0x4f/0x60 [ 91.456057][ T6736] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 91.456091][ T6736] ? __dev_queue_xmit+0x138d/0x1ec0 [ 91.456121][ T6736] ? __dev_queue_xmit+0x148/0x1ec0 [ 91.456227][ T6736] ? ref_tracker_free+0x37d/0x3e0 [ 91.456263][ T6736] netlink_unicast+0x5c0/0x690 [ 91.456357][ T6736] netlink_sendmsg+0x58b/0x6b0 [ 91.456447][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.456556][ T6736] __sock_sendmsg+0x145/0x180 [ 91.456614][ T6736] ____sys_sendmsg+0x31e/0x4a0 [ 91.456711][ T6736] ___sys_sendmsg+0x17b/0x1d0 [ 91.456750][ T6736] __x64_sys_sendmsg+0xd4/0x160 [ 91.456781][ T6736] x64_sys_call+0x17ba/0x3000 [ 91.456872][ T6736] do_syscall_64+0xd8/0x2c0 [ 91.456908][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.456928][ T6736] RIP: 0033:0x7f1f3725f749 [ 91.456945][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.456962][ T6736] RSP: 002b:00007f1f35cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.457017][ T6736] RAX: ffffffffffffffda RBX: 00007f1f374b5fa0 RCX: 00007f1f3725f749 [ 91.457030][ T6736] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000005 [ 91.457120][ T6736] RBP: 00007f1f35cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.457144][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.457159][ T6736] R13: 00007f1f374b6038 R14: 00007f1f374b5fa0 R15: 00007ffd208ff288 [ 91.457181][ T6736] [ 91.788173][ T6747] IPv6: Can't replace route, no match found [ 91.845466][ T6751] IPv6: Can't replace route, no match found [ 92.032830][ T6763] loop2: detected capacity change from 0 to 164 [ 92.055101][ T6763] iso9660: Bad value for 'check' [ 92.321701][ T6787] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 92.321701][ T6787] The task syz.3.1022 (6787) triggered the difference, watch for misbehavior. [ 92.381155][ T6793] IPv6: Can't replace route, no match found [ 92.626748][ T6821] netlink: 'syz.2.1040': attribute type 30 has an invalid length. [ 92.660295][ T3491] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.695399][ T3007] udevd[3007]: worker [3984] terminated by signal 33 (Unknown signal 33) [ 92.724589][ T3007] udevd[3007]: worker [3984] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0003/hidraw/hidraw0' [ 92.789757][ T6832] smc: net device bond0 applied user defined pnetid SYZ0 [ 92.806553][ T6830] loop4: detected capacity change from 0 to 1024 [ 92.829224][ T6830] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.862660][ T6830] EXT4-fs: Mount option(s) incompatible with ext2 [ 92.911790][ T6830] !yz!: rxe_newlink: already configured on team_slave_0 [ 93.076434][ T6848] loop5: detected capacity change from 0 to 512 [ 93.102565][ T6848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.144369][ T6848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.165725][ T6848] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.242425][ T6862] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 93.250826][ T6865] smc: net device bond0 erased user defined pnetid SYZ0 [ 93.259726][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.276910][ T6862] team0: Port device dummy0 added [ 93.296010][ T6865] FAULT_INJECTION: forcing a failure. [ 93.296010][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 93.308777][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.0.1056 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.308808][ T6865] Tainted: [W]=WARN [ 93.308814][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.308827][ T6865] Call Trace: [ 93.308834][ T6865] [ 93.308842][ T6865] __dump_stack+0x1d/0x30 [ 93.308915][ T6865] dump_stack_lvl+0xe8/0x140 [ 93.308947][ T6865] dump_stack+0x15/0x1b [ 93.308966][ T6865] should_fail_ex+0x265/0x280 [ 93.308989][ T6865] should_failslab+0x8c/0xb0 [ 93.309009][ T6865] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 93.309064][ T6865] ? __alloc_skb+0x324/0x4d0 [ 93.309087][ T6865] __alloc_skb+0x324/0x4d0 [ 93.309183][ T6865] ? __alloc_skb+0x24d/0x4d0 [ 93.309208][ T6865] netlink_ack+0xfd/0x500 [ 93.309238][ T6865] ? __pfx_smc_pnet_flush+0x10/0x10 [ 93.309303][ T6865] netlink_rcv_skb+0x192/0x220 [ 93.309385][ T6865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.309408][ T6865] genl_rcv+0x28/0x40 [ 93.309425][ T6865] netlink_unicast+0x5c0/0x690 [ 93.309490][ T6865] netlink_sendmsg+0x58b/0x6b0 [ 93.309519][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.309581][ T6865] __sock_sendmsg+0x145/0x180 [ 93.309599][ T6865] ____sys_sendmsg+0x31e/0x4a0 [ 93.309632][ T6865] ___sys_sendmsg+0x17b/0x1d0 [ 93.309667][ T6865] __x64_sys_sendmsg+0xd4/0x160 [ 93.309729][ T6865] x64_sys_call+0x17ba/0x3000 [ 93.309752][ T6865] do_syscall_64+0xd8/0x2c0 [ 93.309846][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.309865][ T6865] RIP: 0033:0x7f157505f749 [ 93.309880][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.309896][ T6865] RSP: 002b:00007f1573ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.309914][ T6865] RAX: ffffffffffffffda RBX: 00007f15752b5fa0 RCX: 00007f157505f749 [ 93.309936][ T6865] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 93.309948][ T6865] RBP: 00007f1573ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.309987][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.309998][ T6865] R13: 00007f15752b6038 R14: 00007f15752b5fa0 R15: 00007fff60238868 [ 93.310014][ T6865] [ 93.580229][ T6872] loop4: detected capacity change from 0 to 1024 [ 93.603466][ T6872] EXT4-fs: Ignoring removed orlov option [ 93.629986][ T6872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.651256][ T6879] loop5: detected capacity change from 0 to 512 [ 93.673457][ T6879] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.702955][ T6879] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.737527][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.747881][ T6890] rdma_rxe: rxe_newlink: failed to add vcan0 [ 93.770512][ T6879] EXT4-fs (loop5): 1 truncate cleaned up [ 93.776892][ T6879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.823372][ T6894] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.839234][ T6894] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 93.944719][ T6879] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 93.944719][ T6879] program syz.5.1059 not setting count and/or reply_len properly [ 93.982562][ T6901] rdma_rxe: rxe_newlink: failed to add vcan0 [ 93.987027][ T6879] vcan0 speed is unknown, defaulting to 1000 [ 94.099297][ T6909] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.157233][ T6910] loop4: detected capacity change from 0 to 512 [ 94.171958][ T6910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.201378][ T6879] lo speed is unknown, defaulting to 1000 [ 94.281780][ T6910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.304957][ T6910] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.319259][ T6904] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.338952][ T6920] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 94.348946][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.498890][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.542256][ T6935] rdma_rxe: rxe_newlink: failed to add vcan0 [ 94.638665][ T3547] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.733818][ T6960] FAULT_INJECTION: forcing a failure. [ 94.733818][ T6960] name failslab, interval 1, probability 0, space 0, times 0 [ 94.746560][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.3.1087 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.746598][ T6960] Tainted: [W]=WARN [ 94.746605][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.746618][ T6960] Call Trace: [ 94.746625][ T6960] [ 94.746634][ T6960] __dump_stack+0x1d/0x30 [ 94.746662][ T6960] dump_stack_lvl+0xe8/0x140 [ 94.746684][ T6960] dump_stack+0x15/0x1b [ 94.746706][ T6960] should_fail_ex+0x265/0x280 [ 94.746730][ T6960] should_failslab+0x8c/0xb0 [ 94.746753][ T6960] kmem_cache_alloc_noprof+0x69/0x4b0 [ 94.746776][ T6960] ? mas_alloc_nodes+0x1a2/0x210 [ 94.746808][ T6960] mas_alloc_nodes+0x1a2/0x210 [ 94.746838][ T6960] mas_preallocate+0x2ca/0x510 [ 94.746872][ T6960] mmap_region+0xc91/0x1410 [ 94.746916][ T6960] do_mmap+0x9b3/0xbe0 [ 94.746944][ T6960] vm_mmap_pgoff+0x17a/0x2e0 [ 94.746970][ T6960] ksys_mmap_pgoff+0xc2/0x310 [ 94.747005][ T6960] ? __x64_sys_mmap+0x49/0x70 [ 94.747035][ T6960] x64_sys_call+0x16bb/0x3000 [ 94.747060][ T6960] do_syscall_64+0xd8/0x2c0 [ 94.747092][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.747116][ T6960] RIP: 0033:0x7f446debf783 [ 94.747133][ T6960] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 94.747152][ T6960] RSP: 002b:00007f446c91ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.747174][ T6960] RAX: ffffffffffffffda RBX: 00000000000004bb RCX: 00007f446debf783 [ 94.747188][ T6960] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 94.747202][ T6960] RBP: 00002000000006c2 R08: 00000000ffffffff R09: 0000000000000000 [ 94.747216][ T6960] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 94.747228][ T6960] R13: 00007f446c91eef0 R14: 00007f446c91eeb0 R15: 0000200000000b80 [ 94.747248][ T6960] [ 94.949255][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 94.949305][ T29] audit: type=1326 audit(1765908319.544:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 94.978998][ T29] audit: type=1326 audit(1765908319.544:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.002857][ T29] audit: type=1326 audit(1765908319.544:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.026202][ T29] audit: type=1326 audit(1765908319.544:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d5f582005 code=0x7ffc0000 [ 95.049726][ T29] audit: type=1326 audit(1765908319.544:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.051775][ T48] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 95.073253][ T29] audit: type=1326 audit(1765908319.544:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.106288][ T29] audit: type=1326 audit(1765908319.544:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.130194][ T29] audit: type=1326 audit(1765908319.544:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.153894][ T6968] loop5: detected capacity change from 0 to 1024 [ 95.160449][ T29] audit: type=1326 audit(1765908319.544:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.183899][ T29] audit: type=1326 audit(1765908319.544:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.4.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5f54f749 code=0x7ffc0000 [ 95.216356][ T6968] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 95.246954][ T6968] JBD2: no valid journal superblock found [ 95.252753][ T6968] EXT4-fs (loop5): Could not load journal inode [ 95.274666][ T6975] tmpfs: Bad value for 'mpol' [ 95.360380][ T6987] vcan0 speed is unknown, defaulting to 1000 [ 95.433104][ T6987] lo speed is unknown, defaulting to 1000 [ 95.889896][ T7030] rdma_rxe: rxe_newlink: failed to add vcan0 [ 96.070065][ T7041] __nla_validate_parse: 21 callbacks suppressed [ 96.070081][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 96.085531][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 96.099224][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 96.296691][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 96.326190][ T7071] bridge_slave_1: left allmulticast mode [ 96.332139][ T7071] bridge_slave_1: left promiscuous mode [ 96.338576][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.386742][ T7071] bridge_slave_0: left allmulticast mode [ 96.392826][ T7071] bridge_slave_0: left promiscuous mode [ 96.398678][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.568417][ T7080] netlink: 'syz.2.1130': attribute type 2 has an invalid length. [ 96.576332][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1130'. [ 96.648245][ T7080] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 96.708336][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.716832][ T7080] bond2 (unregistering): Released all slaves [ 96.809927][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1133'. [ 96.819100][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 96.924090][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1136'. [ 96.933535][ T7095] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1136'. [ 96.934742][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 96.959969][ T7095] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.163659][ T7099] vcan0 speed is unknown, defaulting to 1000 [ 97.477272][ T7099] lo speed is unknown, defaulting to 1000 [ 97.489862][ T7109] IPv6: Can't replace route, no match found [ 97.635234][ T7111] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.134233][ T7128] loop5: detected capacity change from 0 to 1024 [ 98.189536][ T7128] EXT4-fs: Ignoring removed orlov option [ 98.217462][ T7131] loop4: detected capacity change from 0 to 512 [ 98.249117][ T7128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.269495][ T7131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.409558][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.439136][ T7131] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.518102][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.641918][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.797700][ T7174] loop4: detected capacity change from 0 to 1024 [ 98.895201][ T7174] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.930046][ T7180] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.947631][ T7174] EXT4-fs: Mount option(s) incompatible with ext2 [ 98.976710][ T7182] rdma_rxe: rxe_newlink: failed to add vcan0 [ 99.006922][ T7174] !yz!: rxe_newlink: already configured on team_slave_0 [ 99.147470][ T7195] IPv6: Can't replace route, no match found [ 99.242161][ T7201] FAULT_INJECTION: forcing a failure. [ 99.242161][ T7201] name failslab, interval 1, probability 0, space 0, times 0 [ 99.255003][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.4.1175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.255037][ T7201] Tainted: [W]=WARN [ 99.255044][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.255063][ T7201] Call Trace: [ 99.255069][ T7201] [ 99.255076][ T7201] __dump_stack+0x1d/0x30 [ 99.255162][ T7201] dump_stack_lvl+0xe8/0x140 [ 99.255186][ T7201] dump_stack+0x15/0x1b [ 99.255242][ T7201] should_fail_ex+0x265/0x280 [ 99.255266][ T7201] should_failslab+0x8c/0xb0 [ 99.255365][ T7201] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 99.255390][ T7201] ? __alloc_skb+0x324/0x4d0 [ 99.255434][ T7201] __alloc_skb+0x324/0x4d0 [ 99.255457][ T7201] ? __alloc_skb+0x24d/0x4d0 [ 99.255488][ T7201] audit_log_start+0x3a0/0x720 [ 99.255509][ T7201] ? __rcu_read_unlock+0x4f/0x70 [ 99.255528][ T7201] audit_seccomp+0x48/0x100 [ 99.255558][ T7201] ? __seccomp_filter+0x832/0x1260 [ 99.255645][ T7201] __seccomp_filter+0x843/0x1260 [ 99.255682][ T7201] ? __schedule+0x85f/0xcd0 [ 99.255754][ T7201] ? rep_movs_alternative+0x1e/0x90 [ 99.255778][ T7201] __secure_computing+0x82/0x150 [ 99.255801][ T7201] syscall_trace_enter+0xcf/0x1e0 [ 99.255883][ T7201] do_syscall_64+0xb2/0x2c0 [ 99.256004][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.256029][ T7201] RIP: 0033:0x7f7d5f54e15c [ 99.256047][ T7201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.256066][ T7201] RSP: 002b:00007f7d5dfb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.256086][ T7201] RAX: ffffffffffffffda RBX: 00007f7d5f7a5fa0 RCX: 00007f7d5f54e15c [ 99.256125][ T7201] RDX: 000000000000000f RSI: 00007f7d5dfb70a0 RDI: 0000000000000004 [ 99.256139][ T7201] RBP: 00007f7d5dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.256152][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.256163][ T7201] R13: 00007f7d5f7a6038 R14: 00007f7d5f7a5fa0 R15: 00007ffc50c03ba8 [ 99.256180][ T7201] [ 99.564101][ T7209] loop4: detected capacity change from 0 to 512 [ 99.577115][ T7209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.605088][ T7209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.639068][ T7209] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.670297][ T7217] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.681962][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.759268][ T7225] atomic_op ffff88812a830928 conn xmit_atomic 0000000000000000 [ 99.890900][ T7244] FAULT_INJECTION: forcing a failure. [ 99.890900][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 99.903815][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.0.1193 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.903849][ T7244] Tainted: [W]=WARN [ 99.903857][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.903907][ T7244] Call Trace: [ 99.903914][ T7244] [ 99.903923][ T7244] __dump_stack+0x1d/0x30 [ 99.904017][ T7244] dump_stack_lvl+0xe8/0x140 [ 99.904042][ T7244] dump_stack+0x15/0x1b [ 99.904063][ T7244] should_fail_ex+0x265/0x280 [ 99.904097][ T7244] should_failslab+0x8c/0xb0 [ 99.904138][ T7244] __kmalloc_cache_noprof+0x65/0x4c0 [ 99.904164][ T7244] ? __bpf_prog_dev_bound_init+0x37/0x1e0 [ 99.904220][ T7244] __bpf_prog_dev_bound_init+0x37/0x1e0 [ 99.904244][ T7244] bpf_prog_dev_bound_init+0x193/0x230 [ 99.904268][ T7244] bpf_prog_load+0xce4/0x1140 [ 99.904300][ T7244] ? security_bpf+0x2b/0x90 [ 99.904406][ T7244] __sys_bpf+0x469/0x7c0 [ 99.904435][ T7244] __x64_sys_bpf+0x41/0x50 [ 99.904470][ T7244] x64_sys_call+0x28e1/0x3000 [ 99.904496][ T7244] do_syscall_64+0xd8/0x2c0 [ 99.904605][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.904628][ T7244] RIP: 0033:0x7f157505f749 [ 99.904646][ T7244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.904666][ T7244] RSP: 002b:00007f1573ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.904697][ T7244] RAX: ffffffffffffffda RBX: 00007f15752b5fa0 RCX: 00007f157505f749 [ 99.904712][ T7244] RDX: 0000000000000080 RSI: 0000200000001800 RDI: 0000000000000005 [ 99.904726][ T7244] RBP: 00007f1573ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.904740][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.904753][ T7244] R13: 00007f15752b6038 R14: 00007f15752b5fa0 R15: 00007fff60238868 [ 99.904774][ T7244] [ 100.105353][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 100.105368][ T29] audit: type=1326 audit(1765908324.894:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f157505f749 code=0x7ffc0000 [ 100.181818][ T29] audit: type=1400 audit(1765908324.964:6878): avc: denied { bind } for pid=7247 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.201486][ T29] audit: type=1400 audit(1765908324.964:6879): avc: denied { listen } for pid=7247 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.221180][ T29] audit: type=1400 audit(1765908324.974:6880): avc: denied { getopt } for pid=7247 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.240828][ T29] audit: type=1400 audit(1765908324.974:6881): avc: denied { accept } for pid=7247 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.269697][ T7250] vcan0 speed is unknown, defaulting to 1000 [ 100.435631][ T7250] lo speed is unknown, defaulting to 1000 [ 100.518809][ T7257] rdma_rxe: rxe_newlink: failed to add vcan0 [ 100.617985][ T29] audit: type=1326 audit(1765908325.394:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.3.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 100.641568][ T29] audit: type=1326 audit(1765908325.404:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.3.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 100.665026][ T29] audit: type=1326 audit(1765908325.404:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f446def2005 code=0x7ffc0000 [ 100.807583][ T29] audit: type=1326 audit(1765908325.484:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.3.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 100.831150][ T29] audit: type=1326 audit(1765908325.484:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.3.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446debf749 code=0x7ffc0000 [ 100.976324][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.988820][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.243530][ T7321] syz1: rxe_newlink: already configured on vcan0 [ 101.273761][ T7321] __nla_validate_parse: 29 callbacks suppressed [ 101.273811][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 101.353857][ T7333] IPv6: Can't replace route, no match found [ 101.556408][ T7352] mmap: syz.0.1229 (7352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.576912][ T7351] loop5: detected capacity change from 0 to 512 [ 101.619597][ T7359] rdma_rxe: rxe_newlink: failed to add vcan0 [ 101.621343][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1231'. [ 101.650637][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 102.085780][ T7382] loop4: detected capacity change from 0 to 128 [ 102.110167][ T7386] rdma_rxe: rxe_newlink: failed to add vcan0 [ 102.112454][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.112454][ T7382] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 102.135677][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.135677][ T7382] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 102.147761][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.149622][ T7382] buffer_io_error: 18 callbacks suppressed [ 102.149638][ T7382] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 102.150082][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.150082][ T7382] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 102.187185][ T7382] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 102.198749][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.198749][ T7382] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 102.212991][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.212991][ T7382] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 102.226774][ T7382] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 102.238625][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.238625][ T7382] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 102.252686][ T7382] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 102.266822][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.266822][ T7382] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 102.291419][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.291419][ T7382] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 102.305263][ T7382] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 102.314947][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.314947][ T7382] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 102.328743][ T7382] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 102.337843][ T7382] syz.4.1239: attempt to access beyond end of device [ 102.337843][ T7382] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 102.351538][ T7384] loop5: detected capacity change from 0 to 512 [ 102.364118][ T7382] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 102.372918][ T7384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.381893][ T7382] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 102.393821][ T7382] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 102.409067][ T7382] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 102.442783][ T7384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.478678][ T7384] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.515193][ T7404] netlink: 'syz.0.1246': attribute type 30 has an invalid length. [ 102.559215][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.611055][ T7407] IPv6: Can't replace route, no match found [ 102.837269][ T7426] rdma_rxe: rxe_newlink: failed to add vcan0 [ 102.849901][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 103.049700][ T7432] netlink: 'syz.4.1256': attribute type 39 has an invalid length. [ 103.059966][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1255'. [ 103.069230][ T7430] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1255'. [ 103.098827][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1255'. [ 103.114842][ T7430] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1255'. [ 103.124011][ T7430] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1255'. [ 103.140786][ T7430] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.171339][ T7432] loop4: detected capacity change from 0 to 512 [ 103.194630][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.220208][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.229763][ T7432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.251809][ T7432] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.276760][ T7432] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.575274][ T7463] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.626402][ T7465] loop5: detected capacity change from 0 to 512 [ 103.647320][ T7470] netlink: 'syz.2.1272': attribute type 30 has an invalid length. [ 103.674840][ T7465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.708834][ T3007] ================================================================== [ 103.716977][ T3007] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 103.724249][ T3007] [ 103.726605][ T3007] read-write to 0xffff8881081af000 of 4 bytes by task 3303 on cpu 1: [ 103.734729][ T3007] dont_mount+0x2a/0x40 [ 103.738964][ T3007] vfs_unlink+0x2ae/0x440 [ 103.743327][ T3007] do_unlinkat+0x1cd/0x4b0 [ 103.747869][ T3007] __x64_sys_unlink+0x2e/0x40 [ 103.752750][ T3007] x64_sys_call+0x2f48/0x3000 [ 103.757475][ T3007] do_syscall_64+0xd8/0x2c0 [ 103.762005][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.767920][ T3007] [ 103.770280][ T3007] read to 0xffff8881081af000 of 4 bytes by task 3007 on cpu 0: [ 103.778045][ T3007] step_into_slowpath+0xe1/0x480 [ 103.783203][ T3007] path_lookupat+0x330/0x500 [ 103.787831][ T3007] filename_lookup+0x147/0x340 [ 103.792621][ T3007] do_readlinkat+0x7d/0x320 [ 103.797186][ T3007] __x64_sys_readlink+0x47/0x60 [ 103.802663][ T3007] x64_sys_call+0x2af1/0x3000 [ 103.807365][ T3007] do_syscall_64+0xd8/0x2c0 [ 103.812023][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.818033][ T3007] [ 103.820360][ T3007] value changed: 0x00300080 -> 0x00004080 [ 103.826083][ T3007] [ 103.828839][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 103.835006][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.845871][ T3007] Tainted: [W]=WARN [ 103.849775][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.860027][ T3007] ================================================================== [ 103.870118][ T7465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.885934][ T7465] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.935456][ T7478] syz.3.1273 (7478) used greatest stack depth: 9368 bytes left [ 103.954567][ T5143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.