last executing test programs: 1m27.939794844s ago: executing program 1 (id=237): r0 = getpid() setreuid(0xee00, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc00", 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080)=0xec, 0x4) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) r7 = syz_pidfd_open(r0, 0x0) prlimit64(r0, 0x6, &(0x7f0000000040)={0x80, 0x192b}, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x95340580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m27.8712705s ago: executing program 1 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x2, 0x9, 0x8001, 'pptp\x00', 'syz0\x00', {0x6f7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x2, 0x9, 0x8001, 'pptp\x00', 'syz0\x00', {0x6f7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) (async) gettid() (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) read$ptp(r4, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) 1m27.766464091s ago: executing program 1 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x88}, 0x1, 0x7}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 1m27.600472287s ago: executing program 1 (id=247): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.519080533s ago: executing program 1 (id=249): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRES64], 0x8, 0x2f7, &(0x7f0000000b00)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) faccessat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000183000/0x1000)=nil, 0x1000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40112, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x3, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r5, 0x5) 1m25.445593408s ago: executing program 0 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x10002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x100) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x80004506, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='+^@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1m25.315885011s ago: executing program 0 (id=263): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (fail_nth: 3) 1m25.246816808s ago: executing program 0 (id=264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendfile(r0, r3, 0x0, 0x8000002b) 1m25.241088788s ago: executing program 0 (id=265): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.028778916s ago: executing program 0 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000019c0)={0x0, 0x80, 0x2, 0x933, 0x0, 0x6, 0x7, 0x3, {0x0, @in6={{0xa, 0x4e23, 0x9, @private1, 0xffff8a7f}}, 0x2, 0x3, 0x100, 0xb, 0xbf}}, &(0x7f0000001a80)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000002000)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0x6}}}, &(0x7f00000020c0)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003880)=[{&(0x7f0000000580)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001940)=[{&(0x7f00000005c0)="d0e956c1e09026c0afba44de", 0xc}, {&(0x7f0000000600)="51aa04d9a41bced049a5eedbc8ba815f9592d2c9409b8a299dfb", 0x1a}, {&(0x7f0000000640)="2293443d1cf7203375c4a503d473793bbfd2183f2b635bf0aa6bb1c51597d6333098cba92f4e6b2e4e3e9035c1dcb765c0e96a5e4ec0250a9abe3281cae945a1a29a4cfb013bc5de560a3508785bf99954e1e820bb86fe2ebc3bb6b8989ab0ffc02cc07016df5a95fd4ee1f398b951dd8af73361fbd00c042d6cd3c1c93478721e429a4f983903c1d0e5967e097dda27e30aa4999557a87f857308e2560bf967a332f7e57cbb349f2bc7f083d2dcd1cc2b7e", 0xb2}, {&(0x7f0000000700)="249a135396720fdf1b7b98525569a1abf0b27a76c9427a21b9b5f186d810e55f04d777c25ffe3aba99ad6192617f337380a36179a69944a422d2864c8a5f9b76a527a5a23f1877e778905d000bd57b08ad9f91d2fed48e97a59f3c25f78440e01e4cd261018265f94a769721ac3ae0652963ad95e3ae161fea779176fa5adc53182d07df4dfe8a0284108bd70f58d43217820262dedbd637f584aa9b0c00f44d323aa71bc385ad416ad92b4cb3e7772337f0b520b9e2c307818aaa5c9aa41dfc5743b73b7dc7e46a3397d9516b810dfe74137d6f3447f1269fe69004982804e0d1338ec0d3aa", 0xe6}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="3fb599aa5b7ef1490e1110af3cc0bf66eac60dca7c1033a2cba86a8a238a9ef7948e2d084ef44cd39062db590a3f9053fc4085397db7ddda2ebe21a15b0ac25f5c4653dd79bb3ffffc9701d8144c64c5bd20af01807926b1a50536eb413230f98d130c29b0d7682cb72406ce87fba712ff5370ca26104eb2cb3e7aaf50fec4ac112e9e016b4055e55d30ce269b1df1235d5a481c78331f5e5d1c9b40e21708286fc0512a80b7", 0xa6}, {&(0x7f00000018c0)="563e82eb12ba74791ddf98b5ca28aa21f08bb6dda17208a8b23390a5557660508ba1ecfbaae98af4600681cd297ad6b0f2c0c44016c56e94fb40bdc39984793166de7767290fc873a3c2c988766320323a4634ea3327b1a1634c", 0x5a}], 0x7, &(0x7f0000001ac0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @sndrcv={0x30, 0x84, 0x1, {0xe, 0x0, 0x10c, 0x10, 0xfe0000, 0x7fffffff, 0x8, 0x1000, r1}}], 0x70, 0xc000}, {&(0x7f0000001b40)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001b80)="0789a4b8e4315b3658331a4f10ee4f4ac4acd2399d01f27c0f4fdd71f2b96f065bc209a8be852c3ee1862a9e2e02785a54d79ea4dd9f778bb66707d7acf79d6307ca033bd15dec2b5da03181dcddf82091292bf828bb779970d8265db2c03659fb304757ff8634ed82ae520ee261d6cbf607bd8beffa35c9408c7d1a3e7e132f38cd8fd2ca04f5c7f88e23da106f84df6cc45ff6a951de3dff7e10028918e3f82103dea8b0914eaafc4112fe9bc9e0da12098449e1cfe0f88b4f498a307a951fee8c96461346e9179a3edb6b274cd304", 0xd0}, {&(0x7f0000001c80)="1d6012677efe8526f1f4419e91fdcdc78abb88965549af05247a7ff213e3ed282a2d24d6e12d03ab9d583816d67f12dfd875b2802c11564f04f79a69fe192302d7d8428f78d199163257395e0f9bee2d8992695b49ba923af02c67328de5f378d4d069a61dc99764cc1136ab2b8ee47cf41b3eef022ca363b2c136ebfd6a88982cb6a80edfec22e048474a71f4604fedc57da1ecdd77e83f506d7b34da1cc4b9bebb20b96e34b699853593033a1852be890c78c0cd0b83dd64dc86145986d78043b9373124f6c2d61b183dd7b5d1", 0xce}, {&(0x7f0000001d80)="8327a36dbe2298ff66b30f15dfa962998e34b3cffde12f15ab137d9d4f980b9ddb", 0x21}, {&(0x7f0000001dc0)="78e1fc215faa18b8534165522cc92ec8feb490e30540abcce7465c7e30f5a75a6c767047405e359922b131844803a97e5d09ba7a08140cc21a75f11ddc678e84cfac71c6d631d3c6f309e627c6f54be6f23019d619db", 0x56}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="99510b295d915d5d43d52b01264e428969c4ac3cc6e365a6e3ebd9558fffd2eade741bfa78682bf0d1b917bc9f2704491617811fb613a9dabe6507f3870e417d5e11de66130772f137969535a033888bc66f1dfc2c555a320adc818f9d256c7743e85f9b", 0x64}, {&(0x7f0000001f00)="c788aeee5711b6f69b2883047735135b8a5b79ea1b248a1352a0a5638ec42844b2f8115d69defd3e95dcfac01446e47f4bbf9d0c0a4526016220c221367e4fef117781df74a50d23fb98112cd4e3f6fb3b9f73d951", 0x55}], 0x7, &(0x7f0000002100)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x6, 0x1, 0x8, 0x100, 0x80000, 0x7, 0x5, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x48, 0x8855}, {&(0x7f0000002180)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000037c0)=[{&(0x7f00000021c0)="93760518a074286420178ae619c0ed8ab0002939ca2b95a63024cdbd1bf421b8d88f664586993d69678315f93de1ea0528335a2b66fe34d97d3c8daa11da1785311b98", 0x43}, {&(0x7f0000002240)="477755a4bdb7c9faae844fb1a5718cfd6a05beb8ccc2bb37c9d738fc8635ecc6f37728cfffe4bc82da3156ed17d525a57abbf7c663962f7359de3858c15bd8c2b3cc60290625cd67874687e92d3da7de2b3ff05efd68c02e737cf0c9717cdfad6e393600ff9be816ca66aa86f086b369c1863eb7d63d9b368013d8fad13a964c5924a403b8dc7cc39d780c9ab6b1a181cebac7f2929a0cb51f5a3d801ecac3b0d47b8ada00722201bb7f78ffa5460ff33298193235d507679d3a24f570eadcb5fc", 0xc1}, {&(0x7f0000002340)="b5a6c670477e36c490dc327cc076b2de76ef7f6bcb16e7415d867d9f5697cc7e665726dfa15d7ebbf40d29727393f8675500d8b1fde57e915e4bfd2015f078a440d7c1295c373b44c4728481c83bff63e63a15dbd91597562497a822929fa6f14157892b55c6048d56b83fc94783144e3b7728a4e17527b542de5dd394d2cdaebdffbeb278d0134cb34cb752adcff1ea3c59c673ca160bb02ee036b93c941e", 0x9f}, {&(0x7f0000002400)="45baee88c2d548bd3c7db9797f5c0261bbab3800e5fa7601fd3548362c4bdad2d5ac6355f7cef60cd90926aaaa8618e8339e54c4cf2d2858052ca0e64b0f2f99691ae8c634bafa1829e7072b188b34e288b9af613fe808fb8af9e25164b8f208c2c3c6b70e3d2d122b4806be020defaf15767d2ea40460d1ff1f5c6caccdb936667f3cd5c56ac4af255f067f66ba57646926fa", 0x93}, {&(0x7f00000024c0)="c2d433007130d6b09255108e0746e3a297e274e6afacbff7a4bad3586defad415d65e7ace6e953894a00fa02658916c190eec23ec9c2c474ae5d4cabe32d556ad3dd527d32af062a4879", 0x4a}, {&(0x7f0000002540)="0aa881e0a9dd91ad110e5a58cfdad638a9ecac11cf0dffc90274aea1055375f81ac8b121badda0befa4deab058ca0e922685490b35832ff4e2487e41bee495dd8eedfccf9ba777f140fd8fe20a452f8b9cadb829cecf8dd687d4b0ace54fbbe4dbadfd6bcf37306b91444878efc7dd97d98fa537d9c598213d2c18261df8522059e8306ebb644c7f20093bf58d3f43d79eb1df77c35e846daac1baea6c72b2ef8ac85ab60153cdd9245e", 0xaa}, {&(0x7f0000002600)="eb86da7a56e4358860f9db9059662c7a6525a67298ef91d2c765998b630b8699bcadc82b3c548d74977195324c749e6a2b1bd6a3b43d1d8fe1a72398c7c979c96cc6194ccb73480e8d19d696412acbd53ded0862e84a78fc50c5102a165c2a202a55f8289c06ccddc9f38226b54f311af8360d74eeb01e9551d53ac8665ae9b7e02c8a9071ec48cadd704065eb8f42398320d496b4dc024afecbb3093084f66a63c60a044330db2d6f3b4abeeeba8fa0bdbeff9fe86104e1207c5cc771100a725919d2f08bdc", 0xc6}, {&(0x7f0000002700)="73c58a7fe1dcbdaab6665aaed86373567f11a09a2e7ae2c9305205545f316bf0ac82ac6ce40dcb3aa398ce6da7ec51cd852f1730d9a31e0ac676bfb8f1b2bb2ef3b324338dd7d1e1d34c0e3450fc5e706725f31c8e49b4331486e55aa0ea1ccca9b7fd435514485d8365d6696966b9bd9d2f97403b23b4e1a9497aa8140f1caf3d13cf6681ffdf48", 0x88}, {&(0x7f00000027c0)="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", 0x1000}], 0x9, 0x0, 0x0, 0x8004}], 0x3, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003980)=@assoc_value={r1, 0x2}, 0x8) 1m22.666636091s ago: executing program 0 (id=278): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffe8a}]}}]}, 0x40}}, 0x0) 1m22.666566031s ago: executing program 32 (id=278): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffe8a}]}}]}, 0x40}}, 0x0) 1m21.279779477s ago: executing program 1 (id=296): sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80014000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x55) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 1m21.225244143s ago: executing program 33 (id=296): sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80014000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x55) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 2.35011571s ago: executing program 2 (id=1993): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r3, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)=@gettaction={0x1cc, 0x32, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x92}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8a}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdb}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x98}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1cc}}, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xb, &(0x7f0000001480)=ANY=[@ANYRES8=r0, @ANYBLOB="bdadd24c9f6b7ac6d5", @ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r9, 0x5414, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="440000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 2.087440815s ago: executing program 2 (id=1999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.073310897s ago: executing program 5 (id=2000): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x111) fallocate(r3, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.021058372s ago: executing program 4 (id=2001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'macvlan1\x00', {0x2, 0x4e23, @private=0xa010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) 1.978898566s ago: executing program 5 (id=2002): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x5}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e20, 0x6, @local}], 0x58) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="e4836d513bcab6b9", 0x8}], 0x1, 0x0, 0x0, 0x54}, 0x24008804) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x1170, 0x1398, 0x238, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 1.971588607s ago: executing program 4 (id=2003): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x9, 0x20010, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000b00)='Y', 0x1}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) accept4(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x80, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, 0x0, 0x5, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.916083092s ago: executing program 2 (id=2004): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 1.276644105s ago: executing program 3 (id=2011): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000cc0)=ANY=[], 0x678) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.171630345s ago: executing program 3 (id=2012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r3 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d16, 0x0) 1.131208669s ago: executing program 3 (id=2013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'macvlan1\x00', {0x2, 0x4e23, @private=0xa010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) 1.083428124s ago: executing program 5 (id=2015): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0, 0x0, 0x4000000000000004}, 0x18) r1 = syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000004900000049000000040000000000000001000085f0b300080d00000000000000ff7f00000f0000000100000f01000000020000004000000003000000be0b000000000000070000000004000000000000080400000000000000505f00ee694e78f35228a48982068d2f5546e444695b4f854b0600f4f8df543c1145b464b808a40c995fcd24d0b177c8bb94a6a83514c9e469f39c91e48d94585571c4"], &(0x7f00000001c0)=""/2, 0x68, 0x2, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r1}, 0xffffffffffffffea) socket$inet(0x2, 0x2, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.082868334s ago: executing program 3 (id=2016): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x111) fallocate(r4, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.037961008s ago: executing program 2 (id=2017): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r3, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)=@gettaction={0x1cc, 0x32, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x92}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8a}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdb}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x98}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1cc}}, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xb, &(0x7f0000001480)=ANY=[@ANYRES8=r0, @ANYBLOB="bdadd24c9f6b7ac6d5", @ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r8, 0x5414, &(0x7f00000000c0)) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.02530891s ago: executing program 4 (id=2018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 958.828066ms ago: executing program 4 (id=2021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x24000054}, 0xc800) 945.206058ms ago: executing program 3 (id=2022): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x200073d) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e00edfffbff9402075224a278f29b2b47c8080000000000004000000000000000cf000000000000000f00000000003800010000000200000003000000970f000004000000000000000d00000000000600c801000000190000e600000000fb5ca31c6330be110000000400000000000000"], 0x78) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x2f, 0x12, 0x2, 0x5, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x23}, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, @mcast2]}, 0x98) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r2, @ANYRESOCT], 0x20) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x7e, r5}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 927.272419ms ago: executing program 4 (id=2023): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000cc0)=ANY=[], 0x678) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 893.728633ms ago: executing program 2 (id=2024): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r3 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d16, 0x0) 843.896797ms ago: executing program 6 (id=2025): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000005"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r3, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)=@gettaction={0x1cc, 0x32, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x92}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8a}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdb}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x98}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1cc}}, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xb, &(0x7f0000001480)=ANY=[@ANYRES8=r0, @ANYBLOB="bdadd24c9f6b7ac6d5", @ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r9, 0x5414, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="440000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110000020000000240012800e00010069703665727370616e0000001000028008000500050000000400120008488ff391beb18ebde545478f01407b421eee55e3f5ab8849f9b3bd71d0468d01e53174b80e2e3e48aa886816d004cfa99bb3e73deabe7ba4e7a30a519826019c2ebc4931a5aab3c43e38fdf3a16d93f2e9db83c2afed01a85dbac9babb92b0b4db28404faee6ed697b7968cfd5830fc17f55e1bc90d2f67cfcd05eb3200e8843375a026ff5f0a7675ea9a77904c1cd58e10cf0032b91f1063bc45c64a379c52a753e606c7af63e0b510097f67c447291a3bce336feeaeabd0bf9df0ca4958d2140850ba47de66ef9956bead115827eeb41979f7698c2d210"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 828.080589ms ago: executing program 3 (id=2026): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 819.27477ms ago: executing program 2 (id=2027): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 757.454316ms ago: executing program 4 (id=2028): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x9, 0x20010, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000b00)='Y', 0x1}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) accept4(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x80, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, 0x0, 0x5, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 661.426475ms ago: executing program 6 (id=2029): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00', 0x8}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d2ff03076003008cb89e08f086dd", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x26000301}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) 337.831007ms ago: executing program 6 (id=2030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000"], 0x48) times(&(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xa2, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x82, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES64=r3], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xf1c38fa000000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockname$packet(r7, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000d00)="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", 0x4fb) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 288.625322ms ago: executing program 6 (id=2031): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x8, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) fcntl$getown(0xffffffffffffffff, 0x9) syz_pidfd_open(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="240000001a007f0214f9f407000904080a00", 0x12) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r0, 0x0, 0x8) 259.064215ms ago: executing program 6 (id=2032): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x111) fallocate(r4, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 219.356669ms ago: executing program 5 (id=2033): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x111) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000cc0)=ANY=[], 0x678) fallocate(r2, 0x0, 0x1, 0x2000406) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 144.606636ms ago: executing program 6 (id=2034): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x9, 0x20010, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000b00)='Y', 0x1}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='rxrpc_rx_ack\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) accept4(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x80, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, 0x0, 0x5, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 104.45184ms ago: executing program 5 (id=2035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x486, &(0x7f0000000b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x143041, 0x0) pwritev2(r2, 0x0, 0x0, 0xe7b, 0x0, 0x0) 0s ago: executing program 5 (id=2036): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b", 0x40}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1c}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d2ff03076003008cb89e08f086dd", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x26000301}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) kernel console output (not intermixed with test programs): 138] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.641095][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.701448][ T7171] loop6: detected capacity change from 0 to 4096 [ 102.710078][ T7171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.723638][ T7171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.780693][ T7185] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.802668][ T7187] sock: sock_timestamping_bind_phc: sock not bind to device [ 103.000646][ T7220] loop5: detected capacity change from 0 to 128 [ 103.350787][ T7229] loop4: detected capacity change from 0 to 1024 [ 103.390068][ T7229] EXT4-fs: inline encryption not supported [ 103.455705][ T7229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.493758][ T7229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.550870][ T7241] sock: sock_timestamping_bind_phc: sock not bind to device [ 103.762661][ T7279] loop5: detected capacity change from 0 to 1024 [ 103.770026][ T7279] EXT4-fs: inline encryption not supported [ 103.796583][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.798354][ T7287] loop2: detected capacity change from 0 to 512 [ 103.815908][ T7287] EXT4-fs: Ignoring removed bh option [ 103.828059][ T7287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.845300][ T7287] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.858490][ T7279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.891382][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.962925][ T7303] loop5: detected capacity change from 0 to 512 [ 103.970316][ T7303] EXT4-fs: Ignoring removed bh option [ 103.996816][ T7303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.024475][ T7303] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.081133][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.113478][ T7315] loop5: detected capacity change from 0 to 512 [ 104.120423][ T7315] EXT4-fs: Ignoring removed bh option [ 104.136872][ T7315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.149830][ T7315] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.259556][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.652922][ T7322] loop4: detected capacity change from 0 to 8192 [ 104.664027][ T7326] loop5: detected capacity change from 0 to 1024 [ 104.670664][ T7326] EXT4-fs: inline encryption not supported [ 104.676596][ T3620] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.686034][ T7326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.725656][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.771381][ T7336] loop5: detected capacity change from 0 to 512 [ 104.779119][ T7336] EXT4-fs: Ignoring removed bh option [ 104.799606][ T7336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.809454][ T7340] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.820571][ T7336] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.834896][ T7344] loop4: detected capacity change from 0 to 512 [ 104.841881][ T7344] EXT4-fs: Ignoring removed bh option [ 104.897484][ T7344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.913813][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.923759][ T7344] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.978017][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.019496][ T7365] sock: sock_timestamping_bind_phc: sock not bind to device [ 105.067880][ T7373] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.094961][ T7376] loop5: detected capacity change from 0 to 1024 [ 105.101777][ T7376] EXT4-fs: inline encryption not supported [ 105.115681][ T7376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.139074][ T7376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.278864][ T7398] loop6: detected capacity change from 0 to 512 [ 105.306228][ T7398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.318856][ T7398] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.335702][ T7398] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.1191: iget: bad i_size value: 2533274857506816 [ 105.373799][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.796330][ T7407] loop2: detected capacity change from 0 to 512 [ 105.803560][ T7407] EXT4-fs: Ignoring removed bh option [ 105.836124][ T7407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.849055][ T7407] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.900822][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.915380][ T7413] sock: sock_timestamping_bind_phc: sock not bind to device [ 105.931572][ T7416] loop2: detected capacity change from 0 to 1024 [ 105.939069][ T7416] EXT4-fs: inline encryption not supported [ 105.960683][ T7416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.987772][ T7416] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.039191][ T7431] loop2: detected capacity change from 0 to 512 [ 106.046084][ T7431] EXT4-fs: Ignoring removed nobh option [ 106.110216][ T7432] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.126809][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1197: corrupted inode contents [ 106.142339][ T7431] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.1197: mark_inode_dirty error [ 106.154615][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1197: corrupted inode contents [ 106.166651][ T7431] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1197: mark_inode_dirty error [ 106.180577][ T7432] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.190743][ T7431] __quota_error: 423 callbacks suppressed [ 106.190763][ T7431] Quota error (device loop2): write_blk: dquota write failed [ 106.205437][ T7431] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.215933][ T7431] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1197: Failed to acquire dquot type 0 [ 106.237377][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1197: corrupted inode contents [ 106.251941][ T7431] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.1197: mark_inode_dirty error [ 106.263729][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1197: corrupted inode contents [ 106.279269][ T7432] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.284595][ T7431] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1197: mark_inode_dirty error [ 106.300890][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1197: corrupted inode contents [ 106.313024][ T7431] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 106.327772][ T7431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1197: corrupted inode contents [ 106.340313][ T7431] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.1197: mark_inode_dirty error [ 106.341702][ T7455] loop3: detected capacity change from 0 to 4096 [ 106.353423][ T7431] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 106.367618][ T7432] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.367792][ T7431] EXT4-fs (loop2): 1 truncate cleaned up [ 106.379321][ T7455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.383763][ T7431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.396396][ T7455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.409336][ T7431] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.457326][ T29] audit: type=1326 audit(1761218033.854:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.496513][ T29] audit: type=1326 audit(1761218033.874:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.520174][ T29] audit: type=1326 audit(1761218033.874:11475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.543763][ T29] audit: type=1326 audit(1761218033.874:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.567414][ T29] audit: type=1326 audit(1761218033.874:11477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.577001][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.591017][ T29] audit: type=1326 audit(1761218033.874:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.612338][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.622604][ T29] audit: type=1326 audit(1761218033.874:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.633177][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.654284][ T29] audit: type=1326 audit(1761218033.874:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7459 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 106.666298][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.695387][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.719999][ T7471] loop2: detected capacity change from 0 to 512 [ 106.736354][ T7471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.749163][ T7471] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.767046][ T7471] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.1208: iget: bad i_size value: 2533274857506816 [ 106.791922][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.815532][ T7476] loop2: detected capacity change from 0 to 128 [ 106.932300][ T7479] bio_check_eod: 136 callbacks suppressed [ 106.932316][ T7479] syz.2.1210: attempt to access beyond end of device [ 106.932316][ T7479] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 106.952235][ T7479] syz.2.1210: attempt to access beyond end of device [ 106.952235][ T7479] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 106.966040][ T7479] syz.2.1210: attempt to access beyond end of device [ 106.966040][ T7479] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 106.979754][ T7479] syz.2.1210: attempt to access beyond end of device [ 106.979754][ T7479] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 106.993939][ T7479] syz.2.1210: attempt to access beyond end of device [ 106.993939][ T7479] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 107.071314][ T7479] syz.2.1210: attempt to access beyond end of device [ 107.071314][ T7479] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 107.185365][ T7482] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.241338][ T7479] syz.2.1210: attempt to access beyond end of device [ 107.241338][ T7479] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 107.346401][ T7490] loop3: detected capacity change from 0 to 512 [ 107.353250][ T7490] EXT4-fs: Ignoring removed bh option [ 107.366324][ T7490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.379211][ T7490] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.412920][ T7492] loop4: detected capacity change from 0 to 512 [ 107.435533][ T7492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.456468][ T7492] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.456619][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.467323][ T7503] loop2: detected capacity change from 0 to 512 [ 107.483642][ T7503] EXT4-fs: Ignoring removed bh option [ 107.502791][ T7492] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1212: iget: bad i_size value: 2533274857506816 [ 107.522003][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.542250][ T7503] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.660178][ T7517] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 107.681106][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.713124][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.734949][ T7519] loop6: detected capacity change from 0 to 8192 [ 107.742948][ T7521] loop2: detected capacity change from 0 to 512 [ 107.760375][ T7521] EXT4-fs (loop2): 1 truncate cleaned up [ 107.769503][ T7521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.792715][ T7521] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1219: bg 0: block 465: padding at end of block bitmap is not set [ 107.838984][ T7531] loop3: detected capacity change from 0 to 512 [ 107.859993][ T7535] loop4: detected capacity change from 0 to 128 [ 107.866347][ T7531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.866431][ T7531] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.890434][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.920622][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.954172][ T7543] loop3: detected capacity change from 0 to 512 [ 107.961448][ T7543] EXT4-fs: Ignoring removed nobh option [ 107.968298][ T7545] syz.4.1224: attempt to access beyond end of device [ 107.968298][ T7545] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 107.981831][ T7545] syz.4.1224: attempt to access beyond end of device [ 107.981831][ T7545] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 107.986537][ T7543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1226: corrupted inode contents [ 107.995554][ T7545] syz.4.1224: attempt to access beyond end of device [ 107.995554][ T7545] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 108.008408][ T7543] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.1226: mark_inode_dirty error [ 108.032780][ T7543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1226: corrupted inode contents [ 108.044864][ T7543] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1226: mark_inode_dirty error [ 108.056617][ T7543] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1226: Failed to acquire dquot type 0 [ 108.068442][ T7543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1226: corrupted inode contents [ 108.080943][ T7543] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.1226: mark_inode_dirty error [ 108.092724][ T7543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1226: corrupted inode contents [ 108.104820][ T7543] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1226: mark_inode_dirty error [ 108.116497][ T7543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1226: corrupted inode contents [ 108.129395][ T7543] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 108.138236][ T7543] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1226: corrupted inode contents [ 108.150948][ T7543] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1226: mark_inode_dirty error [ 108.162446][ T7543] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 108.171966][ T7543] EXT4-fs (loop3): 1 truncate cleaned up [ 108.178212][ T7543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.190855][ T7543] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.226449][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.316843][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 108.825485][ T7565] loop6: detected capacity change from 0 to 4096 [ 108.834448][ T7565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.847770][ T7565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.876341][ T7579] loop5: detected capacity change from 0 to 128 [ 109.040259][ T7589] loop2: detected capacity change from 0 to 512 [ 109.047329][ T7589] EXT4-fs: Ignoring removed bh option [ 109.066584][ T7589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.079414][ T7589] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.149503][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.193953][ T7598] loop4: detected capacity change from 0 to 8192 [ 109.241735][ T7608] loop2: detected capacity change from 0 to 512 [ 109.249403][ T7608] EXT4-fs: Ignoring removed nobh option [ 109.266307][ T7608] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1249: corrupted inode contents [ 109.278687][ T7608] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.1249: mark_inode_dirty error [ 109.290558][ T7608] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1249: corrupted inode contents [ 109.302872][ T7608] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1249: mark_inode_dirty error [ 109.315386][ T7608] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1249: Failed to acquire dquot type 0 [ 109.327479][ T7608] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1249: corrupted inode contents [ 109.339635][ T7608] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.1249: mark_inode_dirty error [ 109.351383][ T7608] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1249: corrupted inode contents [ 109.363689][ T7608] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1249: mark_inode_dirty error [ 109.375522][ T7608] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1249: corrupted inode contents [ 109.387773][ T7608] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 109.399092][ T7608] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.1249: corrupted inode contents [ 109.411272][ T7608] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.1249: mark_inode_dirty error [ 109.422652][ T7608] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 109.432823][ T7608] EXT4-fs (loop2): 1 truncate cleaned up [ 109.438875][ T7608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.451669][ T7608] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.483180][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.512890][ T7617] loop4: detected capacity change from 0 to 512 [ 109.524692][ T7617] EXT4-fs (loop4): 1 truncate cleaned up [ 109.532588][ T7617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.545875][ T7617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1253: bg 0: block 465: padding at end of block bitmap is not set [ 109.574122][ T7623] loop2: detected capacity change from 0 to 512 [ 109.581703][ T7623] EXT4-fs: Ignoring removed bh option [ 109.589513][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.602147][ T7623] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.666642][ T7630] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.992777][ T7644] loop6: detected capacity change from 0 to 512 [ 110.076372][ T7644] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.122379][ T7652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.216500][ T7669] loop5: detected capacity change from 0 to 512 [ 110.223226][ T7669] EXT4-fs: Ignoring removed bh option [ 110.253424][ T7669] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.355940][ T7688] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.502702][ T7703] loop5: detected capacity change from 0 to 8192 [ 110.539029][ T7709] loop2: detected capacity change from 0 to 512 [ 110.553934][ T7709] EXT4-fs: Ignoring removed bh option [ 110.611127][ T7709] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.731417][ T7721] loop3: detected capacity change from 0 to 8192 [ 110.817458][ T7726] loop5: detected capacity change from 0 to 8192 [ 111.228121][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 111.228137][ T29] audit: type=1326 audit(1761218038.624:11893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3e0a8efc9 code=0x0 [ 111.443450][ T7745] loop3: detected capacity change from 0 to 8192 [ 111.482870][ T29] audit: type=1326 audit(1761218038.874:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.506467][ T29] audit: type=1326 audit(1761218038.874:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.530225][ T29] audit: type=1326 audit(1761218038.874:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.553836][ T29] audit: type=1326 audit(1761218038.874:11897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.577320][ T29] audit: type=1326 audit(1761218038.874:11898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.600847][ T29] audit: type=1326 audit(1761218038.874:11899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.628874][ T29] audit: type=1326 audit(1761218038.874:11900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.652498][ T29] audit: type=1326 audit(1761218038.874:11901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.675947][ T29] audit: type=1326 audit(1761218038.874:11902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7752 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 111.792879][ T7760] loop6: detected capacity change from 0 to 8192 [ 111.833470][ T7767] loop3: detected capacity change from 0 to 128 [ 111.839993][ T7765] loop4: detected capacity change from 0 to 512 [ 111.850559][ T7765] EXT4-fs (loop4): 1 truncate cleaned up [ 111.857962][ T7765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1310: bg 0: block 465: padding at end of block bitmap is not set [ 111.906995][ T7771] loop6: detected capacity change from 0 to 512 [ 111.934933][ T7777] bio_check_eod: 180 callbacks suppressed [ 111.934951][ T7777] syz.3.1309: attempt to access beyond end of device [ 111.934951][ T7777] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 111.935170][ T7771] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.940880][ T7777] syz.3.1309: attempt to access beyond end of device [ 111.940880][ T7777] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 111.978392][ T7777] syz.3.1309: attempt to access beyond end of device [ 111.978392][ T7777] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 111.992454][ T7777] syz.3.1309: attempt to access beyond end of device [ 111.992454][ T7777] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 112.006519][ T7777] syz.3.1309: attempt to access beyond end of device [ 112.006519][ T7777] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 112.020167][ T7777] syz.3.1309: attempt to access beyond end of device [ 112.020167][ T7777] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 112.033658][ T7777] syz.3.1309: attempt to access beyond end of device [ 112.033658][ T7777] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 112.047266][ T7777] syz.3.1309: attempt to access beyond end of device [ 112.047266][ T7777] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 112.074963][ T7777] syz.3.1309: attempt to access beyond end of device [ 112.074963][ T7777] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 112.089005][ T7777] syz.3.1309: attempt to access beyond end of device [ 112.089005][ T7777] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 112.262651][ T7804] loop6: detected capacity change from 0 to 512 [ 112.269272][ T7804] EXT4-fs: Ignoring removed bh option [ 112.270339][ T7806] loop5: detected capacity change from 0 to 512 [ 112.281511][ T7806] EXT4-fs: Ignoring removed nobh option [ 112.289189][ T7804] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.296425][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.1325: corrupted inode contents [ 112.311912][ T7806] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #3: comm syz.5.1325: mark_inode_dirty error [ 112.324069][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.1325: corrupted inode contents [ 112.336548][ T7806] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1325: mark_inode_dirty error [ 112.363239][ T7806] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1325: Failed to acquire dquot type 0 [ 112.377099][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1325: corrupted inode contents [ 112.393922][ T7806] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.1325: mark_inode_dirty error [ 112.405894][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1325: corrupted inode contents [ 112.418364][ T7806] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1325: mark_inode_dirty error [ 112.430207][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1325: corrupted inode contents [ 112.442803][ T7806] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 112.451535][ T7806] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1325: corrupted inode contents [ 112.463684][ T7806] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.1325: mark_inode_dirty error [ 112.475042][ T7806] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 112.492205][ T7806] EXT4-fs (loop5): 1 truncate cleaned up [ 112.499117][ T7806] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.549922][ T7823] loop6: detected capacity change from 0 to 512 [ 112.557273][ T7823] EXT4-fs: Ignoring removed bh option [ 112.579581][ T7823] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.626865][ T7831] loop2: detected capacity change from 0 to 128 [ 112.718628][ T7840] loop5: detected capacity change from 0 to 512 [ 112.749423][ T7845] loop6: detected capacity change from 0 to 512 [ 112.757308][ T7840] EXT4-fs (loop5): 1 truncate cleaned up [ 112.767500][ T7840] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1337: bg 0: block 465: padding at end of block bitmap is not set [ 112.783727][ T7845] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.856090][ T7851] loop6: detected capacity change from 0 to 512 [ 112.862644][ T7849] loop5: detected capacity change from 0 to 8192 [ 112.862882][ T7851] EXT4-fs: Ignoring removed nobh option [ 112.888465][ T7853] loop2: detected capacity change from 0 to 512 [ 112.895050][ T7853] EXT4-fs: Ignoring removed bh option [ 112.896872][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1341: corrupted inode contents [ 112.912758][ T7851] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.1341: mark_inode_dirty error [ 112.924871][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1341: corrupted inode contents [ 112.937187][ T7851] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1341: mark_inode_dirty error [ 112.948891][ T7851] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1341: Failed to acquire dquot type 0 [ 112.963295][ T7853] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.988239][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1341: corrupted inode contents [ 113.010455][ T7851] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.1341: mark_inode_dirty error [ 113.029566][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1341: corrupted inode contents [ 113.043557][ T7851] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1341: mark_inode_dirty error [ 113.064393][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1341: corrupted inode contents [ 113.078450][ T7851] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 113.099408][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1341: corrupted inode contents [ 113.112196][ T7851] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.1341: mark_inode_dirty error [ 113.123703][ T7851] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 113.133075][ T7851] EXT4-fs (loop6): 1 truncate cleaned up [ 113.139767][ T7851] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.167547][ T7870] loop5: detected capacity change from 0 to 512 [ 113.174156][ T7870] EXT4-fs: Ignoring removed bh option [ 113.194494][ T7872] loop2: detected capacity change from 0 to 512 [ 113.198235][ T7876] loop4: detected capacity change from 0 to 512 [ 113.203060][ T7875] loop6: detected capacity change from 0 to 512 [ 113.208521][ T7870] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.214917][ T7876] EXT4-fs: Ignoring removed bh option [ 113.235216][ T7872] EXT4-fs (loop2): 1 truncate cleaned up [ 113.247140][ T7875] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.256697][ T7872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1351: bg 0: block 465: padding at end of block bitmap is not set [ 113.273014][ T7876] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.323754][ T7881] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.370946][ T7890] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.433753][ T7899] loop4: detected capacity change from 0 to 8192 [ 113.547381][ T7921] loop3: detected capacity change from 0 to 512 [ 113.557769][ T7921] EXT4-fs: Ignoring removed nobh option [ 113.584653][ T7921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1360: corrupted inode contents [ 113.604952][ T7921] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.1360: mark_inode_dirty error [ 113.634234][ T7921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1360: corrupted inode contents [ 113.658631][ T7921] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1360: mark_inode_dirty error [ 113.672089][ T7921] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1360: Failed to acquire dquot type 0 [ 113.684187][ T7921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1360: corrupted inode contents [ 113.696600][ T7921] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.1360: mark_inode_dirty error [ 113.708529][ T7921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1360: corrupted inode contents [ 113.721115][ T7921] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1360: mark_inode_dirty error [ 113.733528][ T7921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1360: corrupted inode contents [ 113.746228][ T7921] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 113.754993][ T7921] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1360: corrupted inode contents [ 113.767341][ T7921] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1360: mark_inode_dirty error [ 113.778727][ T7921] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 113.788449][ T7921] EXT4-fs (loop3): 1 truncate cleaned up [ 113.795325][ T7921] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.799207][ T7952] loop4: detected capacity change from 0 to 512 [ 113.827336][ T7952] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.860515][ T7958] loop4: detected capacity change from 0 to 512 [ 113.867733][ T7958] EXT4-fs: Ignoring removed bh option [ 113.876603][ T7958] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.946503][ T7964] loop3: detected capacity change from 0 to 8192 [ 113.963809][ T7968] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.130519][ T7974] loop4: detected capacity change from 0 to 8192 [ 114.152282][ T7976] loop3: detected capacity change from 0 to 8192 [ 114.358589][ T7996] loop3: detected capacity change from 0 to 4096 [ 114.365139][ T7992] loop4: detected capacity change from 0 to 4096 [ 114.382372][ T8001] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.517076][ T8020] loop6: detected capacity change from 0 to 512 [ 114.524927][ T8023] loop3: detected capacity change from 0 to 512 [ 114.544917][ T8023] EXT4-fs (loop3): 1 truncate cleaned up [ 114.552148][ T8020] EXT4-fs: Ignoring removed nobh option [ 114.564614][ T8023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1387: bg 0: block 465: padding at end of block bitmap is not set [ 114.594000][ T8026] loop2: detected capacity change from 0 to 8192 [ 114.606180][ T8020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1386: corrupted inode contents [ 114.619300][ T8020] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.1386: mark_inode_dirty error [ 114.631308][ T8020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1386: corrupted inode contents [ 114.657898][ T8020] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1386: mark_inode_dirty error [ 114.674047][ T8020] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1386: Failed to acquire dquot type 0 [ 114.692117][ T8020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1386: corrupted inode contents [ 114.711095][ T8020] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.1386: mark_inode_dirty error [ 114.731184][ T8040] loop3: detected capacity change from 0 to 4096 [ 114.756804][ T8020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1386: corrupted inode contents [ 114.778682][ T8020] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1386: mark_inode_dirty error [ 114.790333][ T8020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1386: corrupted inode contents [ 114.803694][ T8020] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 114.812387][ T8020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1386: corrupted inode contents [ 114.832332][ T8048] sock: sock_timestamping_bind_phc: sock not bind to device [ 114.840689][ T8020] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.1386: mark_inode_dirty error [ 114.854871][ T8051] loop2: detected capacity change from 0 to 8192 [ 114.860004][ T8020] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 114.870718][ T8020] EXT4-fs (loop6): 1 truncate cleaned up [ 114.877297][ T8020] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.953257][ T8068] loop2: detected capacity change from 0 to 512 [ 114.960602][ T8068] EXT4-fs: Ignoring removed bh option [ 114.976617][ T8068] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.126313][ T8094] loop6: detected capacity change from 0 to 512 [ 115.132827][ T8087] loop2: detected capacity change from 0 to 8192 [ 115.132860][ T8094] EXT4-fs: Ignoring removed bh option [ 115.157947][ T8094] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.282739][ T8103] loop2: detected capacity change from 0 to 1024 [ 115.289543][ T8103] EXT4-fs: Ignoring removed nobh option [ 115.295346][ T8103] EXT4-fs: Ignoring removed bh option [ 115.301236][ T8103] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 115.329193][ T8106] loop6: detected capacity change from 0 to 512 [ 115.335826][ T8106] EXT4-fs: Ignoring removed bh option [ 115.390347][ T8106] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.449072][ T8116] loop3: detected capacity change from 0 to 512 [ 115.456656][ T8116] EXT4-fs: Ignoring removed bh option [ 115.472314][ T8116] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.555154][ T8124] lo speed is unknown, defaulting to 1000 [ 115.949267][ T8140] loop4: detected capacity change from 0 to 4096 [ 115.959883][ T8136] sock: sock_timestamping_bind_phc: sock not bind to device [ 116.007474][ T8138] loop5: detected capacity change from 0 to 8192 [ 116.023405][ T8151] loop4: detected capacity change from 0 to 512 [ 116.044476][ T8151] EXT4-fs: Ignoring removed bh option [ 116.058453][ T8151] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.070485][ T8157] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.165802][ T8157] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.197675][ T8170] sock: sock_timestamping_bind_phc: sock not bind to device [ 116.232704][ T8178] loop5: detected capacity change from 0 to 512 [ 116.239611][ T8178] EXT4-fs: Ignoring removed bh option [ 116.246721][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 116.246735][ T29] audit: type=1326 audit(1761218043.644:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.277397][ T29] audit: type=1326 audit(1761218043.664:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.300989][ T29] audit: type=1326 audit(1761218043.664:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.324552][ T29] audit: type=1326 audit(1761218043.664:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.341324][ T8178] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.348078][ T29] audit: type=1326 audit(1761218043.664:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.348104][ T29] audit: type=1326 audit(1761218043.664:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.348125][ T29] audit: type=1326 audit(1761218043.664:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.428984][ T29] audit: type=1326 audit(1761218043.664:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.452509][ T29] audit: type=1326 audit(1761218043.664:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.476079][ T29] audit: type=1326 audit(1761218043.664:12656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.2.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 116.500690][ T8157] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.546356][ T8157] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.646787][ T1687] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.663636][ T1687] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.677487][ T8202] loop3: detected capacity change from 0 to 512 [ 116.684109][ T8202] EXT4-fs: Ignoring removed bh option [ 116.689868][ T295] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.705865][ T295] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.725318][ T8202] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.739585][ T8213] sock: sock_timestamping_bind_phc: sock not bind to device [ 116.791783][ T8222] loop3: detected capacity change from 0 to 128 [ 117.053658][ T8253] loop2: detected capacity change from 0 to 512 [ 117.061958][ T8251] loop4: detected capacity change from 0 to 8192 [ 117.072040][ T8253] EXT4-fs: Ignoring removed bh option [ 117.104132][ T8253] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.202054][ T8263] loop2: detected capacity change from 0 to 512 [ 117.214879][ T8263] EXT4-fs: Ignoring removed bh option [ 117.240797][ T8263] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.325757][ T8276] loop4: detected capacity change from 0 to 8192 [ 117.332527][ T8281] loop2: detected capacity change from 0 to 512 [ 117.342238][ T8281] EXT4-fs (loop2): 1 truncate cleaned up [ 117.349371][ T8281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1459: bg 0: block 465: padding at end of block bitmap is not set [ 117.399720][ T8287] loop4: detected capacity change from 0 to 512 [ 117.399838][ T8285] sock: sock_timestamping_bind_phc: sock not bind to device [ 117.406695][ T8287] EXT4-fs: Ignoring removed bh option [ 117.426387][ T8287] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.517133][ T8304] loop4: detected capacity change from 0 to 512 [ 117.523803][ T8304] EXT4-fs: Ignoring removed bh option [ 117.536338][ T8304] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.629734][ T8314] loop5: detected capacity change from 0 to 8192 [ 117.681434][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1470'. [ 117.683096][ T8325] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.705895][ T8327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 117.718615][ T8325] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.766435][ T8325] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.778244][ T8330] loop5: detected capacity change from 0 to 512 [ 117.786333][ T8330] EXT4-fs (loop5): 1 truncate cleaned up [ 117.793262][ T8330] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1471: bg 0: block 465: padding at end of block bitmap is not set [ 117.828842][ T8325] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.842821][ T8336] loop2: detected capacity change from 0 to 512 [ 117.849784][ T8336] EXT4-fs: Ignoring removed bh option [ 117.884480][ T295] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.895851][ T8336] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.906434][ T295] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.928793][ T295] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.946093][ T295] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.979729][ T8340] loop6: detected capacity change from 0 to 8192 [ 118.035915][ T8355] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.111443][ T8361] loop6: detected capacity change from 0 to 512 [ 118.119803][ T8361] EXT4-fs (loop6): 1 truncate cleaned up [ 118.129467][ T8361] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1482: bg 0: block 465: padding at end of block bitmap is not set [ 118.178722][ T8366] loop4: detected capacity change from 0 to 1024 [ 118.186012][ T8366] EXT4-fs: Ignoring removed nobh option [ 118.191610][ T8366] EXT4-fs: Ignoring removed bh option [ 118.199471][ T8366] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 118.220740][ T8371] FAULT_INJECTION: forcing a failure. [ 118.220740][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.233911][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.6.1485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.233975][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.233990][ T8371] Call Trace: [ 118.233997][ T8371] [ 118.234006][ T8371] __dump_stack+0x1d/0x30 [ 118.234032][ T8371] dump_stack_lvl+0xe8/0x140 [ 118.234055][ T8371] dump_stack+0x15/0x1b [ 118.234076][ T8371] should_fail_ex+0x265/0x280 [ 118.234131][ T8371] should_fail+0xb/0x20 [ 118.234170][ T8371] should_fail_usercopy+0x1a/0x20 [ 118.234270][ T8371] _copy_to_user+0x20/0xa0 [ 118.234301][ T8371] simple_read_from_buffer+0xb5/0x130 [ 118.234329][ T8371] proc_fail_nth_read+0x10e/0x150 [ 118.234394][ T8371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.234434][ T8371] vfs_read+0x1a8/0x770 [ 118.234535][ T8371] ? __rcu_read_unlock+0x4f/0x70 [ 118.234567][ T8371] ? __fget_files+0x184/0x1c0 [ 118.234596][ T8371] ? finish_task_switch+0xad/0x2b0 [ 118.234629][ T8371] ksys_read+0xda/0x1a0 [ 118.234698][ T8371] __x64_sys_read+0x40/0x50 [ 118.234728][ T8371] x64_sys_call+0x27c0/0x3000 [ 118.234755][ T8371] do_syscall_64+0xd2/0x200 [ 118.234827][ T8371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.234855][ T8371] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.234925][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.234950][ T8371] RIP: 0033:0x7f562196d9dc [ 118.234969][ T8371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.234990][ T8371] RSP: 002b:00007f56203d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.235014][ T8371] RAX: ffffffffffffffda RBX: 00007f5621bc5fa0 RCX: 00007f562196d9dc [ 118.235075][ T8371] RDX: 000000000000000f RSI: 00007f56203d70a0 RDI: 0000000000000008 [ 118.235103][ T8371] RBP: 00007f56203d7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.235119][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.235146][ T8371] R13: 00007f5621bc6038 R14: 00007f5621bc5fa0 R15: 00007ffe8a91fdb8 [ 118.235168][ T8371] [ 118.438436][ T8368] loop2: detected capacity change from 0 to 8192 [ 118.535713][ T8379] loop6: detected capacity change from 0 to 512 [ 118.546320][ T8379] EXT4-fs: Ignoring removed bh option [ 118.579843][ T8379] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.699831][ T8392] lo speed is unknown, defaulting to 1000 [ 118.871687][ T8399] loop5: detected capacity change from 0 to 512 [ 118.880533][ T8400] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.037935][ T8399] EXT4-fs: Ignoring removed bh option [ 119.072493][ T8403] loop3: detected capacity change from 0 to 512 [ 119.083862][ T8399] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.115713][ T8403] EXT4-fs (loop3): 1 truncate cleaned up [ 119.122811][ T8403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1496: bg 0: block 465: padding at end of block bitmap is not set [ 119.169129][ T8408] loop4: detected capacity change from 0 to 512 [ 119.175983][ T8408] EXT4-fs: Ignoring removed bh option [ 119.202077][ T8408] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.214094][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1499'. [ 119.234123][ T8412] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.292612][ T8416] loop3: detected capacity change from 0 to 8192 [ 119.331085][ T8421] sock: sock_timestamping_bind_phc: sock not bind to device [ 119.427718][ T8440] loop2: detected capacity change from 0 to 512 [ 119.455544][ T8440] EXT4-fs: Ignoring removed bh option [ 119.473462][ T8442] loop6: detected capacity change from 0 to 8192 [ 119.508281][ T8450] loop4: detected capacity change from 0 to 512 [ 119.516417][ T8440] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.555496][ T8450] EXT4-fs (loop4): 1 truncate cleaned up [ 119.567241][ T8450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1509: bg 0: block 465: padding at end of block bitmap is not set [ 119.635267][ T8457] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.684169][ T8464] loop2: detected capacity change from 0 to 512 [ 119.743452][ T8474] loop6: detected capacity change from 0 to 8192 [ 119.751474][ T8464] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.758884][ T8464] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1511: bad orphan inode 13 [ 119.771367][ T8464] ext4_test_bit(bit=12, block=18) = 1 [ 119.776796][ T8464] is_bad_inode(inode)=0 [ 119.781054][ T8464] NEXT_ORPHAN(inode)=2130706432 [ 119.785968][ T8464] max_ino=32 [ 119.789165][ T8464] i_nlink=1 [ 119.793890][ T8464] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 119.822278][ T8464] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 120.013138][ T8502] loop5: detected capacity change from 0 to 8192 [ 120.029267][ T8508] loop4: detected capacity change from 0 to 512 [ 120.038002][ T8508] EXT4-fs (loop4): 1 truncate cleaned up [ 120.045720][ T8508] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1523: bg 0: block 465: padding at end of block bitmap is not set [ 120.060229][ T8511] loop6: detected capacity change from 0 to 4096 [ 120.179587][ T8516] loop6: detected capacity change from 0 to 8192 [ 120.316971][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 120.328757][ T8538] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.344205][ T8540] loop5: detected capacity change from 0 to 512 [ 120.354079][ T8540] EXT4-fs (loop5): 1 truncate cleaned up [ 120.361285][ T8540] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1536: bg 0: block 465: padding at end of block bitmap is not set [ 120.375716][ T8542] loop6: detected capacity change from 0 to 4096 [ 120.408328][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 120.430549][ T1687] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.472966][ T8555] 9pnet_fd: Insufficient options for proto=fd [ 120.479334][ T8556] 9pnet_fd: Insufficient options for proto=fd [ 120.747819][ T8569] loop3: detected capacity change from 0 to 512 [ 120.754482][ T8569] EXT4-fs: Ignoring removed bh option [ 120.767413][ T8569] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.832029][ T8575] loop3: detected capacity change from 0 to 512 [ 120.852010][ T8575] EXT4-fs (loop3): 1 truncate cleaned up [ 120.859406][ T8575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1549: bg 0: block 465: padding at end of block bitmap is not set [ 120.874933][ T8578] loop2: detected capacity change from 0 to 4096 [ 120.946016][ T8583] loop2: detected capacity change from 0 to 8192 [ 121.153699][ T8596] loop2: detected capacity change from 0 to 8192 [ 121.267673][ T29] kauditd_printk_skb: 851 callbacks suppressed [ 121.267687][ T29] audit: type=1326 audit(1761218048.664:13508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.297769][ T29] audit: type=1326 audit(1761218048.664:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.321632][ T29] audit: type=1326 audit(1761218048.664:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.345174][ T29] audit: type=1326 audit(1761218048.664:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.368822][ T29] audit: type=1326 audit(1761218048.664:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.392337][ T29] audit: type=1326 audit(1761218048.664:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.415955][ T29] audit: type=1326 audit(1761218048.664:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.439540][ T29] audit: type=1326 audit(1761218048.664:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.463090][ T29] audit: type=1326 audit(1761218048.664:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.486604][ T29] audit: type=1326 audit(1761218048.664:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 121.541370][ T8609] loop6: detected capacity change from 0 to 512 [ 121.549245][ T8609] EXT4-fs (loop6): 1 truncate cleaned up [ 121.556391][ T8609] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1561: bg 0: block 465: padding at end of block bitmap is not set [ 121.614256][ T8614] loop6: detected capacity change from 0 to 4096 [ 121.709866][ T8619] loop6: detected capacity change from 0 to 8192 [ 121.821184][ T8629] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.866219][ T8629] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.892422][ T8637] loop6: detected capacity change from 0 to 512 [ 121.900657][ T8637] EXT4-fs (loop6): 1 truncate cleaned up [ 121.908114][ T8637] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1573: bg 0: block 465: padding at end of block bitmap is not set [ 121.924139][ T8629] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.951465][ T8640] FAULT_INJECTION: forcing a failure. [ 121.951465][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.964766][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.6.1574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.965001][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.965016][ T8640] Call Trace: [ 121.965029][ T8640] [ 121.965035][ T8640] __dump_stack+0x1d/0x30 [ 121.965054][ T8640] dump_stack_lvl+0xe8/0x140 [ 121.965071][ T8640] dump_stack+0x15/0x1b [ 121.965087][ T8640] should_fail_ex+0x265/0x280 [ 121.965153][ T8640] should_fail+0xb/0x20 [ 121.965166][ T8640] should_fail_usercopy+0x1a/0x20 [ 121.965321][ T8640] _copy_from_user+0x1c/0xb0 [ 121.965351][ T8640] ___sys_sendmsg+0xc1/0x1d0 [ 121.965442][ T8640] __x64_sys_sendmsg+0xd4/0x160 [ 121.965487][ T8640] x64_sys_call+0x191e/0x3000 [ 121.965514][ T8640] do_syscall_64+0xd2/0x200 [ 121.965538][ T8640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.965563][ T8640] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.965664][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.965683][ T8640] RIP: 0033:0x7f562196efc9 [ 121.965702][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.965723][ T8640] RSP: 002b:00007f56203d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.965746][ T8640] RAX: ffffffffffffffda RBX: 00007f5621bc5fa0 RCX: 00007f562196efc9 [ 121.965805][ T8640] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 121.965820][ T8640] RBP: 00007f56203d7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.965831][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.965901][ T8640] R13: 00007f5621bc6038 R14: 00007f5621bc5fa0 R15: 00007ffe8a91fdb8 [ 121.965918][ T8640] [ 121.967522][ T8629] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.216446][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.232720][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.254613][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.263105][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.284778][ T8647] loop5: detected capacity change from 0 to 8192 [ 122.303392][ T8655] loop2: detected capacity change from 0 to 2048 [ 122.351379][ T8664] loop5: detected capacity change from 0 to 128 [ 122.404599][ T8665] macvtap0: entered promiscuous mode [ 122.409935][ T8665] macvtap0: entered allmulticast mode [ 122.420398][ T8665] dummy0: entered promiscuous mode [ 122.426029][ T8667] bio_check_eod: 222 callbacks suppressed [ 122.426045][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.426045][ T8667] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 122.444047][ T8665] dummy0: entered allmulticast mode [ 122.450705][ T3620] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.450782][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.450782][ T8667] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 122.450828][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.450828][ T8667] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 122.485084][ T8665] team0: Device macvtap0 failed to register rx_handler [ 122.500085][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.500085][ T8667] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 122.513948][ T8665] dummy0: left allmulticast mode [ 122.519309][ T8665] dummy0: left promiscuous mode [ 122.524255][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.524255][ T8667] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 122.537925][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.537925][ T8667] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 122.556450][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.556450][ T8667] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 122.570224][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.570224][ T8667] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 122.584156][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.584156][ T8667] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 122.588234][ T3314] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 122.603126][ T8667] syz.5.1584: attempt to access beyond end of device [ 122.603126][ T8667] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 122.626185][ T8671] loop6: detected capacity change from 0 to 8192 [ 122.626857][ T3314] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 122.674896][ T8671] loop6: p2 p4 [ 122.678564][ T8671] loop6: p2 start 452986624 is beyond EOD, truncated [ 122.685379][ T8671] loop6: p4 start 8388607 is beyond EOD, truncated [ 122.765700][ T8683] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.778909][ T8686] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.791067][ T8687] loop6: detected capacity change from 0 to 512 [ 122.798535][ T8687] EXT4-fs: Ignoring removed bh option [ 122.806150][ T8683] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.821366][ T8689] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 122.827364][ T8687] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.865781][ T8683] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.936329][ T8683] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.966578][ T8695] loop5: detected capacity change from 0 to 8192 [ 123.021641][ T8699] loop4: detected capacity change from 0 to 512 [ 123.033129][ T8699] EXT4-fs (loop4): 1 truncate cleaned up [ 123.040923][ T8699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1596: bg 0: block 465: padding at end of block bitmap is not set [ 123.104554][ T8710] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.120986][ T8708] loop4: detected capacity change from 0 to 4096 [ 123.122365][ T8712] loop6: detected capacity change from 0 to 512 [ 123.133917][ T8712] EXT4-fs: Ignoring removed bh option [ 123.146453][ T8712] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.567503][ T8745] loop5: detected capacity change from 0 to 4096 [ 123.577436][ T8748] netlink: 'syz.2.1615': attribute type 6 has an invalid length. [ 123.585276][ T8748] FAULT_INJECTION: forcing a failure. [ 123.585276][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.598342][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.2.1615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.598368][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.598379][ T8748] Call Trace: [ 123.598384][ T8748] [ 123.598390][ T8748] __dump_stack+0x1d/0x30 [ 123.598447][ T8748] dump_stack_lvl+0xe8/0x140 [ 123.598463][ T8748] dump_stack+0x15/0x1b [ 123.598480][ T8748] should_fail_ex+0x265/0x280 [ 123.598582][ T8748] should_fail+0xb/0x20 [ 123.598599][ T8748] should_fail_usercopy+0x1a/0x20 [ 123.598652][ T8748] strncpy_from_user+0x25/0x230 [ 123.598684][ T8748] strncpy_from_user_nofault+0x68/0xf0 [ 123.598719][ T8748] bpf_probe_read_user_str+0x2a/0x70 [ 123.598743][ T8748] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 123.598769][ T8748] bpf_trace_run2+0x107/0x1c0 [ 123.598793][ T8748] ? qdisc_free+0x63/0x70 [ 123.598818][ T8748] ? netlink_rcv_skb+0x123/0x220 [ 123.598851][ T8748] ? rtnetlink_rcv+0x1c/0x30 [ 123.598895][ T8748] ? qdisc_free+0x63/0x70 [ 123.598918][ T8748] kfree+0x351/0x400 [ 123.598977][ T8748] ? do_syscall_64+0xd2/0x200 [ 123.598990][ T8748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.599007][ T8748] qdisc_free+0x63/0x70 [ 123.599030][ T8748] qdisc_create+0x77b/0x9e0 [ 123.599056][ T8748] tc_modify_qdisc+0xf2e/0x1420 [ 123.599081][ T8748] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 123.599099][ T8748] rtnetlink_rcv_msg+0x65a/0x6d0 [ 123.599155][ T8748] netlink_rcv_skb+0x123/0x220 [ 123.599179][ T8748] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.599200][ T8748] rtnetlink_rcv+0x1c/0x30 [ 123.599215][ T8748] netlink_unicast+0x5c0/0x690 [ 123.599257][ T8748] netlink_sendmsg+0x58b/0x6b0 [ 123.599332][ T8748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.599420][ T8748] __sock_sendmsg+0x145/0x180 [ 123.599439][ T8748] ____sys_sendmsg+0x31e/0x4e0 [ 123.599510][ T8748] ___sys_sendmsg+0x17b/0x1d0 [ 123.599546][ T8748] __x64_sys_sendmsg+0xd4/0x160 [ 123.599588][ T8748] x64_sys_call+0x191e/0x3000 [ 123.599611][ T8748] do_syscall_64+0xd2/0x200 [ 123.599666][ T8748] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.599688][ T8748] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.599712][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.599728][ T8748] RIP: 0033:0x7f4bbeceefc9 [ 123.599778][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.599814][ T8748] RSP: 002b:00007f4bbd757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.599827][ T8748] RAX: ffffffffffffffda RBX: 00007f4bbef45fa0 RCX: 00007f4bbeceefc9 [ 123.599906][ T8748] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 123.599916][ T8748] RBP: 00007f4bbd757090 R08: 0000000000000000 R09: 0000000000000000 [ 123.599943][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.599952][ T8748] R13: 00007f4bbef46038 R14: 00007f4bbef45fa0 R15: 00007fff85a15f18 [ 123.599967][ T8748] [ 123.976366][ T8762] sock: sock_timestamping_bind_phc: sock not bind to device [ 124.094030][ T8784] loop6: detected capacity change from 0 to 512 [ 124.100868][ T8784] EXT4-fs: Ignoring removed bh option [ 124.145755][ T8784] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.173578][ T8793] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.235192][ T8795] loop6: detected capacity change from 0 to 4096 [ 124.406776][ T8816] loop6: detected capacity change from 0 to 8192 [ 124.413821][ T8818] sock: sock_timestamping_bind_phc: sock not bind to device [ 124.625051][ T8854] loop5: detected capacity change from 0 to 8192 [ 124.878591][ T8889] loop2: detected capacity change from 0 to 512 [ 124.885939][ T8889] EXT4-fs: Ignoring removed bh option [ 124.897634][ T8889] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.985229][ T8902] lo speed is unknown, defaulting to 1000 [ 125.082537][ T8916] loop6: detected capacity change from 0 to 512 [ 125.096303][ T8918] FAULT_INJECTION: forcing a failure. [ 125.096303][ T8918] name failslab, interval 1, probability 0, space 0, times 0 [ 125.097431][ T8916] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.109149][ T8918] CPU: 1 UID: 0 PID: 8918 Comm: syz.2.1664 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.109203][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.109218][ T8918] Call Trace: [ 125.109225][ T8918] [ 125.109232][ T8918] __dump_stack+0x1d/0x30 [ 125.109262][ T8918] dump_stack_lvl+0xe8/0x140 [ 125.109291][ T8918] dump_stack+0x15/0x1b [ 125.109316][ T8918] should_fail_ex+0x265/0x280 [ 125.109430][ T8918] should_failslab+0x8c/0xb0 [ 125.109469][ T8918] kmem_cache_alloc_noprof+0x50/0x480 [ 125.109508][ T8918] ? alloc_empty_file+0x76/0x200 [ 125.109559][ T8918] alloc_empty_file+0x76/0x200 [ 125.109604][ T8918] path_openat+0x68/0x2170 [ 125.109646][ T8918] ? mntput+0x4b/0x80 [ 125.109666][ T8918] ? terminate_walk+0x27f/0x2a0 [ 125.109780][ T8918] ? path_openat+0x1bf8/0x2170 [ 125.109814][ T8918] ? _parse_integer_limit+0x170/0x190 [ 125.109923][ T8918] do_filp_open+0x109/0x230 [ 125.109961][ T8918] do_open_execat+0xd8/0x260 [ 125.109990][ T8918] alloc_bprm+0x25/0x350 [ 125.110019][ T8918] do_execveat_common+0x12e/0x750 [ 125.110104][ T8918] ? getname_flags+0x154/0x3b0 [ 125.110141][ T8918] __x64_sys_execveat+0x73/0x90 [ 125.110173][ T8918] x64_sys_call+0x1fec/0x3000 [ 125.110202][ T8918] do_syscall_64+0xd2/0x200 [ 125.110281][ T8918] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.110316][ T8918] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.110415][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.110443][ T8918] RIP: 0033:0x7f4bbeceefc9 [ 125.110461][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.110484][ T8918] RSP: 002b:00007f4bbd757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 125.110604][ T8918] RAX: ffffffffffffffda RBX: 00007f4bbef45fa0 RCX: 00007f4bbeceefc9 [ 125.110620][ T8918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 125.110637][ T8918] RBP: 00007f4bbd757090 R08: 0000000000001000 R09: 0000000000000000 [ 125.110654][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.110670][ T8918] R13: 00007f4bbef46038 R14: 00007f4bbef45fa0 R15: 00007fff85a15f18 [ 125.110698][ T8918] [ 125.341971][ T8916] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 125.357346][ T8916] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.371303][ T8916] EXT4-fs (loop6): 1 truncate cleaned up [ 125.381862][ T8916] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.390380][ T8934] loop5: detected capacity change from 0 to 512 [ 125.397107][ T8934] EXT4-fs: Ignoring removed bh option [ 125.401162][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1663'. [ 125.429363][ T8934] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.483198][ T8942] loop4: detected capacity change from 0 to 8192 [ 125.498771][ T8944] loop5: detected capacity change from 0 to 128 [ 125.508685][ T8944] FAT-fs (loop5): Directory bread(block 32) failed [ 125.515276][ T8944] FAT-fs (loop5): Directory bread(block 33) failed [ 125.521913][ T8944] FAT-fs (loop5): Directory bread(block 34) failed [ 125.528967][ T8944] FAT-fs (loop5): Directory bread(block 35) failed [ 125.535722][ T8944] FAT-fs (loop5): Directory bread(block 36) failed [ 125.542346][ T8944] FAT-fs (loop5): Directory bread(block 37) failed [ 125.548951][ T8944] FAT-fs (loop5): Directory bread(block 38) failed [ 125.555600][ T8944] FAT-fs (loop5): Directory bread(block 39) failed [ 125.562215][ T8944] FAT-fs (loop5): Directory bread(block 40) failed [ 125.568841][ T8944] FAT-fs (loop5): Directory bread(block 41) failed [ 125.604445][ T8944] FAT-fs (loop5): Filesystem has been set read-only [ 125.611278][ T8944] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 125.686007][ T8957] loop4: detected capacity change from 0 to 512 [ 125.693041][ T8957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.702936][ T8957] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1678: invalid block [ 125.715050][ T8957] EXT4-fs (loop4): Remounting filesystem read-only [ 125.721800][ T8957] EXT4-fs (loop4): 2 truncates cleaned up [ 125.780201][ T8966] loop5: detected capacity change from 0 to 128 [ 125.853049][ T8970] loop4: detected capacity change from 0 to 8192 [ 126.036723][ T8974] loop4: detected capacity change from 0 to 8192 [ 126.225378][ T8987] netlink: 'syz.2.1689': attribute type 6 has an invalid length. [ 126.293812][ T29] kauditd_printk_skb: 827 callbacks suppressed [ 126.293869][ T29] audit: type=1326 audit(1761218053.684:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.337752][ T29] audit: type=1326 audit(1761218053.694:14346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.361579][ T29] audit: type=1326 audit(1761218053.694:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.385112][ T29] audit: type=1326 audit(1761218053.694:14348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.408643][ T29] audit: type=1326 audit(1761218053.694:14349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.431979][ T29] audit: type=1326 audit(1761218053.694:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.437041][ T8997] loop2: detected capacity change from 0 to 512 [ 126.455760][ T29] audit: type=1326 audit(1761218053.694:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.462541][ T8997] EXT4-fs: Ignoring removed bh option [ 126.485279][ T29] audit: type=1326 audit(1761218053.694:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.514199][ T29] audit: type=1326 audit(1761218053.694:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.526265][ T8997] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.537727][ T29] audit: type=1326 audit(1761218053.694:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.5.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e0a8efc9 code=0x7ffc0000 [ 126.576755][ T9001] loop4: detected capacity change from 0 to 512 [ 126.583330][ T9001] EXT4-fs: Ignoring removed bh option [ 126.597159][ T9001] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.661323][ T9009] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.690030][ T9016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.836419][ T9042] loop4: detected capacity change from 0 to 512 [ 126.843325][ T9042] EXT4-fs: Ignoring removed bh option [ 126.861528][ T9042] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.933495][ T9055] loop2: detected capacity change from 0 to 512 [ 126.940562][ T9055] EXT4-fs: Ignoring removed bh option [ 126.956890][ T9055] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.977723][ T9060] loop4: detected capacity change from 0 to 512 [ 126.999480][ T9060] EXT4-fs: Ignoring removed bh option [ 127.002137][ T9065] loop5: detected capacity change from 0 to 1024 [ 127.011844][ T9065] EXT4-fs: Ignoring removed nobh option [ 127.017469][ T9065] EXT4-fs: Ignoring removed bh option [ 127.023447][ T9065] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 127.026486][ T9060] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.219975][ T9081] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.291149][ T9082] lo speed is unknown, defaulting to 1000 [ 127.330434][ T9079] loop4: detected capacity change from 0 to 512 [ 127.337430][ T9079] EXT4-fs: Ignoring removed bh option [ 127.347972][ T9079] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.554445][ T3504] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.603613][ T9094] loop4: detected capacity change from 0 to 2048 [ 127.694164][ T9098] loop2: detected capacity change from 0 to 8192 [ 127.699309][ T9094] hub 9-0:1.0: USB hub found [ 127.705410][ T9094] hub 9-0:1.0: 8 ports detected [ 127.893192][ T9115] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.928595][ T9118] loop5: detected capacity change from 0 to 8192 [ 127.979945][ T9123] loop4: detected capacity change from 0 to 128 [ 128.063705][ T9123] bio_check_eod: 190 callbacks suppressed [ 128.063721][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.063721][ T9123] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 128.083067][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.083067][ T9123] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 128.098095][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.098095][ T9123] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 128.112387][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.112387][ T9123] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 128.127078][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.127078][ T9123] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 128.154419][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.154419][ T9123] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 128.154628][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.184545][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.184545][ T9123] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 128.201847][ T9126] loop2: detected capacity change from 0 to 8192 [ 128.208886][ T9131] netlink: 'syz.6.1735': attribute type 6 has an invalid length. [ 128.216739][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.229196][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.238468][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.247063][ T9123] syz.4.1732: attempt to access beyond end of device [ 128.247063][ T9123] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 128.326638][ T9148] loop5: detected capacity change from 0 to 512 [ 128.337670][ T9148] EXT4-fs: Ignoring removed bh option [ 128.338543][ T9146] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.430515][ T9161] loop6: detected capacity change from 0 to 512 [ 128.437435][ T9161] EXT4-fs: Ignoring removed bh option [ 128.461271][ T9148] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.476547][ T9161] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.614931][ T9190] loop5: detected capacity change from 0 to 512 [ 128.628218][ T9190] EXT4-fs (loop5): 1 truncate cleaned up [ 128.640077][ T9190] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1754: bg 0: block 465: padding at end of block bitmap is not set [ 128.714919][ T9205] loop5: detected capacity change from 0 to 1024 [ 128.813095][ T9216] loop2: detected capacity change from 0 to 8192 [ 128.827255][ T9222] loop3: detected capacity change from 0 to 512 [ 128.833921][ T9218] loop6: detected capacity change from 0 to 8192 [ 128.833948][ T9222] EXT4-fs: Ignoring removed bh option [ 128.856120][ T9222] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.988347][ T9234] loop3: detected capacity change from 0 to 512 [ 129.004851][ T9234] EXT4-fs: Ignoring removed bh option [ 129.017249][ T9234] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.033712][ T9236] loop5: detected capacity change from 0 to 8192 [ 129.094278][ T9242] loop3: detected capacity change from 0 to 512 [ 129.150928][ T9245] loop6: detected capacity change from 0 to 8192 [ 129.159087][ T9242] EXT4-fs (loop3): 1 truncate cleaned up [ 129.166520][ T9242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1769: bg 0: block 465: padding at end of block bitmap is not set [ 129.268483][ T9254] loop4: detected capacity change from 0 to 512 [ 129.301284][ T9254] EXT4-fs: Ignoring removed bh option [ 129.384485][ T9254] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.387898][ T9266] loop3: detected capacity change from 0 to 8192 [ 129.442691][ T9274] loop2: detected capacity change from 0 to 512 [ 129.457288][ T9274] EXT4-fs: Ignoring removed bh option [ 129.478410][ T9281] loop5: detected capacity change from 0 to 512 [ 129.495148][ T9281] EXT4-fs (loop5): 1 truncate cleaned up [ 129.495712][ T9274] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.512590][ T9281] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1784: bg 0: block 465: padding at end of block bitmap is not set [ 129.690493][ T9312] loop2: detected capacity change from 0 to 512 [ 129.700925][ T9312] EXT4-fs: Ignoring removed bh option [ 129.711512][ T9315] loop4: detected capacity change from 0 to 512 [ 129.737204][ T9315] EXT4-fs (loop4): 1 truncate cleaned up [ 129.737973][ T9312] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.744772][ T9315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1797: bg 0: block 465: padding at end of block bitmap is not set [ 129.821947][ T9326] loop4: detected capacity change from 0 to 1024 [ 129.849836][ T9329] FAULT_INJECTION: forcing a failure. [ 129.849836][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 129.862643][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.2.1802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.862814][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.862830][ T9329] Call Trace: [ 129.862838][ T9329] [ 129.862846][ T9329] __dump_stack+0x1d/0x30 [ 129.862874][ T9329] dump_stack_lvl+0xe8/0x140 [ 129.862900][ T9329] dump_stack+0x15/0x1b [ 129.862952][ T9329] should_fail_ex+0x265/0x280 [ 129.862997][ T9329] should_failslab+0x8c/0xb0 [ 129.863032][ T9329] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 129.863119][ T9329] ? __alloc_skb+0x101/0x320 [ 129.863161][ T9329] __alloc_skb+0x101/0x320 [ 129.863197][ T9329] netlink_alloc_large_skb+0xbf/0xf0 [ 129.863238][ T9329] netlink_sendmsg+0x3cf/0x6b0 [ 129.863275][ T9329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.863348][ T9329] __sock_sendmsg+0x145/0x180 [ 129.863378][ T9329] ____sys_sendmsg+0x31e/0x4e0 [ 129.863420][ T9329] ___sys_sendmsg+0x17b/0x1d0 [ 129.863478][ T9329] __x64_sys_sendmsg+0xd4/0x160 [ 129.863521][ T9329] x64_sys_call+0x191e/0x3000 [ 129.863549][ T9329] do_syscall_64+0xd2/0x200 [ 129.863649][ T9329] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.863685][ T9329] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.863715][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.863783][ T9329] RIP: 0033:0x7f4bbeceefc9 [ 129.863803][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.863825][ T9329] RSP: 002b:00007f4bbd757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.863935][ T9329] RAX: ffffffffffffffda RBX: 00007f4bbef45fa0 RCX: 00007f4bbeceefc9 [ 129.863951][ T9329] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 129.863967][ T9329] RBP: 00007f4bbd757090 R08: 0000000000000000 R09: 0000000000000000 [ 129.863981][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.863996][ T9329] R13: 00007f4bbef46038 R14: 00007f4bbef45fa0 R15: 00007fff85a15f18 [ 129.864019][ T9329] [ 130.369291][ T9376] loop5: detected capacity change from 0 to 128 [ 130.426085][ T9378] loop3: detected capacity change from 0 to 512 [ 130.439682][ T9381] syz.5.1813: attempt to access beyond end of device [ 130.439682][ T9381] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 130.469673][ T9381] syz.5.1813: attempt to access beyond end of device [ 130.469673][ T9381] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 130.486198][ T9378] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1814: EA inode hash validation failed [ 130.499031][ T9378] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1814: corrupted inode contents [ 130.523617][ T9378] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.1814: mark_inode_dirty error [ 130.535373][ T9378] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1814: corrupted inode contents [ 130.547607][ T9378] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.1814: mark_inode_dirty error [ 130.564747][ T9387] loop6: detected capacity change from 0 to 512 [ 130.572249][ T9378] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1814: mark inode dirty (error -117) [ 130.573744][ T9387] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.1817: EA inode hash validation failed [ 130.585383][ T9378] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 130.606845][ T9378] EXT4-fs (loop3): 1 orphan inode deleted [ 130.606887][ T9387] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.1817: corrupted inode contents [ 130.621359][ T9378] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1814'. [ 130.625589][ T9387] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.1817: mark_inode_dirty error [ 130.666292][ T9387] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.1817: corrupted inode contents [ 130.679102][ T9387] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.1817: mark_inode_dirty error [ 130.700751][ T9390] hub 2-0:1.0: USB hub found [ 130.705562][ T9390] hub 2-0:1.0: 8 ports detected [ 130.733427][ T9387] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.1817: mark inode dirty (error -117) [ 130.748885][ T9387] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 130.758655][ T9387] EXT4-fs (loop6): 1 orphan inode deleted [ 130.764969][ T9387] EXT4-fs mount: 188 callbacks suppressed [ 130.764987][ T9387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.819592][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.828811][ T9401] wireguard0: entered promiscuous mode [ 130.834448][ T9401] wireguard0: entered allmulticast mode [ 130.987941][ T9410] loop5: detected capacity change from 0 to 512 [ 130.999115][ T9410] EXT4-fs: Ignoring removed bh option [ 131.018042][ T9410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.043858][ T9412] loop2: detected capacity change from 0 to 8192 [ 131.050665][ T9410] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.102115][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.128428][ T9422] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.253210][ T9434] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 131.259764][ T9434] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.267391][ T9434] vhci_hcd vhci_hcd.0: Device attached [ 131.273960][ T9435] vhci_hcd: connection closed [ 131.274145][ T53] vhci_hcd: stop threads [ 131.283130][ T53] vhci_hcd: release socket [ 131.287564][ T53] vhci_hcd: disconnect device [ 131.295801][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 131.295854][ T29] audit: type=1326 audit(1761218058.694:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb37145e67 code=0x7ffc0000 [ 131.329331][ T29] audit: type=1326 audit(1761218058.724:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb370eb099 code=0x7ffc0000 [ 131.352893][ T29] audit: type=1326 audit(1761218058.724:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 131.376640][ T29] audit: type=1326 audit(1761218058.724:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb37145e67 code=0x7ffc0000 [ 131.400131][ T29] audit: type=1326 audit(1761218058.724:14920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb370eb099 code=0x7ffc0000 [ 131.423641][ T29] audit: type=1326 audit(1761218058.724:14921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb37145e67 code=0x7ffc0000 [ 131.447129][ T29] audit: type=1326 audit(1761218058.724:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb370eb099 code=0x7ffc0000 [ 131.447608][ T9444] loop4: detected capacity change from 0 to 512 [ 131.470587][ T29] audit: type=1326 audit(1761218058.724:14923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffb3714efc9 code=0x7ffc0000 [ 131.478794][ T9444] EXT4-fs: Ignoring removed bh option [ 131.500685][ T29] audit: type=1326 audit(1761218058.724:14924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb37145e67 code=0x7ffc0000 [ 131.529246][ T29] audit: type=1326 audit(1761218058.724:14925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb370eb099 code=0x7ffc0000 [ 131.560487][ T9444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.573918][ T9444] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.628754][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.708458][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1844'. [ 131.807743][ T9464] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.874834][ T9470] Falling back ldisc for ttyS3. [ 131.933990][ T9478] loop4: detected capacity change from 0 to 128 [ 132.132922][ T9502] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 132.228412][ T9509] loop5: detected capacity change from 0 to 512 [ 132.239353][ T9509] EXT4-fs (loop5): 1 truncate cleaned up [ 132.245638][ T9509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.259363][ T9509] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1866: bg 0: block 465: padding at end of block bitmap is not set [ 132.320158][ T9512] loop2: detected capacity change from 0 to 8192 [ 132.327502][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.438080][ T9516] lo speed is unknown, defaulting to 1000 [ 132.731147][ T9520] loop5: detected capacity change from 0 to 8192 [ 132.889371][ T9534] loop2: detected capacity change from 0 to 128 [ 132.950496][ T9536] loop3: detected capacity change from 0 to 8192 [ 133.024162][ T9545] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.116742][ T9549] loop6: detected capacity change from 0 to 8192 [ 133.197884][ T9559] loop3: detected capacity change from 0 to 8192 [ 133.280522][ T9566] FAULT_INJECTION: forcing a failure. [ 133.280522][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 133.293217][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.2.1887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.293296][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.293311][ T9566] Call Trace: [ 133.293319][ T9566] [ 133.293326][ T9566] __dump_stack+0x1d/0x30 [ 133.293353][ T9566] dump_stack_lvl+0xe8/0x140 [ 133.293377][ T9566] dump_stack+0x15/0x1b [ 133.293393][ T9566] should_fail_ex+0x265/0x280 [ 133.293462][ T9566] ? tcp_sendmsg_fastopen+0x172/0x520 [ 133.293497][ T9566] should_failslab+0x8c/0xb0 [ 133.293532][ T9566] __kmalloc_cache_noprof+0x4c/0x4a0 [ 133.293613][ T9566] tcp_sendmsg_fastopen+0x172/0x520 [ 133.293652][ T9566] tcp_sendmsg_locked+0x26e1/0x2c00 [ 133.293759][ T9566] ? mntput_no_expire+0x6f/0x440 [ 133.293787][ T9566] ? __rcu_read_unlock+0x4f/0x70 [ 133.293817][ T9566] ? avc_has_perm_noaudit+0x1b1/0x200 [ 133.293849][ T9566] ? avc_has_perm+0xf7/0x180 [ 133.293912][ T9566] ? _raw_spin_unlock_bh+0x36/0x40 [ 133.293944][ T9566] ? __pfx_tcp_sendmsg+0x10/0x10 [ 133.293978][ T9566] tcp_sendmsg+0x2f/0x50 [ 133.294011][ T9566] inet_sendmsg+0x76/0xd0 [ 133.294036][ T9566] __sock_sendmsg+0x102/0x180 [ 133.294066][ T9566] __sys_sendto+0x268/0x330 [ 133.294191][ T9566] __x64_sys_sendto+0x76/0x90 [ 133.294226][ T9566] x64_sys_call+0x2d14/0x3000 [ 133.294253][ T9566] do_syscall_64+0xd2/0x200 [ 133.294321][ T9566] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.294353][ T9566] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.294381][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.294421][ T9566] RIP: 0033:0x7f4bbeceefc9 [ 133.294499][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.294533][ T9566] RSP: 002b:00007f4bbd757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.294554][ T9566] RAX: ffffffffffffffda RBX: 00007f4bbef45fa0 RCX: 00007f4bbeceefc9 [ 133.294566][ T9566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 133.294577][ T9566] RBP: 00007f4bbd757090 R08: 0000200000000580 R09: 0000000000000010 [ 133.294588][ T9566] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 133.294673][ T9566] R13: 00007f4bbef46038 R14: 00007f4bbef45fa0 R15: 00007fff85a15f18 [ 133.294697][ T9566] [ 133.582658][ T9576] loop2: detected capacity change from 0 to 512 [ 133.591112][ T9576] EXT4-fs (loop2): 1 truncate cleaned up [ 133.597291][ T9576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.610741][ T9576] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1891: bg 0: block 465: padding at end of block bitmap is not set [ 133.641931][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.648546][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1892'. [ 133.660917][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1892'. [ 133.690630][ T9587] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.735931][ T9587] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.798560][ T9587] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.897439][ T9587] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.951122][ T9598] netlink: 'syz.5.1896': attribute type 6 has an invalid length. [ 133.968057][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.989607][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.020737][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.023067][ T9621] loop4: detected capacity change from 0 to 128 [ 134.029114][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.077875][ T9630] loop2: detected capacity change from 0 to 512 [ 134.092492][ T9630] EXT4-fs: Ignoring removed bh option [ 134.108243][ T9630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.121308][ T9630] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.131108][ T9639] bio_check_eod: 261 callbacks suppressed [ 134.131127][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.131127][ T9639] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 134.187876][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.187876][ T9639] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 134.210563][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.210563][ T9639] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 134.224449][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.224449][ T9639] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 134.238153][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.238153][ T9639] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 134.251798][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.251798][ T9639] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 134.281330][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.281330][ T9639] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 134.285731][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.304211][ T9648] loop6: detected capacity change from 0 to 512 [ 134.311285][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.311285][ T9639] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 134.324757][ T9648] EXT4-fs: Ignoring removed bh option [ 134.330287][ T9649] loop5: detected capacity change from 0 to 256 [ 134.337620][ T9649] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.371653][ T9648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.373111][ T9649] 9pnet: Could not find request transport: f3 [ 134.416661][ T9648] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.446209][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.446209][ T9639] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 134.460037][ T9639] syz.4.1898: attempt to access beyond end of device [ 134.460037][ T9639] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 134.552832][ T9658] loop5: detected capacity change from 0 to 8192 [ 134.566717][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.656608][ T9669] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.781723][ T9676] loop3: detected capacity change from 0 to 8192 [ 134.809212][ T9680] netlink: '+}[@': attribute type 13 has an invalid length. [ 134.853313][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.860761][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.912668][ T9680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.923577][ T9680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.958144][ T9685] loop3: detected capacity change from 0 to 512 [ 134.969053][ T12] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.977975][ T9685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.988874][ T12] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.998160][ T9685] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1916: Invalid block bitmap block 0 in block_group 0 [ 135.012206][ T12] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.012904][ T9685] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 135.029586][ T9685] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1916: attempt to clear invalid blocks 983261 len 1 [ 135.030508][ T12] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.043252][ T9685] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1916: Invalid inode table block 0 in block_group 0 [ 135.064149][ T9685] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 135.073702][ T9685] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 135.082594][ T9685] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1916: Invalid inode table block 0 in block_group 0 [ 135.096262][ T9685] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 135.106167][ T9685] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.1916: mark_inode_dirty error [ 135.117568][ T9685] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 135.126631][ T9685] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.1916: Invalid inode table block 0 in block_group 0 [ 135.132289][ T9694] loop6: detected capacity change from 0 to 512 [ 135.139704][ T9685] EXT4-fs (loop3): 1 truncate cleaned up [ 135.146357][ T9694] EXT4-fs: Ignoring removed bh option [ 135.152195][ T9685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.176084][ T9694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.188901][ T9694] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.189145][ T9685] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 135.231478][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.254087][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.277128][ T9700] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.315220][ T9702] loop6: detected capacity change from 0 to 8192 [ 135.597879][ T9743] loop6: detected capacity change from 0 to 512 [ 135.605467][ T9743] EXT4-fs: Ignoring removed bh option [ 135.617965][ T9743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.650790][ T9743] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.680332][ T9756] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.705970][ T9759] loop5: detected capacity change from 0 to 512 [ 135.715074][ T9759] EXT4-fs (loop5): 1 truncate cleaned up [ 135.721268][ T9759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.735269][ T9759] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1939: bg 0: block 465: padding at end of block bitmap is not set [ 135.736208][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.759196][ T9762] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.771782][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.822327][ T9765] loop6: detected capacity change from 0 to 8192 [ 135.830399][ T9762] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.876788][ T9762] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.928445][ T9762] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.986365][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.998777][ T1687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.009648][ T1687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.023192][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.091209][ T9806] loop3: detected capacity change from 0 to 512 [ 136.098750][ T9806] EXT4-fs: Ignoring removed bh option [ 136.116503][ T9806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.129939][ T9806] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.198226][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.309935][ T29] kauditd_printk_skb: 1401 callbacks suppressed [ 136.310000][ T29] audit: type=1326 audit(1761218063.704:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 136.349753][ T29] audit: type=1326 audit(1761218063.734:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f4bbeceefc9 code=0x7ffc0000 [ 136.373409][ T29] audit: type=1326 audit(1761218063.734:16329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5621965e67 code=0x7ffc0000 [ 136.396824][ T29] audit: type=1326 audit(1761218063.734:16330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562190b099 code=0x7ffc0000 [ 136.420374][ T29] audit: type=1326 audit(1761218063.734:16331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 136.443962][ T29] audit: type=1326 audit(1761218063.734:16332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5621965e67 code=0x7ffc0000 [ 136.467389][ T29] audit: type=1326 audit(1761218063.734:16333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562190b099 code=0x7ffc0000 [ 136.490903][ T29] audit: type=1326 audit(1761218063.734:16334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 136.520192][ T9838] loop3: detected capacity change from 0 to 8192 [ 136.531624][ T29] audit: type=1326 audit(1761218063.914:16335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5621965e67 code=0x7ffc0000 [ 136.555145][ T29] audit: type=1326 audit(1761218063.914:16336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9789 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562190b099 code=0x7ffc0000 [ 136.638002][ T9876] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.657140][ T9874] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.696280][ T9874] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.776221][ T9874] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.836661][ T9874] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.891797][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.925268][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.939016][ T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.965264][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.062087][ T9911] loop4: detected capacity change from 0 to 512 [ 137.095425][ T9911] EXT4-fs (loop4): 1 truncate cleaned up [ 137.111904][ T9911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.153723][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.153756][ T9903] FAULT_INJECTION: forcing a failure. [ 137.153756][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 137.175487][ T9903] CPU: 1 UID: 0 PID: 9903 Comm: syz.3.1966 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.175556][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.175570][ T9903] Call Trace: [ 137.175577][ T9903] [ 137.175586][ T9903] __dump_stack+0x1d/0x30 [ 137.175610][ T9903] dump_stack_lvl+0xe8/0x140 [ 137.175635][ T9903] dump_stack+0x15/0x1b [ 137.175686][ T9903] should_fail_ex+0x265/0x280 [ 137.175733][ T9903] should_failslab+0x8c/0xb0 [ 137.175762][ T9903] kmem_cache_alloc_noprof+0x50/0x480 [ 137.175795][ T9903] ? getname_flags+0x80/0x3b0 [ 137.175825][ T9903] getname_flags+0x80/0x3b0 [ 137.175932][ T9903] __x64_sys_execve+0x42/0x70 [ 137.176029][ T9903] x64_sys_call+0x271a/0x3000 [ 137.176051][ T9903] do_syscall_64+0xd2/0x200 [ 137.176109][ T9903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.176137][ T9903] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.176167][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.176244][ T9903] RIP: 0033:0x7ffb3714efc9 [ 137.176263][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.176285][ T9903] RSP: 002b:00007ffb35baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 137.176308][ T9903] RAX: ffffffffffffffda RBX: 00007ffb373a5fa0 RCX: 00007ffb3714efc9 [ 137.176323][ T9903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 137.176336][ T9903] RBP: 00007ffb35baf090 R08: 0000000000000000 R09: 0000000000000000 [ 137.176348][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.176444][ T9903] R13: 00007ffb373a6038 R14: 00007ffb373a5fa0 R15: 00007fff75414948 [ 137.176467][ T9903] [ 137.548643][ T9931] loop2: detected capacity change from 0 to 512 [ 137.571456][ T9931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.595640][ T9931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 137.614520][ T9931] EXT4-fs (loop2): 1 truncate cleaned up [ 137.624975][ T9931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.640352][ T9931] FAULT_INJECTION: forcing a failure. [ 137.640352][ T9931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.653429][ T9931] CPU: 1 UID: 0 PID: 9931 Comm: syz.2.1976 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.653452][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.653464][ T9931] Call Trace: [ 137.653471][ T9931] [ 137.653497][ T9931] __dump_stack+0x1d/0x30 [ 137.653530][ T9931] dump_stack_lvl+0xe8/0x140 [ 137.653617][ T9931] dump_stack+0x15/0x1b [ 137.653638][ T9931] should_fail_ex+0x265/0x280 [ 137.653679][ T9931] should_fail+0xb/0x20 [ 137.653697][ T9931] should_fail_usercopy+0x1a/0x20 [ 137.653790][ T9931] strncpy_from_user+0x25/0x230 [ 137.653850][ T9931] ? kmem_cache_alloc_noprof+0x242/0x480 [ 137.653958][ T9931] ? getname_flags+0x80/0x3b0 [ 137.653996][ T9931] getname_flags+0xae/0x3b0 [ 137.654068][ T9931] do_sys_openat2+0x60/0x110 [ 137.654089][ T9931] __x64_sys_openat+0xf2/0x120 [ 137.654114][ T9931] x64_sys_call+0x2eab/0x3000 [ 137.654140][ T9931] do_syscall_64+0xd2/0x200 [ 137.654160][ T9931] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.654204][ T9931] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.654233][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.654258][ T9931] RIP: 0033:0x7f4bbeceefc9 [ 137.654315][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.654332][ T9931] RSP: 002b:00007f4bbd757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.654350][ T9931] RAX: ffffffffffffffda RBX: 00007f4bbef45fa0 RCX: 00007f4bbeceefc9 [ 137.654363][ T9931] RDX: 00000000000026e1 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 137.654379][ T9931] RBP: 00007f4bbd757090 R08: 0000000000000000 R09: 0000000000000000 [ 137.654393][ T9931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.654408][ T9931] R13: 00007f4bbef46038 R14: 00007f4bbef45fa0 R15: 00007fff85a15f18 [ 137.654458][ T9931] [ 137.864787][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.186949][ T9938] loop6: detected capacity change from 0 to 8192 [ 138.438265][ T9944] loop6: detected capacity change from 0 to 512 [ 138.473868][ T9944] EXT4-fs (loop6): 1 truncate cleaned up [ 138.488366][ T9944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.568925][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.646807][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1988'. [ 138.896475][ T9994] loop5: detected capacity change from 0 to 512 [ 138.904762][ T9994] EXT4-fs: Ignoring removed bh option [ 138.913079][ T9990] loop2: detected capacity change from 0 to 8192 [ 138.920210][ T9989] loop4: detected capacity change from 0 to 8192 [ 138.922115][ T9994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.939352][ T9994] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.996083][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.111143][T10010] loop5: detected capacity change from 0 to 512 [ 139.117757][T10010] EXT4-fs: Ignoring removed bh option [ 139.125984][T10010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.139669][T10008] loop2: detected capacity change from 0 to 8192 [ 139.146452][T10010] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.190813][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.713487][T10033] loop3: detected capacity change from 0 to 512 [ 139.722696][T10033] EXT4-fs: Ignoring removed bh option [ 139.767041][T10033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.787215][T10033] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.812804][T10037] loop6: detected capacity change from 0 to 512 [ 139.822147][T10037] EXT4-fs (loop6): 1 truncate cleaned up [ 139.828399][T10037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.851954][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.861986][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.901958][T10046] loop3: detected capacity change from 0 to 512 [ 139.908841][T10046] EXT4-fs: Ignoring removed bh option [ 139.931862][T10045] loop6: detected capacity change from 0 to 8192 [ 139.940035][T10046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.952770][T10046] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.998315][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.063707][T10055] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.096869][T10059] loop3: detected capacity change from 0 to 512 [ 140.103453][T10059] EXT4-fs: Ignoring removed bh option [ 140.117096][T10059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.132517][T10059] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.181237][T10067] loop2: detected capacity change from 0 to 8192 [ 140.216754][T10071] loop6: detected capacity change from 0 to 512 [ 140.226221][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.234153][T10071] EXT4-fs (loop6): 1 truncate cleaned up [ 140.241828][T10071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.260060][T10076] loop4: detected capacity change from 0 to 512 [ 140.266748][T10076] EXT4-fs: Ignoring removed bh option [ 140.283350][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.295412][T10076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.315295][T10076] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.376869][T10084] loop6: detected capacity change from 0 to 8192 [ 140.412099][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.607211][T10099] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.917258][T10106] loop6: detected capacity change from 0 to 512 [ 140.923927][T10106] EXT4-fs: Ignoring removed bh option [ 140.936192][T10106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.949492][T10106] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.953499][T10110] loop5: detected capacity change from 0 to 512 [ 140.966738][T10110] EXT4-fs: Ignoring removed bh option [ 140.982336][T10110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.995915][T10110] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.035337][ T4493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.065259][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.089030][T10118] loop5: detected capacity change from 0 to 512 [ 141.097205][T10118] EXT4-fs (loop5): 1 truncate cleaned up [ 141.103158][T10118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.125982][ T4424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.146723][T10122] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 141.184510][ T3388] ================================================================== [ 141.192697][ T3388] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 141.199738][ T3388] [ 141.202070][ T3388] read-write to 0xffff888237c29de4 of 4 bytes by task 3423 on cpu 0: [ 141.210124][ T3388] wq_worker_running+0x95/0x120 [ 141.214975][ T3388] schedule_timeout+0xb7/0x170 [ 141.219730][ T3388] msleep+0x50/0x90 [ 141.223535][ T3388] nsim_fib_event_work+0x42e6/0x4790 [ 141.228822][ T3388] process_scheduled_works+0x4ce/0x9d0 [ 141.234285][ T3388] worker_thread+0x582/0x770 [ 141.238870][ T3388] kthread+0x489/0x510 [ 141.242931][ T3388] ret_from_fork+0x122/0x1b0 [ 141.247515][ T3388] ret_from_fork_asm+0x1a/0x30 [ 141.252268][ T3388] [ 141.254591][ T3388] read to 0xffff888237c29de4 of 4 bytes by task 3388 on cpu 1: [ 141.262116][ T3388] kick_pool+0x49/0x2d0 [ 141.266279][ T3388] __queue_work+0x8cb/0xb50 [ 141.270774][ T3388] queue_work_on+0xd1/0x160 [ 141.275268][ T3388] process_srcu+0x999/0xbc0 [ 141.279792][ T3388] process_scheduled_works+0x4ce/0x9d0 [ 141.285254][ T3388] worker_thread+0x582/0x770 [ 141.289835][ T3388] kthread+0x489/0x510 [ 141.293900][ T3388] ret_from_fork+0x122/0x1b0 [ 141.298483][ T3388] ret_from_fork_asm+0x1a/0x30 [ 141.303244][ T3388] [ 141.305554][ T3388] value changed: 0x00000000 -> 0x00000001 [ 141.311255][ T3388] [ 141.313570][ T3388] Reported by Kernel Concurrency Sanitizer on: [ 141.319707][ T3388] CPU: 1 UID: 0 PID: 3388 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.329500][ T3388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.339546][ T3388] Workqueue: rcu_gp process_srcu [ 141.344484][ T3388] ================================================================== [ 141.360737][ T29] kauditd_printk_skb: 1101 callbacks suppressed [ 141.360752][ T29] audit: type=1326 audit(1761218068.754:17438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.390566][ T29] audit: type=1326 audit(1761218068.754:17439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.4.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fea5b88efc9 code=0x7ffc0000 [ 141.414393][ T29] audit: type=1326 audit(1761218068.814:17440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.438191][ T29] audit: type=1326 audit(1761218068.834:17441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.462185][ T29] audit: type=1326 audit(1761218068.864:17442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.485892][ T29] audit: type=1326 audit(1761218068.884:17443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.509942][ T29] audit: type=1326 audit(1761218068.904:17444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.533578][ T29] audit: type=1326 audit(1761218068.904:17445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.557412][ T29] audit: type=1326 audit(1761218068.904:17446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000 [ 141.581929][ T29] audit: type=1326 audit(1761218068.954:17447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.6.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f562196efc9 code=0x7ffc0000