last executing test programs: 41.557235974s ago: executing program 3 (id=1850): r0 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x60c100, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r7, 0x5606, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 40.641129431s ago: executing program 3 (id=1879): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13f, 0x13f, 0x9, [@fwd={0x10}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @datasec={0x1, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x6, 0xffffffff}, {0x1, 0x5, 0x9}, {0x5, 0x5, 0xfffffeff}, {0x5, 0xdb, 0x1e99}, {0x1, 0xbe32, 0x9}, {0x4, 0x3}, {0x2, 0x8001, 0x10000}], "eab778"}, @union={0xf, 0xa, 0x0, 0x5, 0x1, 0x1, [{0xe, 0x1, 0x40}, {0x2, 0x4, 0xf53}, {0x10, 0x1, 0x5}, {0xf, 0x1, 0x3e2}, {0x0, 0x4, 0x4}, {0xf, 0x0, 0x3}, {0x1, 0x2, 0x7fffffff}, {0xa, 0x1, 0xfffffffd}, {0xc, 0x2, 0xfffffc00}, {0xb, 0x3, 0x6}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0xa, 0x1}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x30, 0x30, 0x30]}}, &(0x7f0000000200)=""/121, 0x161, 0x79, 0x0, 0xf169, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x7, 0x4, 0x8, 0x40000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0xffffffff, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00002301242acc776cdcd9f54800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000b40)={'gretap0\x00', 0x0, 0x700, 0x9, 0x7, 0x80, {{0x2e, 0x4, 0x3, 0x7, 0xb8, 0x64, 0x0, 0x80, 0x2b, 0x0, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0xf, 0xc3, [@private=0xa010101, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x5, [{@remote, 0x7}, {@rand_addr=0x64010100, 0xa}]}, @cipso={0x86, 0x3d, 0x2, [{0x1, 0xd, "730d40130c109da771cc4e"}, {0x6, 0xb, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x6, 0x9, "96c4a3973b2c00"}, {0x0, 0x6, "c1390dd3"}, {0x7, 0x10, "2fc0f12ce24e8186fb2ebc9ea0df"}]}, @generic={0x83, 0xc, "ba1a6ad1150eb128fd7d"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x6f, 0x3, 0xf, [{@rand_addr=0x64010101, 0x4}, {@multicast2, 0x5}, {@private=0xa010101, 0xffffffff}, {@multicast2, 0xe61}, {@loopback, 0x6}, {@broadcast, 0x1}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xb8, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b40100180012800800010073697400e000000108000a00", @ANYRES32=r12, @ANYBLOB], 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b00)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x4, 0xa848, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_addr={0x44, 0x4, 0x43, 0x1, 0x9}]}}}}}) r14 = socket(0xb, 0x3, 0x0) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000d80)={0xf4, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x401) socket$tipc(0x1e, 0x5, 0x0) 39.612375659s ago: executing program 3 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (fail_nth: 3) 39.243753627s ago: executing program 3 (id=1905): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_clone(0x20060080, &(0x7f0000000f40)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000280)="b75ff7005dc53fe02a168f8cd1c33a93d4c0c6f295c075ebe496f1f51fad1e3d964f04aa02569d71a039121edfdae4cf53d9a9b68bb8db51d2b9b81a7958c22c5049c4cf4a74750973428ffd1649dc2eeb9bc2ac49411863101237491fab30312e3fa862b453693da6bb780a790932345425921697bddd69a681b06f10b93c6dbb5341a7fe2cf9bf0ff80e817af1bad2dd69fc7f68274169c4320165e07407caafcd3810184bbd040d292edf9b") pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r3, 0x8, 0x0, 0x8000) 39.045261817s ago: executing program 3 (id=1908): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000004bdf8c268f5fcd3e249fddbb9c839ff4366287ae0d1b15e8f2d280f00c85c51b0b9948eab61ca80f31f3155792cb89cc433d9e75953af35a5300009898d3a9cef8c23148f9fa0fabace7c426444c00000080de1a16648c280700000049b14ae5cf07a7d29089ec445649f23274acf18d850c5a2ac99b9236b1c04939fb87c2702aa8314be7e84819d9fef2c48dd0f62a3cd9a105dfda242d50ad22150724103b7daf23e2c9acad1a55ead88b8d3e0faaf9c242098c414dcd35"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 37.906505074s ago: executing program 3 (id=1932): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe0800000000000000000000850000002c00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 37.906008614s ago: executing program 32 (id=1932): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe0800000000000000000000850000002c00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 36.875901211s ago: executing program 2 (id=1944): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0xc3b}, 0x20}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000004c0)="4267c10bb7560d8505c71d83e33cea3c1951ac34fd83310601219be83baea84d9c59c98ac19ed22c15a045cf576d41120336c2e38b9476c661995eddf92ce195ad7439d660971cfde806af93f533ac4d805cf88f28a64a2f9b8f49", 0x5b}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 35.788471438s ago: executing program 2 (id=1956): openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x10400, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f2, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xadde, 0x2, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f0000000180)="fc8af419d273c24f50b6f0196f446e198b3d0227f29f57e36d9db5ce447f68717240", 0x22) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='devfreq_monitor\x00', r3, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="7f454c4600000f0cff0f00000000000003003e007f000000a601000000000000400000000000000089020000000000000f000000ff0f38000300001002000500010000000400000000000000000000000300000000000000010000800000000000000000000000000900000000000000030000000000000051e57464ff7f0000ffffff7f00000000ff7f000000000000040000000000000004000000000000000600000000000000d69600000000000000000060ff0300000c000000000000000100000000000000010000000000000002000000000000000300000000068300431e5755000000002bba1144e0dc231b00970ffa957ccab983e3764a977bb25ee870a65b411daa06025c2a78669a76d0a5e9d2092b69f009ea486e8dcd79baa5616787f8e84253c9a4233905d9947633e9c8d1c2404633cfb3b4867fef302681c55517c0f6764e07826b509178e86ca4f45366f83c39fb604974edb3684da3afc8330e63b205a01e0899490fb95c564766ae8ac3d3cb66a9ef616cb6390c022f4e9b3a4ea5b41b15513efb7efcc3ff1571cb92e52c0eb00db118109939f450c8b46566d8fb51e76fc592a9dc1cdc2692b9684eaec52ebb762e39b8f856b822ddf8af6db501dc2833c282ddf4e9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a14cfa987618112c1855587c5cea6f03a2f7e1137c519ab2e259ab2a7307d29d471cbcb3f669ca3dea5e617b93b32d401f28781ee691162fd64ea36977cfb2b999ff48138fcc4ad57e4aca6b206a39d30b549bfde30ec4e631c4fd968b4a76d7a0397fa50b78f156e7f27aa12fffaaa5894ac3abc8f2d30604f2627260f3bba0055d384a267155bb01b78c7893ff817b3cdfe5b345439b4c6df8d9f25d9e9381fce0fc322aadb627f6958f0794158acadd52dc0afba450820963f339116fd16c32e5ee9894b727c086f73e3855431609f1fe57e59fc9245e2200328f108676c9e35a98ea46f38"], 0x2cd) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010001000000000000000f00000005002f000000000008000300", @ANYRES32=r10, @ANYBLOB="c93cdf5395bf6c2da465bdbf5de9a1d5cdf15f1092eae7efd2137a00a47088d1cb723f3f421e527d87b0adbc0dbc"], 0x24}}, 0x24014040) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x10000}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000000)={0x81, 0x9, 0x7, 0x400, 0x11, "fdffff0320090004"}) 35.738022208s ago: executing program 2 (id=1958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}, {&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000680)="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", 0x240}, {&(0x7f0000000080)}, {&(0x7f0000000480)="a31a60f11b8c1981bbcbfed54ce782046d2722d7b032ed483be343208a773a03241fc359d4fcfd810f5a3293e09d041b95e7d33a1ce9132e0fbf27ca72830f41444e048737ded9d6544c8bb8d4ac75dbe5ba6e0a975a45599861f7617a44820a9ef35eeb3d56d2e2915670900b5d436cf5fe1addc9", 0x75}], 0x5) 35.708892847s ago: executing program 2 (id=1960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x73, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x73, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x2, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x200000000000018a}, 0x401a, 0x0, 0x3, 0x8, 0x0, 0x100, 0x405, 0x0, 0x0, 0x0, 0x2000000000000002}, 0x0, 0x1, 0xffffffffffffffff, 0x8) (async) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x2, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x200000000000018a}, 0x401a, 0x0, 0x3, 0x8, 0x0, 0x100, 0x405, 0x0, 0x0, 0x0, 0x2000000000000002}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200400, &(0x7f0000000080)={[{@data_err_abort}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f00000009c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='fscache_access_cache\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='devlink_trap_report\x00', r3, 0x0, 0x8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='devlink_trap_report\x00', r3, 0x0, 0x8}, 0x18) socket$inet6(0xa, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000e1f876b000203030000000000000000000000080008"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000e1f876b000203030000000000000000000000080008"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20000006}, 0xa341c4bdfa96315b, 0xffffffff, 0x3, 0x4, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x107842, 0x42) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) (async) prctl$PR_SET_NAME(0xf, 0x0) io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0x9864, 0x0, 0x0, 0x2a7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet(r7, &(0x7f0000001cc0)="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", 0xffb, 0x40, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f0000001cc0)="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", 0xffb, 0x40, 0x0, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) 35.563919797s ago: executing program 2 (id=1962): ioperm(0x5, 0x8004, 0x6) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={[0x9]}, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r8}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 35.037364926s ago: executing program 2 (id=1969): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x254}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000500)={[{@jqfmt_vfsold}], [{@smackfshat={'smackfshat', 0x3d, 'jqfmt=vfsold'}}, {@dont_appraise}, {@appraise}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000e1402002cbd7080fcdbdf2508003c00020000000800030000001101fd784f5dcb0eccfb0111e22bba8b00000800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_ext_remove_space_done\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x53f, &(0x7f0000002640)="$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") 34.972193496s ago: executing program 33 (id=1969): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x254}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000500)={[{@jqfmt_vfsold}], [{@smackfshat={'smackfshat', 0x3d, 'jqfmt=vfsold'}}, {@dont_appraise}, {@appraise}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000e1402002cbd7080fcdbdf2508003c00020000000800030000001101fd784f5dcb0eccfb0111e22bba8b00000800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_ext_remove_space_done\x00', r1, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x53f, &(0x7f0000002640)="$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") 22.470097782s ago: executing program 0 (id=2214): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='GPL\x00', 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x101) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 22.468640012s ago: executing program 0 (id=2216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000c00000000000000eaee00001811d21b44306fe82dbc1ae9b99a558b035afd767fb0a75818d006504f5b950900000000000000ab6d3dbd2eb75c1ed4cd0745fc81710d8c78371858e65c80057ef8f17e69e5835a83a5632610315be266485e901cf138abb45d8d1e95d95c710d338c150134a24a563ff9855b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000000000000085000000016e26198c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000016000000850000000500000095000000000000002303f03bfae165c4bc628493371b43603a47c018ef0f7ffcf276988d40b37fa91a86f47a0b2cedc200d3f58cb4cf02dcdc614c7f8aaac0f46d4082cd9645831b7ce5b4aa31ea5f408eac8c4b7142232f1ca1413424797943897cd49fda0e721fee4b2a87e2f5f7314b532049b957ac45659dd1ebbcbc5abaa8c3e970099e69e5bdebf13cfb12e77f77952e33d1e86e52e2dde1934994456d59729e132deea542b509bbf608e4cce7ade45f522ba0166f3c2b9281dcfc9c01b954660fc7c45f596ba3f83ce469e04959cdae8d72"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'nr0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="36c8aaaaaaaabbbbbbbbbbbb88a813008100100026005500002c03000000000000a41414aa00004e22001890780400"/66], 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r7}}, 0x40) 22.171860811s ago: executing program 0 (id=2219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeda4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}, {&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000680)="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", 0x240}, {&(0x7f0000000080)}, {&(0x7f0000000480)="a31a60f11b8c1981bbcbfed54ce782046d2722d7b032ed483be343208a773a03241fc359d4fcfd810f5a3293e09d041b95e7d33a1ce9132e0fbf27ca72830f41444e048737ded9d6544c8bb8d4ac75dbe5ba6e0a975a45599861f7617a44820a9ef35eeb3d56d2e2915670900b5d436cf5fe1addc9", 0x75}], 0x5) 22.133919601s ago: executing program 0 (id=2220): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000840000ed0000000040000b000101ff00180000000000000084000000070000007f0000010000000097d61f6d9c3c4cb23c6c712d34d4b256ad85dfcded574eb4d2ad043e14f3dc9ae12800e89dede19eec1f"], 0x30, 0x40010}], 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0x4b36, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) futex(0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0) clock_settime(0x7, &(0x7f00000002c0)={0x77359400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000660000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) socketpair(0x11, 0x802, 0x0, &(0x7f0000000040)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 20.141025425s ago: executing program 0 (id=2238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x132, 0x29c780}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 19.175825563s ago: executing program 0 (id=2256): openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x10400, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f2, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xadde, 0x2, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) setsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f0000000180)="fc8af419d273c24f50b6f0196f446e19", 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='devfreq_monitor\x00', r3, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2cd) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010001000000000000000f00000005002f000000000008000300", @ANYRES32=r10, @ANYBLOB="c93cdf5395bf6c2da465bdbf5de9a1d5cdf15f1092eae7efd2137a00a47088d1cb723f3f421e527d87b0adbc0dbc"], 0x24}}, 0x24014040) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x10000}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000000)={0x81, 0x9, 0x7, 0x400, 0x11, "fdffff0320090004"}) 19.141798642s ago: executing program 34 (id=2256): openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x10400, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f2, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xadde, 0x2, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) setsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f0000000180)="fc8af419d273c24f50b6f0196f446e19", 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='devfreq_monitor\x00', r3, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2cd) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010001000000000000000f00000005002f000000000008000300", @ANYRES32=r10, @ANYBLOB="c93cdf5395bf6c2da465bdbf5de9a1d5cdf15f1092eae7efd2137a00a47088d1cb723f3f421e527d87b0adbc0dbc"], 0x24}}, 0x24014040) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x10000}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000000)={0x81, 0x9, 0x7, 0x400, 0x11, "fdffff0320090004"}) 4.193766692s ago: executing program 4 (id=2645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530"], 0xe8}}, 0x0) 4.127859561s ago: executing program 4 (id=2646): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 4.091181781s ago: executing program 4 (id=2649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="643c87cf08d21d994efea03321af0c6c7715a604", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}, {&(0x7f0000000a40)="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", 0x5c9}], 0x2, 0x0, 0x0, 0x8000}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1], 0x0, [0x8, 0x4, 0x7, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r9, r0}, 0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf2504000000080004000f00dd504640050006000000080004f0ffffffffffffff0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x235272c27981e554}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000100)={0x4, 0x9, 0x7fff}) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 4.028645141s ago: executing program 4 (id=2653): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xff9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) readahead(0xffffffffffffffff, 0x2, 0x1d9e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) setreuid(0xee00, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000050000000000000001000000400000007f27b7fa4ea5d686b14072bcf6de96c5cd3951bcbf24e8f37f95faf4fe444f473231f4519d2a720cd3c067589fcc817e41432d998b74b91927447600628495fa82bacbbfd177dea263e1a220aa3a2df3cdfe1dd632464251fcc12b6b68398a21c39374", @ANYRES32=r5, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@auto_da_alloc}, {@resgid={'resgid', 0x3d, r8}}, {@jqfmt_vfsold}, {@resuid={'resuid', 0x3d, r7}}, {@barrier_val}, {@max_batch_time={'max_batch_time', 0x3d, 0x16db}}, {@auto_da_alloc}, {@noload}]}, 0x0, 0x0, 0xfffffffffffffffd) r9 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) 3.980812531s ago: executing program 4 (id=2654): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xff9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) readahead(0xffffffffffffffff, 0x2, 0x1d9e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) setreuid(0xee00, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00'}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000050000000000000001000000400000007f27b7fa4ea5d686b14072bcf6de96c5cd3951bcbf24e8f37f95faf4fe444f473231f4519d2a720cd3c067589fcc817e41432d998b74b91927447600628495fa82bacbbfd177dea263e1a220aa3a2df3cdfe1dd632464251fcc12b6b68398a21c39374", @ANYRES32=r5, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@auto_da_alloc}, {@resgid={'resgid', 0x3d, r10}}, {@jqfmt_vfsold}, {@resuid={'resuid', 0x3d, r9}}, {@barrier_val}, {@max_batch_time={'max_batch_time', 0x3d, 0x16db}}, {@auto_da_alloc}, {@noload}]}, 0x0, 0x0, 0xfffffffffffffffd) fchown(r6, r7, r10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) 3.39609577s ago: executing program 7 (id=2665): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xff9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) readahead(0xffffffffffffffff, 0x2, 0x1d9e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) setreuid(0xee00, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000050000000000000001000000400000007f27b7fa4ea5d686b14072bcf6de96c5cd3951bcbf24e8f37f95faf4fe444f473231f4519d2a720cd3c067589fcc817e41432d998b74b91927447600628495fa82bacbbfd177dea263e1a220aa3a2df3cdfe1dd632464251fcc12b6b68398a21c39374", @ANYRES32=r5, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r7 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r7, 0x8aa, 0x0, 0x0, 0x0, 0x0) 3.266185969s ago: executing program 7 (id=2670): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003050300"/20, @ANYRES32=0x0, @ANYBLOB="c0480000703401002400128009000100626f6e64000000001400028008000b00", @ANYRES32=0x0, @ANYBLOB="08000a001d"], 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x8c000) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, @perf_bp={0x0, 0x2}, 0x10a0a1, 0x5dda, 0x3, 0x2, 0x4, 0x4000008, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xd, 0x80}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='rdma.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x5, 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x2) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x3) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000013c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x20000, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in=@private=0xa010101, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x2, 0x2, 0x2, 0x3, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$eJzs3d9rW28ZAPDnpM1st8526sUcuBVRtqFL2tVtxYttgujVQJ33XW3TUpo2pUm3tQzp8FoEERW90StvBP8AQfYniDDQ+yGiDNnmhRdq5CQnW79d0nYsafZtPx94+77nR87zvAk5yXvOaU4Ax9Z4RNyOiIGIuBwRo9n8XFZiu1nS9V6+eDSXliTq9bv/TCLJ5rW2lWT1qexhQxHxnW9GfC9JmjN2qG5uLc+Wy6X1bLpYW1krVje3riytzC6WFkurU1OT16dvTF+bnuhaX29+/W8//dFvvnHzD19+8GzmH5e+n+Y7ki3b2Y9uaj4n+cZz0TIYEeu9CNYHA1l/8gdZOel9PgAA7C39jv+piPh8RLz6Rb+zAQAAAHqhfmsk/pNE1AEAAIAjK9e4BjbJFbJrAUYilysUmtfwfiZuRblSrX1pobKxOt+8VnYs8rmFpXJpIrtWeCzySTo92Wi/mb66a3oqIs5ExE9GhxvThblKeb7fBz8AAADgmEjH+SO5Zjut/jXaHP8DAAAAR8xYvxMAAAAAes74HwAAAI6+t8f/480qGTz8ZAAAAIBu+9adO2mpt+5/PX9/c2O5cv/KfKm6XFjZmCvMVdbXCouVymLjN/tW9tteuVJZ+0qsbjws1krVWrG6uTWzUtlYrc007us9UzrQfaIBAACArjpz4clfkojY/upwo6ROZMuM1eFoy73b6kmv8gAO30C/EwD6xgW+cHwZ4wP7DeyHDikPAACgdy5+9vX5/+HYcf7/9DPHBuCoe8fz/8AR4vw/HF+7zv//ql95AIfPGB/Y7zhAx/P/f+x+LgAAQG+MNEqSK2RjgJHI5QqFiNON2wLkk4WlcmkiIj4ZEX8ezX8inZ7sd9IAAAAAAAAAAAAAAAAAAAAAAAAA8DFTrydRBwAAAI60iNzfk4hIYihi9Asju48PnEj+PdqoI+LBL+/+7OFsLSLupbNez6/9vDG/tn61DwcwAAAAgLe0xumN2o38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyly8ezbXKYcZ9/rWIGGsXfzCGGvVQ5CPi5KskBnc8LomIgS7E334cEWfbxU/StGIsy2J3/FxEDPc5/qkuxIfj7Em6/7nd7v2Xi/FG3f79N5iV9/V8vNP+L/d6/zfQYf93ep9tn8jqc09/V+wY/3HEucH2+59W/OQ997/3vru11WlZ/dcRF9t+/iQfiVWsrawVq5tbV5ZWZhdLi6XVqanJ69M3pq9NTxQXlsql7G/bGD/+3O//t1f/T3aIP9ap/0kzp3q9/TYv7Jr+79OHLz7dbsUk4vkPs3ab1/9sp/jZc//F7HMgXX6x1d5utnc6/9s/nd+r//Md+r/f63+p00Z3ufztH/y12cof8BEAQC9VN7eWZ8vl0vpBG+mg98ArH2Ij7cwHkEYXG+MfRhoax7PR7z0TAADQbW++9Pc7EwAAAAAAAAAAAAAAAAAAADi+Wv//3/ot5178nNjOeEOtRpIcel8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPby/wAAAP//nXrOGw==") r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002080)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x1b8, 0x0, 0x288, 0x358, 0x1b8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x190, 0x1b8, 0x0, {0x0, 0x3a010000}, [@common=@unspec=@string={{0xc0}, {0x80, 0x865, 'kmp\x00', "871257ca19501bbbedba3bdc1aa5b51de78b223e6445cbccae6de2473931cc713fede9cd10a827b6751d9653b8682787f50788388b04a4de4913b55559d4a2d0804d5d3fd70c52275dadc020d1d2f80a44858d311cf65eca9398cf1889047e222bdb37c576d36b9e727781e993a7b9ce44706a3f605e89ddc606c841cf43fe0c", 0x59, 0x1, {0x5}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x35}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0xff000000, 0xffffffff, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'rose0\x00', 'sit0\x00', {0xff}, {0xff}, 0xd4, 0x80, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008804) 2.672331968s ago: executing program 7 (id=2679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='rss_stat\x00', r0, 0x0, 0x6a}, 0x18) syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240), &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x1}, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r10, 0x0) ioctl$LOOP_SET_FD(r10, 0x4c00, r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 2.570527857s ago: executing program 7 (id=2680): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xff9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) readahead(0xffffffffffffffff, 0x2, 0x1d9e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) setreuid(0xee00, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000050000000000000001000000400000007f27b7fa4ea5d686b14072bcf6de96c5cd3951bcbf24e8f37f95faf4fe444f473231f4519d2a720cd3c067589fcc817e41432d998b74b91927447600628495fa82bacbbfd177dea263e1a220aa3a2df3cdfe1dd632464251fcc12b6b68398a21c39374", @ANYRES32=r5, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.487916844s ago: executing program 7 (id=2685): io_setup(0xf8, &(0x7f0000000400)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendto$inet(r1, 0x0, 0x0, 0x200047ee, 0x0, 0x0) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 972.255923ms ago: executing program 5 (id=2688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}]}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0xdd99, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, '4', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8d0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) capget(0x0, 0x0) 862.584143ms ago: executing program 1 (id=2692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530"], 0xe8}}, 0x0) 799.341442ms ago: executing program 5 (id=2694): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000004c0)="4267c10bb7560d8505c71d83e33cea3c1951ac34fd83310601219be83baea84d9c59c98ac19ed22c15a045cf576d41120336c2e38b9476c661995eddf92ce195ad7439d660971cfde806af93f533ac4d805cf88f28a64a2f9b8f49", 0x5b}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 781.343763ms ago: executing program 1 (id=2695): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) unshare(0x2040400) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) sendfile(r1, r0, 0x0, 0x80000000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003580)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0xfb, 0xd8, 0x54}]}}]}}]}, 0x44}}, 0x20040054) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000480)={0x28, 0x0, 0x2710}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x82, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 725.424992ms ago: executing program 5 (id=2697): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x17) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab0000000000000e0032000000080017015600000008000300", @ANYRES32=r8, @ANYBLOB="0c0022158891f0c0422dcd1c4002541199000600006b365725244088b324f71011e9259310118687ee273145931d05ac9c0693"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1dce0000, 0x60}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000030) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x6, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = eventfd2(0x2, 0x80001) read$eventfd(r12, &(0x7f0000002100), 0x8) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r9, 0x47f6, 0xb277, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r13, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 639.207592ms ago: executing program 1 (id=2699): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000004bdf8c268f5fcd3e249fddbb9c839ff4366287ae0d1b15e8f2d280f00c85c51b0b9948eab61ca80f31f3155792cb89cc433d9e75953af35a5300009898d3a9cef8c23148f9fa0fabace7c426444c00000080de1a16648c280700000049b14ae5cf07a7d29089ec445649f23274acf18d850c5a2ac99b9236b1c04939fb87c2702aa8314be7e84819d9fef2c48dd0f62a3cd9a105dfda242d50ad22150724103b7daf23e2c9acad1a55ead88b8d3e0faaf9c242098c414dcd35"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 593.043102ms ago: executing program 6 (id=2700): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xff9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) readahead(0xffffffffffffffff, 0x2, 0x1d9e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) setreuid(0xee00, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000050000000000000001000000400000007f27b7fa4ea5d686b14072bcf6de96c5cd3951bcbf24e8f37f95faf4fe444f473231f4519d2a720cd3c067589fcc817e41432d998b74b91927447600628495fa82bacbbfd177dea263e1a220aa3a2df3cdfe1dd632464251fcc12b6b68398a21c39374", @ANYRES32=r5, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)) r6 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) 531.887232ms ago: executing program 1 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x82) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[], 0xfffffecf) setsockopt$inet6_int(r3, 0x29, 0x7, 0x0, 0x0) 531.127312ms ago: executing program 6 (id=2702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16=r0, @ANYRES8=r0], 0x48) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01a36a6b5fdcf09fa663b61d4ad24be16ee7f6cd2c43ae860175422196b6bea7aa13258f8b112aac0795c3f3c73baf6032d4a630de787e34d30223c0ca27d84677d111db504b32f933bfd9e35eb525c45aae7c5caf94280fe3f2c39ecb824f5faa93db83"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 64) pwrite64(r5, &(0x7f0000000580)="bec4858b3d3b229f73209a6c25a81ae5b090eb282ba09ac01c6e0f9cac500eb5df0fb80782fa5c78e8a397a3e40ad613bc67328c9aa6e9142996d2c547ee3235f11014fed87e81a2af6daaa18d77de54f2a70217e23127f0432478e8494a83b1e91d0446625ccd1203eec2a0d80704a8884ff7753fe926c0b291e448feffffff00", 0x81, 0x8fff) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x8, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x6, 0x0) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async, rerun: 64) gettid() (rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003f30200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000640)='devlink_hwmsg\x00', r12, 0x0, 0xfffffffffffffffd}, 0x0) 483.073862ms ago: executing program 6 (id=2703): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x221488e, &(0x7f0000000740)=ANY=[@ANYBLOB='map=off,check=relaxed\x00iocharset=iso8859-3,block=0x0000000000000c00,map=acorn,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0], 0x4, 0x6b1, &(0x7f00000015c0)="$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") openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @local}}}, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 481.662541ms ago: executing program 7 (id=2704): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) close_range(r2, r3, 0x200000000000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) 411.929441ms ago: executing program 6 (id=2705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) unshare(0x2c000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebce17ab00"}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setreuid(0xee00, 0x0) r7 = syz_pidfd_open(r5, 0x0) r8 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) sendto$inet(r8, &(0x7f0000000380)="a7fb5513c75a2b9b9835e06f7d2c000000000000", 0x14, 0x8800, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setns(r7, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r9, 0x0, 0xa, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4000, 0x7, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) 344.797811ms ago: executing program 6 (id=2706): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000004c0)="4267c10bb7560d8505c71d83e33cea3c1951ac34fd83310601219be83baea84d9c59c98ac19ed22c15a045cf576d41120336c2e38b9476c661995eddf92ce195ad7439d660971cfde806af93f533ac4d805cf88f28a64a2f9b8f49", 0x5b}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 327.335281ms ago: executing program 6 (id=2707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000500)={[{@jqfmt_vfsold}], [{@smackfshat={'smackfshat', 0x3d, 'jqfmt=vfsold'}}, {@dont_appraise}, {@appraise}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000e1402002cbd7080fcdbdf2508003c00020000000800030000001101fd784f5dcb0eccfb0111e22bba8b00000800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_ext_remove_space_done\x00', r3, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x53f, &(0x7f0000002640)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xaba}, [@call={0x85, 0x0, 0x0, 0xa4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000040), 0x4) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x7) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x8}) 297.102491ms ago: executing program 5 (id=2708): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 213.101511ms ago: executing program 5 (id=2709): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000004340)=[{&(0x7f0000002080)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6b2c654d94690a10a33d0", 0x29}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsmount(0xffffffffffffffff, 0x0, 0x174) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x11c, 0x2, 0xffffffffffffffff, 0x0) 211.368591ms ago: executing program 1 (id=2710): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 118.607021ms ago: executing program 5 (id=2711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='rss_stat\x00', r0, 0x0, 0x6a}, 0x18) syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240), &(0x7f00000001c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x1}, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r10, 0x0) ioctl$LOOP_SET_FD(r10, 0x4c00, r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 675.59µs ago: executing program 1 (id=2712): r0 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r6, 0xfffffffffffffc01, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x60c100, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r7, 0x5606, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 0s ago: executing program 4 (id=2656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@struct={0x0, 0x5, 0x0, 0x4, 0x1, 0xfd39, [{0x10, 0x4, 0x7}, {0x3, 0x2, 0xd}, {0x3, 0x4, 0x2}, {0x9, 0x2, 0x7}, {0x2, 0x5, 0x400}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/215, 0x69, 0xd7, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x7fff, 0x0, 0x2, 0x802, 0xffffffffffffffff, 0x1, '\x00', r3, r4, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): 491555][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.501476][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.512118][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.521977][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.532447][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.542354][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.553009][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.565457][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.607703][ T8999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.641737][ T8884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.650687][ T8884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.659418][ T8884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.668172][ T8884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.698740][ T11] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.749247][ T11] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.788369][ T11] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.827737][ T11] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.872646][ T9038] loop0: detected capacity change from 0 to 1024 [ 131.885879][ T9038] EXT4-fs: Ignoring removed bh option [ 131.928971][ T11] bridge_slave_1: left allmulticast mode [ 131.934668][ T11] bridge_slave_1: left promiscuous mode [ 131.940462][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.948991][ T9038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.966223][ T11] bridge_slave_0: left allmulticast mode [ 131.971894][ T11] bridge_slave_0: left promiscuous mode [ 131.977756][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.024965][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 132.046489][ T9060] FAULT_INJECTION: forcing a failure. [ 132.046489][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 132.059208][ T9060] CPU: 1 UID: 0 PID: 9060 Comm: syz.0.1975 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 132.059237][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.059251][ T9060] Call Trace: [ 132.059258][ T9060] [ 132.059290][ T9060] dump_stack_lvl+0xf2/0x150 [ 132.059319][ T9060] dump_stack+0x15/0x1a [ 132.059341][ T9060] should_fail_ex+0x24a/0x260 [ 132.059379][ T9060] should_failslab+0x8f/0xb0 [ 132.059436][ T9060] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 132.059461][ T9060] ? sidtab_sid2str_get+0xb8/0x140 [ 132.059493][ T9060] kmemdup_noprof+0x2b/0x70 [ 132.059520][ T9060] sidtab_sid2str_get+0xb8/0x140 [ 132.059551][ T9060] security_sid_to_context_core+0x1eb/0x2f0 [ 132.059647][ T9060] security_sid_to_context+0x27/0x30 [ 132.059676][ T9060] selinux_lsmprop_to_secctx+0x68/0xf0 [ 132.059707][ T9060] security_lsmprop_to_secctx+0x40/0x80 [ 132.059752][ T9060] audit_log_task_context+0x76/0x180 [ 132.059788][ T9060] audit_log_task+0xf9/0x250 [ 132.059819][ T9060] audit_seccomp+0x68/0x130 [ 132.059847][ T9060] __seccomp_filter+0x6fa/0x1180 [ 132.059934][ T9060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.059963][ T9060] ? vfs_write+0x644/0x920 [ 132.059993][ T9060] __secure_computing+0x9f/0x1c0 [ 132.060016][ T9060] syscall_trace_enter+0xd1/0x1f0 [ 132.060042][ T9060] do_syscall_64+0xaa/0x1c0 [ 132.060119][ T9060] ? clear_bhb_loop+0x55/0xb0 [ 132.060194][ T9060] ? clear_bhb_loop+0x55/0xb0 [ 132.060220][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.060302][ T9060] RIP: 0033:0x7f9ea2f6d169 [ 132.060317][ T9060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.060424][ T9060] RSP: 002b:00007f9ea15b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 132.060513][ T9060] RAX: ffffffffffffffda RBX: 00007f9ea3186080 RCX: 00007f9ea2f6d169 [ 132.060527][ T9060] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000400000000200 [ 132.060539][ T9060] RBP: 00007f9ea15b6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.060559][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.060571][ T9060] R13: 0000000000000000 R14: 00007f9ea3186080 R15: 00007ffe53bc73f8 [ 132.060591][ T9060] [ 132.287441][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.307633][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.325492][ T11] bond0 (unregistering): Released all slaves [ 132.335819][ T11] bond1 (unregistering): Released all slaves [ 132.352331][ T9038] netlink: 'syz.0.1975': attribute type 3 has an invalid length. [ 132.360220][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1975'. [ 132.442553][ T11] tipc: Left network mode [ 132.448913][ T9060] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 132.489191][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.525814][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.533519][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.549555][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.549759][ T9081] netlink: 'syz.1.1989': attribute type 3 has an invalid length. [ 132.557242][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.636273][ T11] veth1_macvtap: left promiscuous mode [ 132.641942][ T11] veth0_macvtap: left promiscuous mode [ 132.648393][ T11] veth1_vlan: left promiscuous mode [ 132.653712][ T11] veth0_vlan: left promiscuous mode [ 132.677210][ T9094] 9pnet_fd: Insufficient options for proto=fd [ 132.745822][ T11] team0 (unregistering): Port device team_slave_1 removed [ 132.757921][ T11] team0 (unregistering): Port device team_slave_0 removed [ 132.793018][ T9104] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 2, id = 0 [ 132.859860][ T9111] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1999'. [ 132.888389][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 133.038392][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.045739][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.089871][ T9120] loop0: detected capacity change from 0 to 2048 [ 133.116241][ T9034] bridge_slave_0: entered allmulticast mode [ 133.123122][ T9034] bridge_slave_0: entered promiscuous mode [ 133.141799][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.148928][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.176252][ T9034] bridge_slave_1: entered allmulticast mode [ 133.194861][ T9034] bridge_slave_1: entered promiscuous mode [ 133.268274][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.286919][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.353106][ T9034] team0: Port device team_slave_0 added [ 133.379377][ T9034] team0: Port device team_slave_1 added [ 133.423399][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.430416][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.456486][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.503628][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.510671][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.536701][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.628109][ T9034] hsr_slave_0: entered promiscuous mode [ 133.636863][ T9034] hsr_slave_1: entered promiscuous mode [ 133.639521][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 133.642992][ T9034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.660153][ T9034] Cannot create hsr debugfs directory [ 133.666212][ T9136] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 2, id = 0 [ 133.740316][ T9145] IPv4: Oversized IP packet from 127.202.26.0 [ 133.841267][ T9034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.858756][ T9034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.871585][ T9034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.886970][ T9034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.939669][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.953680][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.965507][ T9152] IPv4: Oversized IP packet from 127.202.26.0 [ 133.975023][ T2113] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.982329][ T2113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.995835][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.002948][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.043687][ T9034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.099984][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2016'. [ 134.109987][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.209142][ T9178] xt_hashlimit: max too large, truncated to 1048576 [ 134.263836][ T9186] IPv4: Oversized IP packet from 127.202.26.0 [ 134.278087][ T9034] veth0_vlan: entered promiscuous mode [ 134.295021][ T9034] veth1_vlan: entered promiscuous mode [ 134.350247][ T9034] veth0_macvtap: entered promiscuous mode [ 134.357973][ T9034] veth1_macvtap: entered promiscuous mode [ 134.373288][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.383966][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.393815][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.404278][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.414125][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.424637][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.434490][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.444933][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.489749][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.501741][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.512531][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.522792][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.533333][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.543489][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.554390][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.564381][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.574876][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.590509][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.607116][ T9034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.616199][ T9034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.625228][ T9034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.626320][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 134.626338][ T29] audit: type=1400 audit(1740738615.283:8637): avc: denied { sqpoll } for pid=9199 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.634582][ T9034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.643822][ T29] audit: type=1400 audit(1740738615.303:8638): avc: denied { mount } for pid=9199 comm="syz.0.2026" name="/" dev="configfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 134.691358][ T29] audit: type=1400 audit(1740738615.333:8639): avc: denied { search } for pid=9199 comm="syz.0.2026" name="/" dev="configfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.713495][ T29] audit: type=1400 audit(1740738615.333:8640): avc: denied { read } for pid=9199 comm="syz.0.2026" name="/" dev="configfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.736055][ T29] audit: type=1400 audit(1740738615.333:8641): avc: denied { open } for pid=9199 comm="syz.0.2026" path="/" dev="configfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.796689][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2027'. [ 134.805863][ T9211] loop0: detected capacity change from 0 to 512 [ 134.815694][ T9211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 134.824027][ T9211] System zones: 1-12 [ 134.832418][ T9211] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2029: invalid indirect mapped block 8 (level 2) [ 134.856030][ T9211] EXT4-fs (loop0): Remounting filesystem read-only [ 134.862826][ T9211] EXT4-fs (loop0): 1 truncate cleaned up [ 134.873082][ T9211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.895096][ T9211] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 134.903032][ T9211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.929195][ T9221] loop6: detected capacity change from 0 to 512 [ 135.040930][ T9221] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1972: bg 0: block 248: padding at end of block bitmap is not set [ 135.055594][ T9230] wireguard0: entered promiscuous mode [ 135.055606][ T9221] Quota error (device loop6): write_blk: dquota write failed [ 135.055628][ T9221] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 135.061330][ T9230] wireguard0: entered allmulticast mode [ 135.084725][ T9221] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1972: Failed to acquire dquot type 1 [ 135.097230][ T9232] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 135.107512][ T29] audit: type=1400 audit(1740738615.773:8642): avc: denied { relabelto } for pid=9223 comm="syz.0.2032" name="file1" dev="tmpfs" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 135.134458][ T29] audit: type=1400 audit(1740738615.773:8643): avc: denied { associate } for pid=9223 comm="syz.0.2032" name="file1" dev="tmpfs" ino=1987 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 135.166531][ T9221] EXT4-fs (loop6): 1 truncate cleaned up [ 135.172644][ T9221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.185436][ T9221] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.218841][ T9232] loop0: detected capacity change from 0 to 512 [ 135.229282][ T9232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.251016][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1972'. [ 135.270156][ T9232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.284834][ T9232] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.285352][ T29] audit: type=1400 audit(1740738615.943:8644): avc: denied { read } for pid=9242 comm="syz.4.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.312077][ T9232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.324767][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.356178][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2040'. [ 135.368234][ T9248] netlink: 'syz.1.2039': attribute type 10 has an invalid length. [ 135.376156][ T9248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2039'. [ 135.392275][ T9248] team0: Port device geneve1 added [ 135.430719][ T9256] loop5: detected capacity change from 0 to 1024 [ 135.443866][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2044'. [ 135.447136][ T9256] ext4: Bad value for 'barrier' [ 135.652733][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2045'. [ 135.688465][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2045'. [ 135.974708][ T9269] Set syz1 is full, maxelem 65536 reached [ 136.251578][ T9294] SELinux: policydb version -1752491738 does not match my version range 15-34 [ 136.305984][ T9294] SELinux: failed to load policy [ 136.387247][ T9306] loop6: detected capacity change from 0 to 2048 [ 136.418551][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 136.453598][ T9301] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 136.470663][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.478575][ T9306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.506135][ T9301] bridge_slave_1: left allmulticast mode [ 136.511856][ T9301] bridge_slave_1: left promiscuous mode [ 136.517688][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.536868][ T9306] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.577799][ T9301] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.623973][ C1] Illegal XDP return value 16128 on prog (id 1466) dev bridge_slave_1, expect packet loss! [ 136.936019][ T9314] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2060: bg 0: block 345: padding at end of block bitmap is not set [ 136.975177][ T9314] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 136.987766][ T9314] EXT4-fs (loop6): This should not happen!! Data will be lost [ 136.987766][ T9314] [ 137.066165][ T2113] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 137.079031][ T2113] EXT4-fs (loop6): This should not happen!! Data will be lost [ 137.079031][ T2113] [ 137.095746][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.103270][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.112980][ T9328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.120446][ T9328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.172201][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 137.185033][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 137.185033][ T11] [ 137.194727][ T11] EXT4-fs (loop6): Total free blocks count 0 [ 137.200942][ T11] EXT4-fs (loop6): Free/Dirty block details [ 137.207029][ T11] EXT4-fs (loop6): free_blocks=0 [ 137.214291][ T9321] lo speed is unknown, defaulting to 1000 [ 137.227109][ T9321] lo speed is unknown, defaulting to 1000 [ 137.233035][ T9321] lo speed is unknown, defaulting to 1000 [ 137.277364][ T9321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.285072][ T9321] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 137.337468][ T9321] lo speed is unknown, defaulting to 1000 [ 137.355320][ T9321] lo speed is unknown, defaulting to 1000 [ 137.385142][ T9321] lo speed is unknown, defaulting to 1000 [ 137.400800][ T9321] lo speed is unknown, defaulting to 1000 [ 137.422725][ T9321] lo speed is unknown, defaulting to 1000 [ 137.446638][ T9321] lo speed is unknown, defaulting to 1000 [ 137.469249][ T9321] lo speed is unknown, defaulting to 1000 [ 137.583685][ T9361] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 137.671984][ T9368] loop5: detected capacity change from 0 to 512 [ 137.746998][ T9368] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2083: bg 0: block 248: padding at end of block bitmap is not set [ 137.823798][ T9368] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2083: Failed to acquire dquot type 1 [ 137.853737][ T9381] loop0: detected capacity change from 0 to 1024 [ 137.913858][ T9381] ext4: Unknown parameter 'smackfshat' [ 137.926612][ T9368] EXT4-fs (loop5): 1 truncate cleaned up [ 137.944198][ T9368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.987016][ T9383] loop6: detected capacity change from 0 to 512 [ 138.004701][ T9383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.016589][ T9368] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.055015][ T9383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.107396][ T9383] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.132149][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.142957][ T9396] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.156706][ T9383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.172770][ T9381] loop0: detected capacity change from 0 to 512 [ 138.242290][ T9381] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2098: bg 0: block 248: padding at end of block bitmap is not set [ 138.272406][ T9381] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2098: Failed to acquire dquot type 1 [ 138.287664][ T9381] EXT4-fs (loop0): 1 truncate cleaned up [ 138.293919][ T9381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.336823][ T9415] netlink: 'syz.4.2095': attribute type 21 has an invalid length. [ 138.344713][ T9415] netlink: 'syz.4.2095': attribute type 20 has an invalid length. [ 138.377030][ T9381] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.538964][ T9430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=9430 comm=syz.6.2102 [ 138.640670][ T9438] sch_tbf: burst 20480 is lower than device lo mtu (65550) ! [ 138.870833][ T9381] __nla_validate_parse: 6 callbacks suppressed [ 138.870858][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 139.082195][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 139.102516][ T9454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.163174][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.177103][ T2113] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 139.199591][ T9454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.234631][ T9457] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2111'. [ 139.260344][ T9454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.297076][ T9457] loop0: detected capacity change from 0 to 1024 [ 139.311335][ T9457] ext4: Unknown parameter 'smackfshat' [ 139.320974][ T9454] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.395235][ T9454] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.406651][ T9454] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.422766][ T9454] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.434750][ T9454] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.461547][ T9462] nfs4: Bad value for 'source' [ 139.548485][ T9457] loop0: detected capacity change from 0 to 512 [ 139.588173][ T9457] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2111: bg 0: block 248: padding at end of block bitmap is not set [ 139.615627][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2120'. [ 139.636211][ T9457] __quota_error: 398 callbacks suppressed [ 139.636232][ T9457] Quota error (device loop0): write_blk: dquota write failed [ 139.649586][ T9457] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 139.659625][ T9457] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2111: Failed to acquire dquot type 1 [ 139.737390][ T29] audit: type=1400 audit(1740738620.403:9038): avc: denied { read } for pid=9490 comm="syz.6.2122" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.764958][ T9491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9491 comm=syz.6.2122 [ 139.778414][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2122'. [ 139.787443][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2122'. [ 139.800506][ T29] audit: type=1400 audit(1740738620.403:9039): avc: denied { open } for pid=9490 comm="syz.6.2122" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.807640][ T9457] EXT4-fs (loop0): 1 truncate cleaned up [ 139.824403][ T29] audit: type=1400 audit(1740738620.403:9040): avc: denied { ioctl } for pid=9490 comm="syz.6.2122" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.878282][ T9457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.976798][ T9457] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.172822][ T9499] loop5: detected capacity change from 0 to 512 [ 140.220435][ T9501] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.247539][ T9499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.270356][ T29] audit: type=1400 audit(1740738620.933:9041): avc: denied { accept } for pid=9500 comm="syz.6.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.327814][ T9504] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2125'. [ 140.338482][ T9499] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.423272][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 140.434368][ T9499] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2124: corrupted inode contents [ 140.476784][ T9499] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2124: mark_inode_dirty error [ 140.500311][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 140.520518][ T9499] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2124: corrupted inode contents [ 140.577265][ T9499] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2124: mark_inode_dirty error [ 140.620737][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'. [ 140.629897][ T29] audit: type=1400 audit(1740738621.283:9042): avc: denied { setopt } for pid=9516 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.630846][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.661538][ T28] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 140.670601][ T28] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 140.727807][ T29] audit: type=1326 audit(1740738621.373:9043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f66bd169 code=0x7ffc0000 [ 140.751517][ T29] audit: type=1326 audit(1740738621.373:9044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f66bd169 code=0x7ffc0000 [ 140.870140][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.105651][ T9552] loop6: detected capacity change from 0 to 512 [ 141.157083][ T9554] loop5: detected capacity change from 0 to 512 [ 141.166359][ T9552] EXT4-fs: Ignoring removed oldalloc option [ 141.179491][ T9552] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.190245][ T9554] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.219247][ T9552] EXT4-fs (loop6): 1 truncate cleaned up [ 141.235268][ T9552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.261878][ T9560] netlink: 'syz.4.2149': attribute type 21 has an invalid length. [ 141.262596][ T8884] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 141.327420][ T9569] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 141.334074][ T9569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.341715][ T9569] vhci_hcd vhci_hcd.0: Device attached [ 141.407629][ T9034] ------------[ cut here ]------------ [ 141.413125][ T9034] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 141.413472][ T9034] WARNING: CPU: 0 PID: 9034 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 141.432950][ T9034] Modules linked in: [ 141.436898][ T9034] CPU: 0 UID: 0 PID: 9034 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 141.447850][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.458063][ T9034] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 141.464064][ T9034] Code: ff 48 c7 c7 1e f5 b2 86 e8 99 61 c4 ff c6 05 90 71 0b 05 01 90 48 c7 c7 23 33 1b 86 4c 89 f6 89 ea 44 89 f9 e8 ed b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 141.465172][ T9569] netlink: 'syz.5.2150': attribute type 13 has an invalid length. [ 141.483801][ T9034] RSP: 0018:ffffc900037cfac8 EFLAGS: 00010246 [ 141.483820][ T9034] RAX: 9b878f79d9451600 RBX: ffff888117861c28 RCX: ffff888119d19080 [ 141.493838][ T9576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.497910][ T9034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.521985][ T9034] RBP: 0000000000000027 R08: ffffffff81343af7 R09: 0000000000000000 [ 141.530052][ T9034] R10: 0001ffffffffffff R11: ffff888119d19080 R12: ffff888117861c28 [ 141.538091][ T9034] R13: ffff888117861c50 R14: ffff888117861b00 R15: 000000000000001d [ 141.546168][ T9034] FS: 0000555557fe3500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 141.555188][ T9034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.561936][ T9034] CR2: 0000000000000000 CR3: 000000012f038000 CR4: 00000000003506f0 [ 141.570166][ T9034] DR0: 0000400000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.578239][ T9034] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 141.586503][ T9034] Call Trace: [ 141.589920][ T9034] [ 141.592869][ T9034] ? __warn+0x141/0x350 [ 141.597091][ T9034] ? report_bug+0x315/0x420 [ 141.601812][ T9034] ? inode_set_cached_link+0xc4/0xd0 [ 141.607263][ T9034] ? handle_bug+0x60/0x90 [ 141.611707][ T9034] ? exc_invalid_op+0x1a/0x50 [ 141.616468][ T9034] ? asm_exc_invalid_op+0x1a/0x20 [ 141.621597][ T9034] ? __warn_printk+0x167/0x1b0 [ 141.626416][ T9034] ? inode_set_cached_link+0xc4/0xd0 [ 141.631744][ T9034] ? inode_set_cached_link+0xc3/0xd0 [ 141.637136][ T9034] __ext4_iget+0x1bb5/0x1e20 [ 141.641923][ T9034] ext4_lookup+0x15b/0x390 [ 141.646531][ T9034] __lookup_slow+0x18a/0x250 [ 141.651358][ T9034] lookup_slow+0x3c/0x60 [ 141.655640][ T9034] walk_component+0x1f5/0x230 [ 141.660537][ T9034] ? path_lookupat+0xfd/0x2b0 [ 141.665243][ T9034] path_lookupat+0x10a/0x2b0 [ 141.669881][ T9034] filename_lookup+0x150/0x340 [ 141.674745][ T9034] user_path_at+0x3c/0x120 [ 141.679190][ T9034] __x64_sys_umount+0x85/0xe0 [ 141.683953][ T9034] x64_sys_call+0x20cd/0x2dc0 [ 141.688655][ T9034] do_syscall_64+0xc9/0x1c0 [ 141.693200][ T9034] ? clear_bhb_loop+0x55/0xb0 [ 141.698027][ T9034] ? clear_bhb_loop+0x55/0xb0 [ 141.702727][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.708757][ T9034] RIP: 0033:0x7f8e1018e497 [ 141.713212][ T9034] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 141.732868][ T9034] RSP: 002b:00007ffea345c208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 141.741309][ T9034] RAX: ffffffffffffffda RBX: 00007f8e1020e08c RCX: 00007f8e1018e497 [ 141.749312][ T9034] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea345c2c0 [ 141.757393][ T9034] RBP: 00007ffea345c2c0 R08: 0000000000000000 R09: 0000000000000000 [ 141.765393][ T9034] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea345d3b0 [ 141.773398][ T9034] R13: 00007f8e1020e08c R14: 000000000002281c R15: 00007ffea345f570 [ 141.781802][ T9034] [ 141.784869][ T9034] ---[ end trace 0000000000000000 ]--- [ 141.791851][ T9034] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 141.812278][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.868603][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.875811][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.916125][ T3357] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 141.961291][ T9569] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.970239][ T9569] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.979195][ T9569] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.988148][ T9569] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.034278][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.041850][ T9591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.049736][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.057706][ T9591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.072082][ T9595] nfs4: Bad value for 'source' [ 142.079855][ T9570] vhci_hcd: connection reset by peer [ 142.087429][ T7502] vhci_hcd: stop threads [ 142.091687][ T7502] vhci_hcd: release socket [ 142.096255][ T7502] vhci_hcd: disconnect device [ 142.191523][ T9607] loop0: detected capacity change from 0 to 512 [ 142.202406][ T9607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2167: bg 0: block 35: padding at end of block bitmap is not set [ 142.219234][ T9607] EXT4-fs (loop0): Remounting filesystem read-only [ 142.229129][ T9607] EXT4-fs (loop0): 1 truncate cleaned up [ 142.236445][ T9607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.251166][ T9607] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 142.260095][ T9607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.290034][ T9607] loop0: detected capacity change from 0 to 1024 [ 142.305633][ T9607] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.331659][ T9607] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 142.347706][ T9607] EXT4-fs (loop0): orphan cleanup on readonly fs [ 142.358376][ T9607] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 142.373880][ T9607] EXT4-fs (loop0): Remounting filesystem read-only [ 142.381494][ T9607] EXT4-fs (loop0): 1 orphan inode deleted [ 142.396532][ T9607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.409434][ T9607] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 142.416837][ T9607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.434559][ T9621] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 2, id = 0 [ 142.467398][ T9623] nfs4: Bad value for 'source' [ 142.514049][ T9631] loop0: detected capacity change from 0 to 1024 [ 142.521866][ T9631] ext4: Unknown parameter 'smackfshat' [ 142.574315][ T9639] cgroup: Need name or subsystem set [ 142.599284][ T9640] loop0: detected capacity change from 0 to 512 [ 142.629600][ T9640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2178: bg 0: block 248: padding at end of block bitmap is not set [ 142.647061][ T9640] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2178: Failed to acquire dquot type 1 [ 142.661770][ T9640] EXT4-fs (loop0): 1 truncate cleaned up [ 142.672914][ T9645] loop5: detected capacity change from 0 to 512 [ 142.673080][ T9640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.691987][ T9640] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.702505][ T9639] loop6: detected capacity change from 0 to 256 [ 142.711639][ T9639] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.727076][ T9639] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 142.735663][ T9639] FAT-fs (loop6): Filesystem has been set read-only [ 142.755404][ T9645] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2182: bg 0: block 248: padding at end of block bitmap is not set [ 142.771054][ T9645] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2182: Failed to acquire dquot type 1 [ 142.783125][ T9645] EXT4-fs (loop5): 1 truncate cleaned up [ 142.790390][ T9645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.803371][ T9645] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.856343][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.913070][ T9652] loop5: detected capacity change from 0 to 512 [ 142.922862][ T9654] vhci_hcd: invalid port number 128 [ 142.928191][ T9654] vhci_hcd: default hub control req: 3f0a v0302 i0080 l0 [ 142.947648][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.957442][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 142.958754][ T9652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.982054][ T9652] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.997631][ T9658] nfs4: Bad value for 'source' [ 143.025339][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.037240][ T9660] loop6: detected capacity change from 0 to 512 [ 143.103023][ T9667] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 143.112916][ T9667] SELinux: failed to load policy [ 143.118332][ T9668] SELinux: failed to load policy [ 143.164280][ T9674] loop5: detected capacity change from 0 to 512 [ 143.171428][ T9674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.182736][ T9674] EXT4-fs (loop5): 1 truncate cleaned up [ 143.189523][ T9674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.286440][ T9685] loop0: detected capacity change from 0 to 1024 [ 143.293140][ T9685] ext4: Unknown parameter 'smackfshat' [ 143.360100][ T9687] loop0: detected capacity change from 0 to 512 [ 143.388331][ T9687] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2195: bg 0: block 248: padding at end of block bitmap is not set [ 143.404069][ T9687] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2195: Failed to acquire dquot type 1 [ 143.416215][ T9687] EXT4-fs (loop0): 1 truncate cleaned up [ 143.422431][ T9687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.435613][ T9687] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.499822][ T9695] wireguard0: entered promiscuous mode [ 143.505340][ T9695] wireguard0: entered allmulticast mode [ 143.655550][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.665576][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 143.790612][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.832532][ T9721] loop5: detected capacity change from 0 to 512 [ 143.867984][ T9721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.882828][ T9721] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.886981][ T9728] __nla_validate_parse: 10 callbacks suppressed [ 143.886999][ T9728] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2209'. [ 143.896536][ T9721] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2207: corrupted inode contents [ 143.921564][ T9721] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2207: mark_inode_dirty error [ 143.933338][ T9721] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2207: corrupted inode contents [ 143.947685][ T9721] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2207: mark_inode_dirty error [ 143.959057][ T9728] loop0: detected capacity change from 0 to 1024 [ 143.965703][ T9728] ext4: Unknown parameter 'smackfshat' [ 144.101761][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.130651][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 144.328579][ T9748] FAULT_INJECTION: forcing a failure. [ 144.328579][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 144.341313][ T9748] CPU: 1 UID: 0 PID: 9748 Comm: syz.5.2217 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 144.341344][ T9748] Tainted: [W]=WARN [ 144.341350][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.341362][ T9748] Call Trace: [ 144.341368][ T9748] [ 144.341376][ T9748] dump_stack_lvl+0xf2/0x150 [ 144.341475][ T9748] dump_stack+0x15/0x1a [ 144.341501][ T9748] should_fail_ex+0x24a/0x260 [ 144.341602][ T9748] ? audit_log_d_path+0x8e/0x150 [ 144.341719][ T9748] should_failslab+0x8f/0xb0 [ 144.341757][ T9748] __kmalloc_cache_noprof+0x4e/0x320 [ 144.341849][ T9748] audit_log_d_path+0x8e/0x150 [ 144.341883][ T9748] audit_log_d_path_exe+0x42/0x70 [ 144.341920][ T9748] audit_log_task+0x1ec/0x250 [ 144.341965][ T9748] audit_seccomp+0x68/0x130 [ 144.342019][ T9748] __seccomp_filter+0x6fa/0x1180 [ 144.342117][ T9748] __secure_computing+0x9f/0x1c0 [ 144.342144][ T9748] syscall_trace_enter+0xd1/0x1f0 [ 144.342238][ T9748] do_syscall_64+0xaa/0x1c0 [ 144.342339][ T9748] ? clear_bhb_loop+0x55/0xb0 [ 144.342372][ T9748] ? clear_bhb_loop+0x55/0xb0 [ 144.342405][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.342439][ T9748] RIP: 0033:0x7f97f66bbb7c [ 144.342457][ T9748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.342495][ T9748] RSP: 002b:00007f97f4d27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.342518][ T9748] RAX: ffffffffffffffda RBX: 00007f97f68d5fa0 RCX: 00007f97f66bbb7c [ 144.342532][ T9748] RDX: 000000000000000f RSI: 00007f97f4d270a0 RDI: 0000000000000006 [ 144.342573][ T9748] RBP: 00007f97f4d27090 R08: 0000000000000000 R09: 0000000000000000 [ 144.342584][ T9748] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000002 [ 144.342596][ T9748] R13: 0000000000000000 R14: 00007f97f68d5fa0 R15: 00007ffc4f692098 [ 144.342615][ T9748] [ 144.646088][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 144.646104][ T29] audit: type=1326 audit(1740738626.298:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e10129359 code=0x7ffc0000 [ 144.675675][ T29] audit: type=1326 audit(1740738626.298:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 144.736364][ T29] audit: type=1326 audit(1740738626.308:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e10184127 code=0x7ffc0000 [ 144.759767][ T29] audit: type=1326 audit(1740738626.308:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e10129359 code=0x7ffc0000 [ 144.783285][ T29] audit: type=1326 audit(1740738626.308:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 144.806686][ T29] audit: type=1326 audit(1740738626.318:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e10184127 code=0x7ffc0000 [ 144.830114][ T29] audit: type=1326 audit(1740738626.318:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8e10129359 code=0x7ffc0000 [ 144.853439][ T29] audit: type=1326 audit(1740738626.318:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 144.876863][ T29] audit: type=1326 audit(1740738626.328:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.5.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f66bd169 code=0x7ffc0000 [ 144.895151][ T9761] loop5: detected capacity change from 0 to 512 [ 144.900245][ T29] audit: type=1326 audit(1740738626.328:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.5.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f66bd169 code=0x7ffc0000 [ 144.978553][ T9761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.994045][ T9761] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.250786][ T9785] loop6: detected capacity change from 0 to 512 [ 145.266214][ T9761] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2221: corrupted inode contents [ 145.286951][ T9785] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2227: bg 0: block 248: padding at end of block bitmap is not set [ 145.303541][ T9761] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2221: mark_inode_dirty error [ 145.319497][ T9785] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2227: Failed to acquire dquot type 1 [ 145.338063][ T9761] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2221: corrupted inode contents [ 145.354546][ T9785] EXT4-fs (loop6): 1 truncate cleaned up [ 145.365429][ T9761] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2221: mark_inode_dirty error [ 145.370055][ T9785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.404330][ T9785] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.831602][ T9759] netlink: 'syz.0.2220': attribute type 25 has an invalid length. [ 145.879006][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.932244][ T9804] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2234'. [ 145.969708][ T9804] loop5: detected capacity change from 0 to 1024 [ 145.996789][ T9804] ext4: Unknown parameter 'smackfshat' [ 146.214943][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2234'. [ 146.346490][ T9807] loop5: detected capacity change from 0 to 128 [ 146.353466][ T9807] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.367743][ T9807] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.424460][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.439220][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.527375][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.568988][ T9758] syz.0.2220 (9758) used greatest stack depth: 5200 bytes left [ 146.908687][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.975115][ T2113] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.976031][ T3357] usb 11-1: enqueue for inactive port 0 [ 146.996261][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.999815][ T3357] usb 11-1: enqueue for inactive port 0 [ 147.058638][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.121143][ T9844] netlink: 'syz.1.2249': attribute type 13 has an invalid length. [ 147.132008][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.229528][ T11] bridge_slave_1: left allmulticast mode [ 147.235286][ T11] bridge_slave_1: left promiscuous mode [ 147.240963][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.246323][ T3357] vhci_hcd: vhci_device speed not set [ 147.256516][ T11] bridge_slave_0: left allmulticast mode [ 147.256944][ T9849] new mount options do not match the existing superblock, will be ignored [ 147.262197][ T11] bridge_slave_0: left promiscuous mode [ 147.272716][ T9849] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 147.276490][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.289744][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2251'. [ 147.389523][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.408440][ T11] bond0 (unregistering): Released all slaves [ 147.458560][ T9853] loop6: detected capacity change from 0 to 512 [ 147.475664][ T9853] EXT4-fs: Ignoring removed oldalloc option [ 147.476385][ T11] tipc: Left network mode [ 147.496276][ T9854] IPVS: Unknown mcast interface: ipvlan0 [ 147.505567][ T9853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 147.538877][ T11] IPVS: stopping backup sync thread 9104 ... [ 147.568644][ T9853] EXT4-fs (loop6): 1 truncate cleaned up [ 147.605119][ T9853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.622025][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.629512][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.652284][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.659811][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.675142][ T11] veth1_macvtap: left promiscuous mode [ 147.680774][ T11] veth0_macvtap: left promiscuous mode [ 147.690985][ T11] veth1_vlan: left promiscuous mode [ 147.698723][ T11] veth0_vlan: left promiscuous mode [ 147.716092][ T9853] loop6: detected capacity change from 512 to 64 [ 147.765212][ T9034] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -12) [ 147.782605][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.825246][ T11] team0 (unregistering): Port device team_slave_1 removed [ 147.837150][ T11] team0 (unregistering): Port device team_slave_0 removed [ 147.870371][ T9864] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2259'. [ 147.882043][ T9875] SELinux: failed to load policy [ 147.916324][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2262'. [ 147.943713][ T9885] loop5: detected capacity change from 0 to 512 [ 147.987574][ T9885] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2263: bg 0: block 248: padding at end of block bitmap is not set [ 148.002514][ T9885] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2263: Failed to acquire dquot type 1 [ 148.014717][ T9890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2264'. [ 148.015310][ T9885] EXT4-fs (loop5): 1 truncate cleaned up [ 148.031943][ T9885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.036807][ T9887] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2264'. [ 148.044666][ T9885] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.056435][ T9893] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 2, id = 0 [ 148.154795][ T9865] chnl_net:caif_netlink_parms(): no params data found [ 148.171366][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.205553][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.212809][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.220873][ T9865] bridge_slave_0: entered allmulticast mode [ 148.227520][ T9865] bridge_slave_0: entered promiscuous mode [ 148.234700][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.236715][ T9911] SELinux: failed to load policy [ 148.241840][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.255519][ T9865] bridge_slave_1: entered allmulticast mode [ 148.267157][ T9865] bridge_slave_1: entered promiscuous mode [ 148.297744][ T9865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.308298][ T9865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.331778][ T9919] loop6: detected capacity change from 0 to 512 [ 148.359053][ T9865] team0: Port device team_slave_0 added [ 148.359683][ T9919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.365787][ T9865] team0: Port device team_slave_1 added [ 148.387395][ T9919] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.400845][ T9919] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2273: corrupted inode contents [ 148.413145][ T9919] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2273: mark_inode_dirty error [ 148.425557][ T9865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.432609][ T9865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.432829][ T9923] loop5: detected capacity change from 0 to 256 [ 148.458590][ T9865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.459823][ T9865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.466058][ T9919] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2273: corrupted inode contents [ 148.475428][ T9865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.475456][ T9865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.500196][ T9923] netlink: 'syz.5.2274': attribute type 27 has an invalid length. [ 148.532284][ T9919] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2273: mark_inode_dirty error [ 148.573466][ T9865] hsr_slave_0: entered promiscuous mode [ 148.579614][ T9865] hsr_slave_1: entered promiscuous mode [ 148.585490][ T9865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.593324][ T9865] Cannot create hsr debugfs directory [ 148.657645][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.683388][ T9865] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.697180][ T9865] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.720751][ T9865] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.741182][ T9865] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.778745][ T9865] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.785853][ T9865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.793192][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.796969][ T9943] loop6: detected capacity change from 0 to 256 [ 148.800322][ T9865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.852168][ T9865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.863552][ T9865] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.945721][ T2113] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.953920][ T2113] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.997632][ T2113] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.004780][ T2113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.024330][ T2113] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.031481][ T2113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.063596][ T9953] loop5: detected capacity change from 0 to 2048 [ 149.066984][ T9865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.141735][ T9953] EXT4-fs: Ignoring removed bh option [ 149.162547][ T9865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.170276][ T9953] ext4: Unknown parameter 'fsuuid' [ 149.174661][ T9970] loop6: detected capacity change from 0 to 128 [ 149.188501][ T9970] EXT4-fs: Mount option(s) incompatible with ext2 [ 149.278010][ T9986] loop6: detected capacity change from 0 to 512 [ 149.357650][ T9986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2293: bg 0: block 248: padding at end of block bitmap is not set [ 149.383057][ T9986] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2293: Failed to acquire dquot type 1 [ 149.427939][ T9986] EXT4-fs (loop6): 1 truncate cleaned up [ 149.447171][ T9865] veth0_vlan: entered promiscuous mode [ 149.463644][ T9986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.510177][ T9865] veth1_vlan: entered promiscuous mode [ 149.526147][ T9986] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.553999][ T9865] veth0_macvtap: entered promiscuous mode [ 149.587577][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.592804][ T9865] veth1_macvtap: entered promiscuous mode [ 149.626730][ T9865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.637285][ T9865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.647141][ T9865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.657617][ T9865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.659959][T10008] loop6: detected capacity change from 0 to 128 [ 149.671035][ T9865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.686957][ T9865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.697657][ T9865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.707665][ T9865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.718215][ T9865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.730901][ T9865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.740657][ T29] kauditd_printk_skb: 4599 callbacks suppressed [ 149.740675][ T29] audit: type=1400 audit(1740738631.398:13961): avc: denied { remount } for pid=10007 comm="syz.6.2299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 149.741453][ T9865] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.775996][ T9865] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.784991][ T9865] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.793787][ T9865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.814266][T10008] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 149.820921][T10008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.828510][T10008] vhci_hcd vhci_hcd.0: Device attached [ 149.879575][T10015] vhci_hcd: connection closed [ 149.879797][ T11] vhci_hcd: stop threads [ 149.888793][ T11] vhci_hcd: release socket [ 149.893242][ T11] vhci_hcd: disconnect device [ 149.916001][ T29] audit: type=1400 audit(1740738631.568:13962): avc: denied { create } for pid=10013 comm="syz.5.2302" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.936962][ T29] audit: type=1400 audit(1740738631.568:13963): avc: denied { rename } for pid=10013 comm="syz.5.2302" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.032702][ T29] audit: type=1326 audit(1740738631.688:13964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd0a5d169 code=0x7ffc0000 [ 150.056463][ T29] audit: type=1326 audit(1740738631.688:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd0a5d169 code=0x7ffc0000 [ 150.080184][ T29] audit: type=1326 audit(1740738631.688:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd0a5d169 code=0x7ffc0000 [ 150.103836][ T29] audit: type=1326 audit(1740738631.688:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1bd0a5d169 code=0x7ffc0000 [ 150.410737][ T29] audit: type=1326 audit(1740738632.058:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.4.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75116bd169 code=0x7ffc0000 [ 150.434421][ T29] audit: type=1326 audit(1740738632.058:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.4.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75116bd169 code=0x7ffc0000 [ 150.458163][ T29] audit: type=1326 audit(1740738632.058:13970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.4.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75116bd169 code=0x7ffc0000 [ 150.578803][T10063] ext2: Invalid gid '0x00000000ffffffff' [ 150.647790][T10068] loop6: detected capacity change from 0 to 2048 [ 150.696814][T10068] loop6: p1 < > p4 [ 150.716342][T10068] loop6: p4 size 8388608 extends beyond EOD, truncated [ 150.888493][T10089] loop7: detected capacity change from 0 to 512 [ 150.981904][T10089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.008004][T10089] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.047885][T10089] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2330: corrupted inode contents [ 151.066957][T10100] SELinux: failed to load policy [ 151.072280][T10089] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2330: mark_inode_dirty error [ 151.110690][T10089] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2330: corrupted inode contents [ 151.136691][T10089] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2330: mark_inode_dirty error [ 151.169811][T10106] random: crng reseeded on system resumption [ 151.299608][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.407210][T10124] FAULT_INJECTION: forcing a failure. [ 151.407210][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.420386][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.6.2344 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 151.420472][T10124] Tainted: [W]=WARN [ 151.420480][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.420492][T10124] Call Trace: [ 151.420497][T10124] [ 151.420505][T10124] dump_stack_lvl+0xf2/0x150 [ 151.420539][T10124] dump_stack+0x15/0x1a [ 151.420565][T10124] should_fail_ex+0x24a/0x260 [ 151.420624][T10124] should_fail+0xb/0x10 [ 151.420662][T10124] should_fail_usercopy+0x1a/0x20 [ 151.420692][T10124] _copy_from_user+0x1c/0xa0 [ 151.420760][T10124] do_ipt_set_ctl+0x423/0x8b0 [ 151.420790][T10124] ? _raw_spin_unlock_bh+0x36/0x40 [ 151.420815][T10124] ? lock_sock_nested+0x10f/0x140 [ 151.420858][T10124] nf_setsockopt+0x195/0x1b0 [ 151.420900][T10124] ip_setsockopt+0xea/0x100 [ 151.420935][T10124] udp_setsockopt+0x95/0xb0 [ 151.420962][T10124] sock_common_setsockopt+0x64/0x80 [ 151.421003][T10124] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.421068][T10124] __sys_setsockopt+0x187/0x200 [ 151.421098][T10124] __x64_sys_setsockopt+0x66/0x80 [ 151.421164][T10124] x64_sys_call+0x282e/0x2dc0 [ 151.421190][T10124] do_syscall_64+0xc9/0x1c0 [ 151.421220][T10124] ? clear_bhb_loop+0x55/0xb0 [ 151.421253][T10124] ? clear_bhb_loop+0x55/0xb0 [ 151.421302][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.421336][T10124] RIP: 0033:0x7f8e1018d169 [ 151.421355][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.421426][T10124] RSP: 002b:00007f8e0e7f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.421446][T10124] RAX: ffffffffffffffda RBX: 00007f8e103a5fa0 RCX: 00007f8e1018d169 [ 151.421461][T10124] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 151.421473][T10124] RBP: 00007f8e0e7f1090 R08: 0000000000000368 R09: 0000000000000000 [ 151.421484][T10124] R10: 0000400000000480 R11: 0000000000000246 R12: 0000000000000001 [ 151.421495][T10124] R13: 0000000000000000 R14: 00007f8e103a5fa0 R15: 00007ffea345f158 [ 151.421514][T10124] [ 151.423874][T10125] FAULT_INJECTION: forcing a failure. [ 151.423874][T10125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.606022][T10128] qrtr: Invalid version 0 [ 151.606629][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.5.2343 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 151.606665][T10125] Tainted: [W]=WARN [ 151.606673][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.606690][T10125] Call Trace: [ 151.606698][T10125] [ 151.606707][T10125] dump_stack_lvl+0xf2/0x150 [ 151.606778][T10125] dump_stack+0x15/0x1a [ 151.606805][T10125] should_fail_ex+0x24a/0x260 [ 151.606891][T10125] should_fail+0xb/0x10 [ 151.606923][T10125] should_fail_usercopy+0x1a/0x20 [ 151.607041][T10125] _copy_from_user+0x1c/0xa0 [ 151.607083][T10125] move_addr_to_kernel+0x82/0x120 [ 151.607167][T10125] __sys_bind+0x9e/0x190 [ 151.607214][T10125] __x64_sys_bind+0x41/0x50 [ 151.607236][T10125] x64_sys_call+0x20ab/0x2dc0 [ 151.607329][T10125] do_syscall_64+0xc9/0x1c0 [ 151.607366][T10125] ? clear_bhb_loop+0x55/0xb0 [ 151.607400][T10125] ? clear_bhb_loop+0x55/0xb0 [ 151.607490][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.607523][T10125] RIP: 0033:0x7f97f66bd169 [ 151.607653][T10125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.607712][T10125] RSP: 002b:00007f97f4d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 151.607734][T10125] RAX: ffffffffffffffda RBX: 00007f97f68d5fa0 RCX: 00007f97f66bd169 [ 151.607749][T10125] RDX: 000000000000006e RSI: 0000400000000000 RDI: 0000000000000006 [ 151.607764][T10125] RBP: 00007f97f4d27090 R08: 0000000000000000 R09: 0000000000000000 [ 151.607778][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.607792][T10125] R13: 0000000000000000 R14: 00007f97f68d5fa0 R15: 00007ffc4f692098 [ 151.607834][T10125] [ 151.739648][T10134] loop7: detected capacity change from 0 to 512 [ 151.865726][T10134] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.101046][T10167] loop5: detected capacity change from 0 to 512 [ 152.118388][T10167] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2357: bg 0: block 248: padding at end of block bitmap is not set [ 152.133240][T10167] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2357: Failed to acquire dquot type 1 [ 152.146450][T10167] EXT4-fs (loop5): 1 truncate cleaned up [ 152.152514][T10167] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.169258][T10167] netlink: 'syz.5.2357': attribute type 21 has an invalid length. [ 152.177270][T10167] netlink: 'syz.5.2357': attribute type 20 has an invalid length. [ 152.178163][T10170] loop6: detected capacity change from 0 to 2048 [ 152.185075][T10167] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.209850][T10174] loop5: detected capacity change from 0 to 512 [ 152.217062][T10174] EXT4-fs: Ignoring removed oldalloc option [ 152.223281][T10174] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.244589][T10174] EXT4-fs (loop5): 1 truncate cleaned up [ 152.247203][T10170] Alternate GPT is invalid, using primary GPT. [ 152.256744][T10170] loop6: p1 p2 p3 [ 152.324896][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 152.333987][T10188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2363'. [ 152.365696][ T8884] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 152.451523][T10197] SELinux: failed to load policy [ 152.550599][T10219] loop7: detected capacity change from 0 to 512 [ 152.557823][T10219] EXT4-fs: Ignoring removed oldalloc option [ 152.564211][T10219] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 152.579281][T10224] loop5: detected capacity change from 0 to 512 [ 152.586497][T10219] EXT4-fs (loop7): 1 truncate cleaned up [ 152.608243][T10224] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.621331][T10224] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2376: corrupted inode contents [ 152.633260][T10224] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2376: mark_inode_dirty error [ 152.644823][T10224] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2376: corrupted inode contents [ 152.656930][T10224] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2376: mark_inode_dirty error [ 152.683696][ T9865] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 152.835813][T10243] loop5: detected capacity change from 0 to 764 [ 152.843451][T10243] rock: directory entry would overflow storage [ 152.849791][T10243] rock: sig=0x4654, size=5, remaining=4 [ 152.889383][T10251] xt_hashlimit: max too large, truncated to 1048576 [ 152.898656][T10251] Cannot find set identified by id 0 to match [ 152.910778][T10251] ext2: Invalid gid '0x00000000ffffffff' [ 152.962240][T10243] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 152.992469][T10259] loop7: detected capacity change from 0 to 512 [ 153.018699][T10259] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.035046][T10259] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2391: corrupted inode contents [ 153.047582][T10259] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2391: mark_inode_dirty error [ 153.060670][T10259] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2391: corrupted inode contents [ 153.072924][T10259] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2391: mark_inode_dirty error [ 153.080752][T10266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10266 comm=syz.4.2393 [ 153.130519][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 153.160490][ T3375] IPVS: starting estimator thread 0... [ 153.185477][T10266] bond0: (slave bridge_slave_1): Releasing backup interface [ 153.266164][T10274] IPVS: using max 2112 ests per chain, 105600 per kthread [ 153.310659][T10295] random: crng reseeded on system resumption [ 153.390153][T10308] netlink: 'syz.7.2406': attribute type 4 has an invalid length. [ 153.402102][T10308] netlink: 'syz.7.2406': attribute type 4 has an invalid length. [ 153.422839][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 153.489371][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2416'. [ 153.776440][T10363] netlink: 'syz.1.2431': attribute type 13 has an invalid length. [ 153.796843][T10367] loop7: detected capacity change from 0 to 512 [ 153.804149][T10367] EXT4-fs: Ignoring removed oldalloc option [ 153.811074][T10367] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.833414][T10367] EXT4-fs (loop7): 1 truncate cleaned up [ 153.897894][T10363] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.906417][T10363] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.914831][T10363] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.923619][T10363] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.979199][ T9865] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 154.042147][T10378] loop7: detected capacity change from 0 to 512 [ 154.058259][T10378] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.071451][T10378] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2436: corrupted inode contents [ 154.083777][T10378] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2436: mark_inode_dirty error [ 154.095666][T10378] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2436: corrupted inode contents [ 154.108366][T10378] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2436: mark_inode_dirty error [ 154.174825][T10386] netlink: 'syz.5.2439': attribute type 10 has an invalid length. [ 154.183161][T10386] team0: Cannot enslave team device to itself [ 154.270024][T10390] loop7: detected capacity change from 0 to 256 [ 154.277645][T10390] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.340688][T10402] loop6: detected capacity change from 0 to 512 [ 154.348176][T10402] EXT4-fs: Ignoring removed oldalloc option [ 154.350949][T10400] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2444'. [ 154.354622][T10402] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 154.375860][T10402] EXT4-fs (loop6): 1 truncate cleaned up [ 154.475463][ T9034] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 154.496180][T10392] netlink: 'syz.4.2442': attribute type 3 has an invalid length. [ 154.514877][T10415] ucma_write: process 91 (syz.7.2447) changed security contexts after opening file descriptor, this is not allowed. [ 154.532957][T10417] FAULT_INJECTION: forcing a failure. [ 154.532957][T10417] name failslab, interval 1, probability 0, space 0, times 0 [ 154.545782][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.5.2451 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 154.545819][T10417] Tainted: [W]=WARN [ 154.545828][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.545843][T10417] Call Trace: [ 154.545851][T10417] [ 154.545859][T10417] dump_stack_lvl+0xf2/0x150 [ 154.545958][T10417] dump_stack+0x15/0x1a [ 154.545985][T10417] should_fail_ex+0x24a/0x260 [ 154.546030][T10417] ? __scm_send+0x407/0xb80 [ 154.546059][T10417] should_failslab+0x8f/0xb0 [ 154.546092][T10417] __kmalloc_cache_noprof+0x4e/0x320 [ 154.546207][T10417] __scm_send+0x407/0xb80 [ 154.546245][T10417] unix_stream_sendmsg+0xa9/0x800 [ 154.546285][T10417] ? selinux_socket_sendmsg+0x185/0x1c0 [ 154.546314][T10417] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 154.546454][T10417] __sock_sendmsg+0x140/0x180 [ 154.546488][T10417] ____sys_sendmsg+0x326/0x4b0 [ 154.546602][T10417] __sys_sendmsg+0x19d/0x230 [ 154.546689][T10417] __x64_sys_sendmsg+0x46/0x50 [ 154.546718][T10417] x64_sys_call+0x2734/0x2dc0 [ 154.546745][T10417] do_syscall_64+0xc9/0x1c0 [ 154.546775][T10417] ? clear_bhb_loop+0x55/0xb0 [ 154.546803][T10417] ? clear_bhb_loop+0x55/0xb0 [ 154.546848][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.546875][T10417] RIP: 0033:0x7f97f66bd169 [ 154.546890][T10417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.546912][T10417] RSP: 002b:00007f97f4d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.546988][T10417] RAX: ffffffffffffffda RBX: 00007f97f68d5fa0 RCX: 00007f97f66bd169 [ 154.547000][T10417] RDX: 0000000004004881 RSI: 0000400000000600 RDI: 0000000000000005 [ 154.547012][T10417] RBP: 00007f97f4d27090 R08: 0000000000000000 R09: 0000000000000000 [ 154.547023][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.547034][T10417] R13: 0000000000000000 R14: 00007f97f68d5fa0 R15: 00007ffc4f692098 [ 154.547105][T10417] [ 154.747571][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 154.747589][ T29] audit: type=1326 audit(1740738636.208:14586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 154.777425][ T29] audit: type=1326 audit(1740738636.208:14587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 154.782711][T10423] FAULT_INJECTION: forcing a failure. [ 154.782711][T10423] name failslab, interval 1, probability 0, space 0, times 0 [ 154.813874][T10423] CPU: 0 UID: 0 PID: 10423 Comm: syz.7.2453 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 154.813911][T10423] Tainted: [W]=WARN [ 154.813919][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.813946][T10423] Call Trace: [ 154.813953][T10423] [ 154.813961][T10423] dump_stack_lvl+0xf2/0x150 [ 154.813994][T10423] dump_stack+0x15/0x1a [ 154.814020][T10423] should_fail_ex+0x24a/0x260 [ 154.814054][T10423] should_failslab+0x8f/0xb0 [ 154.814131][T10423] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 154.814161][T10423] ? v9fs_session_init+0x79/0xda0 [ 154.814199][T10423] kstrdup+0x3d/0xd0 [ 154.814229][T10423] v9fs_session_init+0x79/0xda0 [ 154.814275][T10423] ? should_fail_ex+0xd7/0x260 [ 154.814337][T10423] ? v9fs_mount+0x53/0x570 [ 154.814356][T10423] ? should_failslab+0x8f/0xb0 [ 154.814455][T10423] ? __kmalloc_cache_noprof+0x186/0x320 [ 154.814480][T10423] v9fs_mount+0x69/0x570 [ 154.814536][T10423] ? __pfx_v9fs_mount+0x10/0x10 [ 154.814556][T10423] legacy_get_tree+0x77/0xd0 [ 154.814592][T10423] vfs_get_tree+0x56/0x1e0 [ 154.814658][T10423] do_new_mount+0x227/0x690 [ 154.814694][T10423] path_mount+0x49b/0xb30 [ 154.814729][T10423] __se_sys_mount+0x27f/0x2d0 [ 154.814828][T10423] ? fput+0x1c4/0x200 [ 154.814852][T10423] __x64_sys_mount+0x67/0x80 [ 154.814889][T10423] x64_sys_call+0x2c84/0x2dc0 [ 154.814982][T10423] do_syscall_64+0xc9/0x1c0 [ 154.815017][T10423] ? clear_bhb_loop+0x55/0xb0 [ 154.815061][T10423] ? clear_bhb_loop+0x55/0xb0 [ 154.815093][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.815183][T10423] RIP: 0033:0x7f1bd0a5d169 [ 154.815201][T10423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.815223][T10423] RSP: 002b:00007f1bcf0c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.815244][T10423] RAX: ffffffffffffffda RBX: 00007f1bd0c75fa0 RCX: 00007f1bd0a5d169 [ 154.815259][T10423] RDX: 0000400000000080 RSI: 0000400000000300 RDI: 0000000000000000 [ 154.815329][T10423] RBP: 00007f1bcf0c1090 R08: 0000400000000600 R09: 0000000000000000 [ 154.815343][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.815357][T10423] R13: 0000000000000000 R14: 00007f1bd0c75fa0 R15: 00007fffac544848 [ 154.815383][T10423] [ 154.820019][T10419] netlink: 'syz.1.2452': attribute type 12 has an invalid length. [ 154.964794][ T29] audit: type=1326 audit(1740738636.438:14588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.032487][T10436] 9pnet_fd: Insufficient options for proto=fd [ 155.036997][ T29] audit: type=1326 audit(1740738636.438:14589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.082248][T10440] loop6: detected capacity change from 0 to 512 [ 155.085458][ T29] audit: type=1326 audit(1740738636.438:14590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.111326][T10440] EXT4-fs: Ignoring removed oldalloc option [ 155.115413][ T29] audit: type=1326 audit(1740738636.468:14591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.140717][T10440] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.145484][ T29] audit: type=1326 audit(1740738636.468:14592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.180973][T10440] EXT4-fs (loop6): 1 truncate cleaned up [ 155.202266][ T29] audit: type=1326 audit(1740738636.468:14593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.231716][ T29] audit: type=1326 audit(1740738636.478:14594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.255327][ T29] audit: type=1326 audit(1740738636.478:14595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10418 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 155.279881][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2457'. [ 155.289029][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2457'. [ 155.403663][T10460] qrtr: Invalid version 0 [ 155.410446][T10460] netlink: 'syz.7.2465': attribute type 13 has an invalid length. [ 155.441168][ T9034] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 155.488869][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.496191][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.591389][T10468] loop7: detected capacity change from 0 to 512 [ 155.608010][T10468] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.627824][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.639124][T10460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.842268][T10460] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.851462][T10460] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.860412][T10460] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.869355][T10460] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.084721][T10480] IPv6: Can't replace route, no match found [ 156.231534][T10497] SELinux: failed to load policy [ 156.424165][T10529] qrtr: Invalid version 0 [ 156.430041][T10529] netlink: 'syz.6.2489': attribute type 13 has an invalid length. [ 156.486540][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.493791][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.541424][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.552077][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.563845][T10536] loop6: detected capacity change from 0 to 512 [ 156.593020][T10536] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.619945][T10529] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.629013][T10529] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.638003][T10529] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.647105][T10529] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.277495][T10553] loop6: detected capacity change from 0 to 512 [ 157.287951][T10553] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.302156][T10553] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2496: corrupted inode contents [ 157.315411][T10553] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2496: mark_inode_dirty error [ 157.329941][T10553] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2496: corrupted inode contents [ 157.357025][T10553] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2496: mark_inode_dirty error [ 157.427731][T10569] loop7: detected capacity change from 0 to 128 [ 157.523412][T10583] futex_wake_op: syz.1.2507 tries to shift op by -1; fix this program [ 157.545442][T10578] 9pnet: Could not find request transport: fd8 [ 157.823976][T10600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2514'. [ 157.833143][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2514'. [ 157.842237][T10600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2514'. [ 157.851305][T10600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2514'. [ 157.891581][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2515'. [ 157.900685][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2515'. [ 158.058135][T10616] futex_wake_op: syz.1.2522 tries to shift op by -1; fix this program [ 158.075158][T10616] 9pnet: Could not find request transport: fd8 [ 158.105109][T10621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2523'. [ 158.204065][T10626] xt_hashlimit: max too large, truncated to 1048576 [ 158.211888][T10626] Cannot find set identified by id 0 to match [ 158.220738][T10626] ext2: Invalid gid '0x00000000ffffffff' [ 158.325836][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2529'. [ 158.455752][T10653] loop7: detected capacity change from 0 to 512 [ 158.462057][T10658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=10658 comm=syz.4.2539 [ 158.479242][T10653] EXT4-fs: Ignoring removed oldalloc option [ 158.506236][T10653] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.518421][T10653] EXT4-fs (loop7): 1 truncate cleaned up [ 158.524695][T10653] EXT4-fs mount: 26 callbacks suppressed [ 158.524785][T10653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.537539][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2541'. [ 158.610062][ T9865] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 158.643071][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.778772][T10676] netlink: 'syz.7.2544': attribute type 1 has an invalid length. [ 158.786698][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2544'. [ 158.797621][T10676] netlink: 'syz.7.2544': attribute type 11 has an invalid length. [ 158.859423][T10695] loop7: detected capacity change from 0 to 512 [ 158.872781][T10695] EXT4-fs: Ignoring removed oldalloc option [ 158.880588][T10695] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.892315][T10695] EXT4-fs (loop7): 1 truncate cleaned up [ 158.899170][T10695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.973413][ T9865] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 158.995841][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.022039][T10716] netlink: 'syz.1.2559': attribute type 21 has an invalid length. [ 159.068067][T10746] netlink: 'syz.6.2554': attribute type 3 has an invalid length. [ 159.363276][T10764] lo: entered promiscuous mode [ 159.368164][T10764] lo: entered allmulticast mode [ 159.407812][T10764] tunl0: entered promiscuous mode [ 159.412903][T10764] tunl0: entered allmulticast mode [ 159.465526][T10764] gre0: entered promiscuous mode [ 159.470635][T10764] gre0: entered allmulticast mode [ 159.540727][T10764] gretap0: entered promiscuous mode [ 159.546047][T10764] gretap0: entered allmulticast mode [ 159.552304][T10764] erspan0: entered promiscuous mode [ 159.557664][T10764] erspan0: entered allmulticast mode [ 159.564176][T10764] ip_vti0: entered promiscuous mode [ 159.569437][T10764] ip_vti0: entered allmulticast mode [ 159.575487][T10764] ip6_vti0: entered promiscuous mode [ 159.580898][T10764] ip6_vti0: entered allmulticast mode [ 159.587917][T10764] sit0: entered promiscuous mode [ 159.592940][T10764] sit0: entered allmulticast mode [ 159.600496][T10764] ip6tnl0: entered promiscuous mode [ 159.605736][T10764] ip6tnl0: entered allmulticast mode [ 159.614892][T10768] loop7: detected capacity change from 0 to 256 [ 159.621816][T10768] vfat: Bad value for 'shortname' [ 159.634031][T10764] ip6gre0: entered promiscuous mode [ 159.639454][T10764] ip6gre0: entered allmulticast mode [ 159.655429][T10764] syz_tun: entered promiscuous mode [ 159.660946][T10764] syz_tun: entered allmulticast mode [ 159.669794][T10773] loop7: detected capacity change from 0 to 256 [ 159.677523][T10773] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.690450][T10764] ip6gretap0: entered promiscuous mode [ 159.696065][T10764] ip6gretap0: entered allmulticast mode [ 159.712988][T10764] bridge0: entered promiscuous mode [ 159.718284][T10764] bridge0: entered allmulticast mode [ 159.724408][T10764] vcan0: entered promiscuous mode [ 159.729561][T10764] vcan0: entered allmulticast mode [ 159.735308][T10764] bond0: entered promiscuous mode [ 159.740403][T10764] bond_slave_0: entered promiscuous mode [ 159.746590][T10764] bond_slave_1: entered promiscuous mode [ 159.752314][T10764] bond0: entered allmulticast mode [ 159.757584][T10764] bond_slave_0: entered allmulticast mode [ 159.763362][T10764] bond_slave_1: entered allmulticast mode [ 159.769855][T10764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.778052][T10764] team0: entered promiscuous mode [ 159.783145][T10764] team_slave_0: entered promiscuous mode [ 159.789058][T10764] team_slave_1: entered promiscuous mode [ 159.794814][T10764] team0: entered allmulticast mode [ 159.799974][T10764] team_slave_0: entered allmulticast mode [ 159.805723][T10764] team_slave_1: entered allmulticast mode [ 159.812027][T10764] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.820363][T10764] dummy0: entered promiscuous mode [ 159.825556][T10764] dummy0: entered allmulticast mode [ 159.832305][T10764] nlmon0: entered promiscuous mode [ 159.837528][T10764] nlmon0: entered allmulticast mode [ 159.843891][T10764] caif0: entered promiscuous mode [ 159.848992][T10764] caif0: entered allmulticast mode [ 159.854121][T10764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.914449][T10766] bond6: entered promiscuous mode [ 159.919575][T10766] bond6: entered allmulticast mode [ 159.942358][T10766] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.082988][T10795] loop5: detected capacity change from 0 to 1024 [ 160.107157][T10795] ext4: Unknown parameter 'smackfshat' [ 160.208193][ T29] kauditd_printk_skb: 2228 callbacks suppressed [ 160.208211][ T29] audit: type=1326 audit(1740738641.868:16824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.240489][ T29] audit: type=1326 audit(1740738641.868:16825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.264049][ T29] audit: type=1326 audit(1740738641.868:16826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.287821][ T29] audit: type=1326 audit(1740738641.868:16827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.311530][ T29] audit: type=1326 audit(1740738641.868:16828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.335600][ T29] audit: type=1326 audit(1740738641.868:16829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.359270][ T29] audit: type=1326 audit(1740738641.868:16830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.382996][ T29] audit: type=1400 audit(1740738641.898:16831): avc: denied { write } for pid=10809 comm="syz.6.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.403021][ T29] audit: type=1326 audit(1740738641.918:16832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.426665][ T29] audit: type=1326 audit(1740738641.918:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.1.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f14a992d169 code=0x7ffc0000 [ 160.426945][T10795] loop5: detected capacity change from 0 to 512 [ 160.501312][T10795] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2574: bg 0: block 248: padding at end of block bitmap is not set [ 160.518174][T10795] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2574: Failed to acquire dquot type 1 [ 160.537813][T10795] EXT4-fs (loop5): 1 truncate cleaned up [ 160.544004][T10795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.565805][T10795] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.796848][T10844] netlink: 'syz.7.2592': attribute type 12 has an invalid length. [ 160.840641][T10847] FAULT_INJECTION: forcing a failure. [ 160.840641][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 160.853351][T10847] CPU: 0 UID: 0 PID: 10847 Comm: syz.6.2593 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 160.853386][T10847] Tainted: [W]=WARN [ 160.853394][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.853455][T10847] Call Trace: [ 160.853463][T10847] [ 160.853517][T10847] dump_stack_lvl+0xf2/0x150 [ 160.853548][T10847] dump_stack+0x15/0x1a [ 160.853572][T10847] should_fail_ex+0x24a/0x260 [ 160.853607][T10847] should_failslab+0x8f/0xb0 [ 160.853708][T10847] kmem_cache_alloc_noprof+0x52/0x320 [ 160.853735][T10847] ? alloc_empty_file+0xd0/0x200 [ 160.853767][T10847] ? _raw_spin_unlock+0x26/0x50 [ 160.853793][T10847] alloc_empty_file+0xd0/0x200 [ 160.853818][T10847] alloc_file_pseudo+0xc9/0x160 [ 160.853847][T10847] __shmem_file_setup+0x1bb/0x1f0 [ 160.853947][T10847] shmem_file_setup+0x3b/0x50 [ 160.853988][T10847] __se_sys_memfd_create+0x2e1/0x5a0 [ 160.854028][T10847] __x64_sys_memfd_create+0x31/0x40 [ 160.854057][T10847] x64_sys_call+0x2d4c/0x2dc0 [ 160.854087][T10847] do_syscall_64+0xc9/0x1c0 [ 160.854118][T10847] ? clear_bhb_loop+0x55/0xb0 [ 160.854149][T10847] ? clear_bhb_loop+0x55/0xb0 [ 160.854180][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.854211][T10847] RIP: 0033:0x7f8e1018d169 [ 160.854228][T10847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.854250][T10847] RSP: 002b:00007f8e0e7f0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 160.854274][T10847] RAX: ffffffffffffffda RBX: 000000000000080a RCX: 00007f8e1018d169 [ 160.854290][T10847] RDX: 00007f8e0e7f0ef0 RSI: 0000000000000000 RDI: 00007f8e1020ec3c [ 160.854304][T10847] RBP: 0000400000000340 R08: 00007f8e0e7f0bb7 R09: 00007f8e0e7f0e40 [ 160.854319][T10847] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000300 [ 160.854333][T10847] R13: 00007f8e0e7f0ef0 R14: 00007f8e0e7f0eb0 R15: 0000400000000040 [ 160.854355][T10847] [ 161.082518][T10851] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 161.182474][ T8884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.193149][T10744] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:35: Failed to release dquot type 1 [ 161.317241][T10877] netlink: 'syz.7.2605': attribute type 12 has an invalid length. [ 161.417462][T10882] lo speed is unknown, defaulting to 1000 [ 161.439990][T10882] lo speed is unknown, defaulting to 1000 [ 161.446276][T10882] lo speed is unknown, defaulting to 1000 [ 161.501039][T10882] infiniband syz2: set down [ 161.505596][T10882] infiniband syz2: added lo [ 161.510235][ T3440] lo speed is unknown, defaulting to 1000 [ 161.529958][T10882] RDS/IB: syz2: added [ 161.536013][T10882] smc: adding ib device syz2 with port count 1 [ 161.544078][T10882] smc: ib device syz2 port 1 has pnetid [ 161.546070][T10901] futex_wake_op: syz.5.2615 tries to shift op by -1; fix this program [ 161.550309][ T3440] lo speed is unknown, defaulting to 1000 [ 161.564520][T10882] lo speed is unknown, defaulting to 1000 [ 161.565801][T10902] xt_hashlimit: max too large, truncated to 1048576 [ 161.578611][T10902] Cannot find set identified by id 0 to match [ 161.591594][T10902] ext2: Invalid gid '0x00000000ffffffff' [ 161.598513][T10901] 9pnet: Could not find request transport: fd8 [ 161.607409][T10882] lo speed is unknown, defaulting to 1000 [ 161.635274][T10907] xt_hashlimit: max too large, truncated to 1048576 [ 161.642618][T10907] Cannot find set identified by id 0 to match [ 161.650767][T10907] ext2: Invalid gid '0x00000000ffffffff' [ 161.660014][T10882] lo speed is unknown, defaulting to 1000 [ 161.704383][T10882] lo speed is unknown, defaulting to 1000 [ 161.739140][T10882] lo speed is unknown, defaulting to 1000 [ 161.787442][T10919] FAULT_INJECTION: forcing a failure. [ 161.787442][T10919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.800706][T10919] CPU: 1 UID: 0 PID: 10919 Comm: syz.5.2621 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 161.800745][T10919] Tainted: [W]=WARN [ 161.800752][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.800764][T10919] Call Trace: [ 161.800769][T10919] [ 161.800777][T10919] dump_stack_lvl+0xf2/0x150 [ 161.800805][T10919] dump_stack+0x15/0x1a [ 161.800835][T10919] should_fail_ex+0x24a/0x260 [ 161.800870][T10919] should_fail+0xb/0x10 [ 161.800900][T10919] should_fail_usercopy+0x1a/0x20 [ 161.801005][T10919] _copy_from_user+0x1c/0xa0 [ 161.801112][T10919] copy_msghdr_from_user+0x54/0x2a0 [ 161.801146][T10919] ? __fget_files+0x17c/0x1c0 [ 161.801189][T10919] __sys_sendmsg+0x13e/0x230 [ 161.801299][T10919] __x64_sys_sendmsg+0x46/0x50 [ 161.801324][T10919] x64_sys_call+0x2734/0x2dc0 [ 161.801350][T10919] do_syscall_64+0xc9/0x1c0 [ 161.801444][T10919] ? clear_bhb_loop+0x55/0xb0 [ 161.801516][T10919] ? clear_bhb_loop+0x55/0xb0 [ 161.801550][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.801580][T10919] RIP: 0033:0x7f97f66bd169 [ 161.801621][T10919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.801638][T10919] RSP: 002b:00007f97f4d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.801697][T10919] RAX: ffffffffffffffda RBX: 00007f97f68d5fa0 RCX: 00007f97f66bd169 [ 161.801712][T10919] RDX: 0000000020000000 RSI: 0000400000000400 RDI: 0000000000000005 [ 161.801728][T10919] RBP: 00007f97f4d27090 R08: 0000000000000000 R09: 0000000000000000 [ 161.801795][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.801806][T10919] R13: 0000000000000000 R14: 00007f97f68d5fa0 R15: 00007ffc4f692098 [ 161.801824][T10919] [ 162.045241][T10928] loop7: detected capacity change from 0 to 512 [ 162.054466][T10928] EXT4-fs: Ignoring removed oldalloc option [ 162.061793][T10927] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 162.068239][T10930] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 162.086629][T10928] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 162.117247][T10928] EXT4-fs (loop7): 1 truncate cleaned up [ 162.123318][T10928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.158188][T10945] xt_hashlimit: max too large, truncated to 1048576 [ 162.222022][ T9865] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 162.239186][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.616595][T10998] loop6: detected capacity change from 0 to 512 [ 162.623200][T10998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.632437][T10998] ext4: Unknown parameter 'fsname' [ 162.678258][T11006] netlink: 'syz.1.2648': attribute type 12 has an invalid length. [ 162.711507][T11010] loop7: detected capacity change from 0 to 512 [ 162.740429][T11014] xt_hashlimit: max too large, truncated to 1048576 [ 162.754714][T11014] ext2: Invalid gid '0x00000000ffffffff' [ 162.786104][T11018] xt_hashlimit: max too large, truncated to 1048576 [ 162.794698][T11010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.810317][T11018] ext2: Invalid gid '0x00000000ffffffff' [ 162.861734][T11010] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.889508][T11010] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2651: corrupted inode contents [ 162.934318][T11010] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2651: mark_inode_dirty error [ 162.960843][T11010] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2651: corrupted inode contents [ 162.975843][T11029] rdma_rxe: rxe_newlink: failed to add lo [ 162.987475][T11010] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2651: mark_inode_dirty error [ 163.036867][T11034] futex_wake_op: syz.1.2659 tries to shift op by -1; fix this program [ 163.055628][T11034] 9pnet: Could not find request transport: fd8 [ 163.103352][T11022] lo speed is unknown, defaulting to 1000 [ 163.110657][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.125797][T10751] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.148406][T11045] loop7: detected capacity change from 0 to 512 [ 163.154921][T11045] EXT4-fs: Ignoring removed oldalloc option [ 163.176590][T11045] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 163.197387][T11045] EXT4-fs (loop7): 1 truncate cleaned up [ 163.208877][T11045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.243470][T10751] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.261017][T11052] netlink: 'syz.1.2663': attribute type 12 has an invalid length. [ 163.290424][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.304476][T10751] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.348486][T10751] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.384112][T11060] xt_hashlimit: max too large, truncated to 1048576 [ 163.405551][T11022] chnl_net:caif_netlink_parms(): no params data found [ 163.484230][T11069] loop6: detected capacity change from 0 to 512 [ 163.499033][T10751] bridge_slave_0: left allmulticast mode [ 163.504771][T10751] bridge_slave_0: left promiscuous mode [ 163.510548][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.520427][T11067] futex_wake_op: syz.5.2669 tries to shift op by -1; fix this program [ 163.540875][T11069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.556107][T11067] 9pnet: Could not find request transport: fd8 [ 163.571301][T11069] __nla_validate_parse: 14 callbacks suppressed [ 163.571411][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2668'. [ 163.598800][T11074] loop7: detected capacity change from 0 to 512 [ 163.619377][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.641993][T11074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.663084][T11074] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.676890][T11074] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2670: corrupted inode contents [ 163.691022][T11089] loop6: detected capacity change from 0 to 512 [ 163.696408][T11074] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2670: mark_inode_dirty error [ 163.709504][T11089] EXT4-fs: Ignoring removed oldalloc option [ 163.715996][T11089] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 163.726102][T11074] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2670: corrupted inode contents [ 163.739507][T11074] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2670: mark_inode_dirty error [ 163.753717][T11089] EXT4-fs (loop6): 1 truncate cleaned up [ 163.760539][T10751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.778075][T11089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.793771][T10751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.815616][T10751] bond0 (unregistering): Released all slaves [ 163.825022][T10751] bond1 (unregistering): Released all slaves [ 163.842344][T10751] bond2 (unregistering): Released all slaves [ 163.862233][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.875409][T10751] bond3 (unregistering): Released all slaves [ 163.908428][T10751] bond4 (unregistering): Released all slaves [ 163.920371][T10751] bond5 (unregistering): Released all slaves [ 163.930256][T10751] bond6 (unregistering): Released all slaves [ 163.952421][T11087] netlink: 'syz.5.2675': attribute type 12 has an invalid length. [ 163.986150][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.993378][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.006449][T11022] bridge_slave_0: entered allmulticast mode [ 164.023802][T11022] bridge_slave_0: entered promiscuous mode [ 164.030737][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.037864][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.045120][T11022] bridge_slave_1: entered allmulticast mode [ 164.052090][T11022] bridge_slave_1: entered promiscuous mode [ 164.060084][T10751] IPVS: stopping backup sync thread 9621 ... [ 164.093358][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.107239][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.123905][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.160044][T11112] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 164.194464][T11114] xt_hashlimit: max too large, truncated to 1048576 [ 164.353672][T11022] team0: Port device team_slave_0 added [ 164.374017][T11022] team0: Port device team_slave_1 added [ 164.390414][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.397868][T10751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.421630][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.429180][T10751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.444894][T10751] veth1_macvtap: left promiscuous mode [ 164.450746][T10751] veth0_macvtap: left promiscuous mode [ 164.459581][T10751] veth1_vlan: left promiscuous mode [ 164.519899][T10751] veth0_vlan: left promiscuous mode [ 164.603380][T10751] team0 (unregistering): Port device team_slave_1 removed [ 164.618109][T10751] team0 (unregistering): Port device team_slave_0 removed [ 164.626174][T10744] smc: removing ib device syz! [ 164.677087][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.684087][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.710146][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.771468][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.778670][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.805165][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.890869][T11022] hsr_slave_0: entered promiscuous mode [ 164.904166][T11022] hsr_slave_1: entered promiscuous mode [ 164.922178][T11022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.943248][T11022] Cannot create hsr debugfs directory [ 165.219185][T11121] serio: Serial port ptm0 [ 165.274599][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 165.274617][ T29] audit: type=1326 audit(1740738646.928:17305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.308866][ T29] audit: type=1326 audit(1740738646.958:17306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.332620][ T29] audit: type=1326 audit(1740738646.958:17307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.356333][ T29] audit: type=1326 audit(1740738646.958:17308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.357757][T11128] loop7: detected capacity change from 0 to 2048 [ 165.379953][ T29] audit: type=1326 audit(1740738646.958:17309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.388813][T11129] FAULT_INJECTION: forcing a failure. [ 165.388813][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 165.409894][ T29] audit: type=1326 audit(1740738646.958:17310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.422546][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.5.2684 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 165.422585][T11129] Tainted: [W]=WARN [ 165.422594][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.422610][T11129] Call Trace: [ 165.422619][T11129] [ 165.422645][T11129] dump_stack_lvl+0xf2/0x150 [ 165.422693][T11129] dump_stack+0x15/0x1a [ 165.422753][T11129] should_fail_ex+0x24a/0x260 [ 165.422791][T11129] should_failslab+0x8f/0xb0 [ 165.422900][T11129] kmem_cache_alloc_noprof+0x52/0x320 [ 165.422927][T11129] ? audit_log_start+0x34c/0x6b0 [ 165.422999][T11129] audit_log_start+0x34c/0x6b0 [ 165.423044][T11129] audit_seccomp+0x4b/0x130 [ 165.423081][T11129] __seccomp_filter+0x6fa/0x1180 [ 165.423178][T11129] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.423303][T11129] ? vfs_write+0x644/0x920 [ 165.423347][T11129] __secure_computing+0x9f/0x1c0 [ 165.423377][T11129] syscall_trace_enter+0xd1/0x1f0 [ 165.423406][T11129] ? fpregs_assert_state_consistent+0x83/0xa0 [ 165.423496][T11129] do_syscall_64+0xaa/0x1c0 [ 165.423535][T11129] ? clear_bhb_loop+0x55/0xb0 [ 165.423619][T11129] ? clear_bhb_loop+0x55/0xb0 [ 165.423660][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.423693][T11129] RIP: 0033:0x7f97f66bd169 [ 165.423713][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.423775][T11129] RSP: 002b:00007f97f4d06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 165.423827][T11129] RAX: ffffffffffffffda RBX: 00007f97f68d6080 RCX: 00007f97f66bd169 [ 165.423843][T11129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 165.423858][T11129] RBP: 00007f97f4d06090 R08: 0000000000000000 R09: 0000000000000000 [ 165.423872][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.423888][T11129] R13: 0000000000000000 R14: 00007f97f68d6080 R15: 00007ffc4f692098 [ 165.423910][T11129] [ 165.423919][T11129] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 165.446157][ T29] audit: type=1326 audit(1740738646.958:17311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.446195][ T29] audit: type=1326 audit(1740738646.958:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.446225][ T29] audit: type=1326 audit(1740738646.958:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11120 comm="syz.6.2683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1018d169 code=0x7ffc0000 [ 165.507428][T11128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.507499][T11128] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.747471][T11131] netlink: 'syz.5.2687': attribute type 12 has an invalid length. [ 165.821611][T11022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.834711][T11022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.845234][T11022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.879648][T11022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.887149][T11141] binfmt_misc: register: failed to install interpreter file ./file2 [ 165.954833][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.981223][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.003911][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.011066][T10752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.035567][T11022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.046154][T11022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.065409][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.072525][T10752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.159050][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.187246][T11178] xt_hashlimit: max too large, truncated to 1048576 [ 166.261753][T11191] loop6: detected capacity change from 0 to 164 [ 166.290418][T10721] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 345: padding at end of block bitmap is not set [ 166.311963][T10721] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 166.324829][T10721] EXT4-fs (loop7): This should not happen!! Data will be lost [ 166.324829][T10721] [ 166.351546][T11196] netlink: 'syz.6.2705': attribute type 1 has an invalid length. [ 166.359519][T11196] netlink: 'syz.6.2705': attribute type 2 has an invalid length. [ 166.440092][T11022] veth0_vlan: entered promiscuous mode [ 166.442872][T11203] loop6: detected capacity change from 0 to 1024 [ 166.461382][T11022] veth1_vlan: entered promiscuous mode [ 166.477092][T11203] ext4: Unknown parameter 'smackfshat' [ 166.513574][T10721] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 166.526451][T10721] EXT4-fs (loop7): This should not happen!! Data will be lost [ 166.526451][T10721] [ 166.536172][T10721] EXT4-fs (loop7): Total free blocks count 0 [ 166.542178][T10721] EXT4-fs (loop7): Free/Dirty block details [ 166.548434][T10721] EXT4-fs (loop7): free_blocks=0 [ 166.553488][T10721] EXT4-fs (loop7): dirty_blocks=2048 [ 166.558868][T10721] EXT4-fs (loop7): Block reservation details [ 166.566012][T11022] veth0_macvtap: entered promiscuous mode [ 166.573347][T11022] veth1_macvtap: entered promiscuous mode [ 166.575617][T11208] loop6: detected capacity change from 0 to 512 [ 166.583920][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.596477][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.605779][T11022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.614751][T11022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.623629][T11022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.632487][T11022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.690844][T11208] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2707: bg 0: block 248: padding at end of block bitmap is not set [ 166.701768][T11210] infiniband syz!: set down [ 166.709697][T11210] infiniband syz!: added team_slave_0 [ 166.717116][T11208] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2707: Failed to acquire dquot type 1 [ 166.736671][T11217] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2710'. [ 166.746878][T11208] EXT4-fs (loop6): 1 truncate cleaned up [ 166.762290][T11208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.776430][T11210] RDS/IB: syz!: added [ 166.776435][T11219] netlink: 'syz.4.2656': attribute type 1 has an invalid length. [ 166.776551][T11210] ================================================================== [ 166.776593][T11210] BUG: KCSAN: data-race in data_push_tail / string [ 166.776644][T11210] [ 166.776653][T11210] write to 0xffffffff88c0a518 of 1 bytes by task 11219 on cpu 1: [ 166.776675][T11210] string+0x17f/0x210 [ 166.776701][T11210] vsnprintf+0x537/0x890 [ 166.776727][T11210] vscnprintf+0x42/0x90 [ 166.776750][T11210] printk_sprint+0x30/0x2d0 [ 166.776768][T11210] vprintk_store+0x589/0x870 [ 166.776789][T11210] vprintk_emit+0x168/0x690 [ 166.776811][T11210] vprintk_default+0x26/0x30 [ 166.776831][T11210] vprintk+0x1d/0x30 [ 166.776856][T11210] _printk+0x7a/0xa0 [ 166.776886][T11210] __nla_validate_parse+0x12be/0x1e50 [ 166.776925][T11210] __nla_parse+0x40/0x60 [ 166.776957][T11210] rtnl_newlink+0x708/0x1250 [ 166.776986][T11210] rtnetlink_rcv_msg+0x651/0x710 [ 166.777015][T11210] netlink_rcv_skb+0x12c/0x230 [ 166.777053][T11210] rtnetlink_rcv+0x1c/0x30 [ 166.777084][T11210] netlink_unicast+0x599/0x670 [ 166.777118][T11210] netlink_sendmsg+0x5cc/0x6e0 [ 166.777163][T11210] __sock_sendmsg+0x140/0x180 [ 166.777199][T11210] ____sys_sendmsg+0x326/0x4b0 [ 166.777225][T11210] __sys_sendmsg+0x19d/0x230 [ 166.777256][T11210] __x64_sys_sendmsg+0x46/0x50 [ 166.777297][T11210] x64_sys_call+0x2734/0x2dc0 [ 166.777331][T11210] do_syscall_64+0xc9/0x1c0 [ 166.777367][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.777396][T11210] [ 166.777404][T11210] read to 0xffffffff88c0a518 of 8 bytes by task 11210 on cpu 0: [ 166.777422][T11210] data_push_tail+0x102/0x430 [ 166.777461][T11210] data_alloc+0xbe/0x2c0 [ 166.777496][T11210] prb_reserve+0x85e/0xb60 [ 166.777529][T11210] vprintk_store+0x558/0x870 [ 166.777551][T11210] vprintk_emit+0x168/0x690 [ 166.777571][T11210] vprintk_default+0x26/0x30 [ 166.777590][T11210] vprintk+0x1d/0x30 [ 166.777615][T11210] _printk+0x7a/0xa0 [ 166.777642][T11210] rds_ib_add_one+0x562/0x5f0 [ 166.777674][T11210] add_client_context+0x2fa/0x4c0 [ 166.777707][T11210] enable_device_and_get+0x114/0x260 [ 166.777736][T11210] ib_register_device+0xae2/0xc70 [ 166.777774][T11210] rxe_register_device+0x1a2/0x1c0 [ 166.777810][T11210] rxe_add+0x861/0x8b0 [ 166.777835][T11210] rxe_net_add+0x5b/0xa0 [ 166.777868][T11210] rxe_newlink+0xc7/0x180 [ 166.777892][T11210] nldev_newlink+0x367/0x3f0 [ 166.777916][T11210] rdma_nl_rcv+0x46f/0x5a0 [ 166.777943][T11210] netlink_unicast+0x599/0x670 [ 166.777980][T11210] netlink_sendmsg+0x5cc/0x6e0 [ 166.778014][T11210] __sock_sendmsg+0x140/0x180 [ 166.778050][T11210] ____sys_sendmsg+0x326/0x4b0 [ 166.778082][T11210] __sys_sendmsg+0x19d/0x230 [ 166.778111][T11210] __x64_sys_sendmsg+0x46/0x50 [ 166.778140][T11210] x64_sys_call+0x2734/0x2dc0 [ 166.778172][T11210] do_syscall_64+0xc9/0x1c0 [ 166.778204][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.778237][T11210] [ 166.778244][T11210] value changed: 0x00000000ffffec43 -> 0x61203a2736353632 [ 166.778260][T11210] [ 166.778267][T11210] Reported by Kernel Concurrency Sanitizer on: [ 166.778290][T11210] CPU: 0 UID: 0 PID: 11210 Comm: syz.5.2711 Tainted: G W 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 166.778330][T11210] Tainted: [W]=WARN [ 166.778340][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.778354][T11210] ================================================================== [ 166.785689][T11208] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.791861][T11210] smc: adding ib device syz! with port count 1 [ 167.030705][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2707'. [ 167.035875][T11210] smc: ib device syz! port 1 has pnetid [ 167.057427][T11227] loop7: detected capacity change from 0 to 512 [ 167.187127][T11227] EXT4-fs: Ignoring removed oldalloc option [ 167.193462][T11227] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 167.258783][T11227] EXT4-fs (loop7): 1 truncate cleaned up [ 167.265193][T11227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.295476][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.304999][T10755] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:42: Failed to release dquot type 1 [ 167.389160][ T9865] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 167.404979][ T9865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.