last executing test programs: 30.406883737s ago: executing program 2 (id=152): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3e9}}, &(0x7f0000019140)='GPL\x00', 0x3, 0x0, 0x0, 0x549238f2346d9e55, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, [0x80, 0x0, 0xb, 0x8, 0x4, 0x1, 0xfffffffffffffffe, 0x5568, 0x4000000000000, 0x9, 0x1, 0x4, 0x4, 0x65d6, 0x1ff]}, &(0x7f0000000280)=0x100) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) recvfrom$x25(r8, &(0x7f0000000040)=""/89, 0x59, 0x80, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x1) 30.070589863s ago: executing program 2 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000440)={'syzkaller0\x00', 0x2, 0x8}) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1000007ea47674902249f700fbdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x4a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r5, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 29.779963546s ago: executing program 2 (id=162): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xfa, 0x101, 0x60, @private0, @mcast1, 0x10, 0x73f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast1, @dev}, &(0x7f0000000400)=0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000001d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC=r6, @ANYBLOB="f22ed9b5f7312e9b4a02eefa4ac18393bfc8261999a9558aa775ab1f1aee73693a925200de85e959ad4ab72f15bb8d579e880cd8743458a5801c5114a948959ad9aa60cc93fa21266b5edd2afaf451072fad0cb0fc74f245f1a3dbedc6cc5f3893197f32"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x3, 0x80000000, {{0xe, 0x4, 0x1, 0x28, 0x38, 0x67, 0x0, 0x80, 0x29, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x13, 0xbc, [@broadcast, @local, @rand_addr=0x64010101, @multicast2]}, @generic={0x83, 0x6, "9d0d3dfa"}, @rr={0x7, 0xb, 0x2b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r14, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@deltclass={0x34, 0x29, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x4, 0xffe0}, {0xf, 0xd}, {0xf, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x42, 0x2}}]}, 0x34}}, 0x4044080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x6, 0x7, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x7, 0xa01, 0xfffffffc}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x188, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20040084}, 0x5) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r18 = dup(r17) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r18}, 0x18) 29.73354789s ago: executing program 2 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x283101e, 0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e1f}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000000)=""/19, 0x13) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{}, 0x0, &(0x7f0000000a40)='%-010d \x00'}, 0x20) (async) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) pidfd_send_signal(0xffffffffffffffff, 0x4, 0x0, 0x0) (async, rerun: 64) getresuid(0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x48) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYBLOB="8c000000000000002e0b0000f6ffffffffffffb5", @ANYRES32=0x0, @ANYRES8], 0x50) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r6 = openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8000002) fsetxattr(r4, &(0x7f00000000c0)=@random={'user.', 'trusted.overlay.impure\x00'}, &(0x7f0000000140)='!&\\\xa0\\[{^:%+J\x00', 0xd, 0x2) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, 0x0, 0x0) (async) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 29.650864636s ago: executing program 2 (id=164): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@i_version}, {@data_err_abort}, {@bh}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) perf_event_open(&(0x7f00000014c0)={0x0, 0x80, 0x40, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x94012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000880)="302e8d2a2c7b9caa97be5080fc7ba63789938f8fab9f3a600c6c5fe6fa43d69af54eb4143f6e91b84a6b7fa10d6f12609b4b0f85026622a45c524097e5f1d3294841750c22c2490c8b69a02a273979021e49acb8da768ea699a99187150d4d421c2c7c6153471cf3a1e8ceee4b81a5541174698bf972bb361eb7dc8b28469af89d3f83322f92244d9c56a48c905d0ee3602f4f91daf432642c2315574bc3a23d9ee2504d0a0a21df70b3071421c68b", 0xaf}, {&(0x7f0000001140)="090c8cd55d82cacd05ceb70ff29047333c40ceefa0562118dc92498a301aea8b174e2b6acbc28ecb17c34112b32ac466544756f2794089f53df21cf9997f7b16afb66c2f010c955728ba3836cc5dcd28660d012fd5eaa23d5f3eb5656e77dd10974249b4fe185fbac458cd7ab789464e85eadb0269b8bb1664f46fd3f9ee907a690e904fcee44810dcfb7c1219bde576bb04f836241e54165fc4b3d692ef6133c539f62b7e94b0115b48f36602f8a66192527d98e380d5c1649a4b6b3f0840bf47666a1c7d72145dd7bb0177def43139a75f643c45ad55cd890d63d331f8146d21b2f1", 0xe3}, {&(0x7f0000001240)="dbccdbd088e85c3f3d09475c8197c00fc5a1cbbbad1e9a7e74d4f9b0c4369f0f97270acfa7a0a4acb7aafd1b7c0a1dda8a8baa10e0fe1a436fdfc8ee2c83569e3db4efdffa2370491b6f563c3d55a5dcc72277ef42a80429d6e7939f6c26993bbadb9c798b638f69045d7f2a15c155b508079ec8caa6b0e21fd0244c509da29558095c6cd9d22b470e7bb124e97165ba3cb728cf1d451d025862bad69d549da384e914a04fb1430428ce2b0281f4c64416193bab27e691a29ceeb2dcfe5fc6d56b07309e4a5b86c21eef5ef2b593d61652019158c3999d8c8c35f03ef2b7", 0xde}, {&(0x7f0000001340)="34a75edd22053457f4d487d4fbd5c7dd93ffe52b14d87a4041bea9c687e1a10095656eff37fc7a39897a43743a10b0487cf7030a01eb7a89eac121d3103e5ab95728e1c9fb61b7abf1364df8e12940f8661656504cf5b6212036f78e3841361365b66289e76e3c916717d2567bf7b782f312f78150d1f3f5e1417f3d0807d0796b01313170bad2ffdc7ac2b3e5e6a20b26349ea98e0509eec1f0be4016d8c44d0e6a0cff72431f820ed556d8bc36f8165b11f23bf0f4c3ae349ca5f709ed15d325cadd8eb433f485537b69e1d170e169adaa10c917952699c1db3099e831bf1bd884983283005c9b3ed474e2", 0xec}, {&(0x7f00000004c0)="13cb45e503b9d363d3b632a8a7b3ab36d117595ed27b23e4da1120cb415c6fb30550291732d61096afc00365d6a2e01dd8b98e7bf845d1bdf0fc45b7e0eba535b8605a184592265eadffc3706ff3cfc0c1a3c5eb6a0cfa92db1c3d3fb9b690131b1df1744c0803a1", 0x68}, {&(0x7f0000001440)="a16a75533e9ed02217ce2f4127efc8809a34d3e696091b747aa588730b25a4a603fba62facbfd1b1c968994845d9c0c883c9f2807f73cb9728e14e635b7705d7f9d4499e9c31f991985fe4c28f6f4a29e7171d4dce", 0x55}, {&(0x7f0000001540)="f3ffa6d8de4a3e76928f32779d1496c9675308852a6108323390fb16fc43bd12e5fa46c9fd4c163662524f01353b67942852351c9b039959873809643a079e1a92d6642fef4e4c51ae6aa2726f381fb82f01e1df84", 0x55}, {&(0x7f0000000140)="0c6de7edf9e677a4f07e7c4695e8be20defff49d19f078c9", 0x18}], 0x8, 0x0, 0x0, 0x1f00c00e}, 0x40810) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3fb, 0x2, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0x80, 0x4) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000340)=0x1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x198, 0x2e0, 0x2e0, 0x198, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000003f86d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x8, &(0x7f0000000940)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) 29.638967427s ago: executing program 2 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000440)=@usbdevfs_disconnect={0x4}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000016000e7e5e96caa2010a0000dbdf0d080000000800ca80040006800000008d7b"], 0x1c}}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000540), &(0x7f0000000580)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 29.616555209s ago: executing program 32 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000440)=@usbdevfs_disconnect={0x4}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000016000e7e5e96caa2010a0000dbdf0d080000000800ca80040006800000008d7b"], 0x1c}}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000540), &(0x7f0000000580)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.970026557s ago: executing program 3 (id=550): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x12e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x9) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r5, r4, 0x0) 1.910620671s ago: executing program 3 (id=552): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES16=r6, @ANYRES32=r0, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', r1, 0x40, 0x0, 0x1, 0x9, {{0x18, 0x4, 0x1, 0x8, 0x60, 0x64, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0x7, 0x54, [@multicast2]}, @generic={0x44, 0x4, "f842"}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0xa, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2a}, {@local, 0x3}, {@loopback, 0x8000}, {@multicast1, 0x6}, {@private=0xa010101, 0x5}, {@broadcast}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r7, @ANYRESHEX=r5], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x5, '\x00', r10, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509af00020073797a320000009100004100736977140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000000, 0x0) 1.538758011s ago: executing program 0 (id=557): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x46004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38a35668000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250300000014000600677265746170300000000000000000002900070073797374656d5f753a6f626a6563745f723a706f6c6963795f636f6e6669675f743a73300000000014000200fc010000000000000000000000000001"], 0x68}, 0x1, 0x0, 0x0, 0x20008820}, 0x4008000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x440c0) r4 = dup(r0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r7, 0x7, 0x30, 0x400006b4, 0x3}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x1ff, 0x8000, 0xff, 0x0, 0x6, 0x8, 0x8, r7}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c, 0x0}}], 0x1, 0x20008050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="95a3000018000000000000002400000024000000ff000000000000000000000d0300000000005731000000000002030000000000"], 0x0, 0x3e, 0x0, 0x8}, 0x28) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@ip_retopts={{0x14, 0x110, 0xd, {[@end]}}}], 0x18}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r5], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xf, 0xa, 0xf, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0x0, @local, 0x6}}, 0xd70, 0x800}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f00000002c0)={r13, 0x8}, &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r14, 0x0, 0x8, &(0x7f0000000200)=0x1ff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_opts(r14, 0x0, 0x9, &(0x7f0000000340)=""/17, &(0x7f00000003c0)=0x11) 1.486340234s ago: executing program 1 (id=558): pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x39, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fstatfs(r7, &(0x7f0000001780)=""/4096) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x0, 0x1, 0x4, 0x3}}, 0x26) copy_file_range(r6, 0x0, r6, 0x0, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000906010200000000001000000a0000000900020073797a310000000005000100070000001c0007800c0001800800df3f0a0101000c001940001a65078e7568407791ae486ed800000000008000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.486059694s ago: executing program 5 (id=559): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000600)=[{&(0x7f00000005c0)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b70000180600405f6a5abeef4ba0d598446273cd3d0856ccec377a3f3b1876245aa44d0bbd887cfa368eb38787011284a16a9504e4b207c95104085f0836bfd11345eeb17f6151ad49488f", 0x4b}], 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r4}, 0x3f) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) 1.377991763s ago: executing program 3 (id=561): poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x10001}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2a0}], 0x1f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xaf3, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xadf, 0x0, @opaque="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"}}}, 0xb01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x82) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r1, @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1.311419568s ago: executing program 0 (id=564): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000000000008}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r4 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000280)="e9735215f96db85fd8a428ca7b79642766518ecc", &(0x7f0000001000)=""/4096, &(0x7f00000004c0)="c15b1c5d49c7c40ace60072915454cfb5bea035d012b4f9f9f78f089f35853468c64593d71a24071e7ecd1f20d45874e1f12b8840f02718f76e325a9f9a4f67d9dfed33dac29ac632527e3886ee531ae194e88f47d5e0b067867e943b54f0418ad3dedbfe2bf9afcd3baca0694b1f85b50dbd9931437bb5109a2de4d1ab9b5d9b6e428a2b6a16cdf143809db2f3644eda52ae7211ca60b928d0bb895f8584e8d017984263cf439902d64d1db60df1bc814e1711e151d176008df4e13d882c0751415dd7c87d8a7f9", &(0x7f00000002c0)="255edb62d20ecacd72ef3058483f3706e7864d7d2d32e1158b3a471a73482e0b31938fd8dfbd1c11798fcb9787376ba79a", 0x7, r1, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x7, 0x2, 0x1, [0x2, 0x8, 0x8, 0x10, 0x1, 0x2, 0xfff9, 0x5, 0x0, 0xf3, 0x3, 0x0, 0x0, 0x2, 0x2, 0x50], 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x20, "abce3b837fddb40a5185ab00715e41c1367ad3fe06dc7aeafbd327367a67"}}}, {{@ipv6={@loopback, @mcast1, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'bond_slave_1\x00', 'wg2\x00', {}, {}, 0x87, 0x8, 0x0, 0x3}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 1.279515421s ago: executing program 0 (id=565): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1690}, 0x0, 0x7, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b089f6948000000090000e4ffffffff41000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x632}, 0x94) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) setfsgid(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.046564649s ago: executing program 0 (id=567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x9, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x2, 0x80000001, 0x1, 0x9, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0x6, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x80000003, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket(0x2, 0x80805, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x93, 0x8b, 0x63, 0x40, 0x6cd, 0x108, 0xc75f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x2, 0x41, 0xa1, 0xad, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ef, 0x7, 0x3, 0x74}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0xb, 0x5}}]}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {r5, 0x4}}]}, 0xc4}}, 0x0) 710.159065ms ago: executing program 4 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/\x00'], 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) migrate_pages(0x0, 0x4, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000d2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 690.536397ms ago: executing program 4 (id=573): ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x3}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf2ff, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 606.714353ms ago: executing program 4 (id=574): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000020000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0x142, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x134, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x120, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "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"}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={r5, r6/1000+10000}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 606.188613ms ago: executing program 1 (id=575): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES16=r6, @ANYRES32=r0, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', r1, 0x40, 0x0, 0x1, 0x9, {{0x18, 0x4, 0x1, 0x8, 0x60, 0x64, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0x7, 0x54, [@broadcast]}, @generic={0x44, 0x4, "f842"}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0xa, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2a}, {@local, 0x3}, {@loopback, 0x8000}, {@multicast1, 0x6}, {@private=0xa010101, 0x5}, {@broadcast}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r7, @ANYRESHEX=r5], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x5, '\x00', r10, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509af00020073797a320000009100004100736977140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000000, 0x0) 605.240953ms ago: executing program 4 (id=576): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) read(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000040001803c0002800c00028005000100000000002c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000010800074080000000"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x6048800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x2b3434, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x18) r10 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r10, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 584.556195ms ago: executing program 5 (id=577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) 555.552497ms ago: executing program 5 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) 489.906982ms ago: executing program 5 (id=579): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x38, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xe3}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, &(0x7f00000000c0), 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x6, 0x8, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r0], &(0x7f0000000280)=[{0x5, 0x3, 0x1, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x400000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$eJzs3MtvG0UYAPBv10lLXyRUpdAHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QXWQaBRBQKgcUSXuiCMSfwEHBBcEnJC4wh1VqlAuLZyM1vYmjmuncepkC/79pI1ndseZ+bw79sxOnAD61kj2I4nYHRG/R8RQPbu6wEj94ebSwtTfSwtTSVSrb/6V1MrdWFqYyovmz9uVZwYi0k+TONSm3srl+fOT5fLMpUZ+bO7Ce2OVy/PPnrsweXbm7MzFiVOnThwff/7kxHM9iTOL68bBD2cPH3j17auvT52++s7P3yR5/C1x9MjIWgefqFZ7XF2x9jSlk4ECG0JXSvVuGoO1/j8UpVg5eUPxyieFNg7YVNVqtbo/4rsOhxerwP9YEkW3AChG/kGfzX/zbetGH8W7/mJ9ApTFfbOx1Y8MRNooM9gyv+2lkYg4vfjPl9kWm3MfAgBgle+z8c8z7cZ/aexvKndvYw1lOCLui4i9EXEyIvZFxP0RtbIPRMSDXdbfukhy6/gnvdb+mdu7rKm9bPz3QmNta/X4Lx/9xXCpkdtTi38wOXOuPHOs8ZocjcHtWX58jTp+ePm3zzsdax7/ZVtWf/a4sjqUXhtoCXV6cm7yjoJucv3jiIMD7eJPllcCkog4EBEHN1jHuae+PtzpWKf41/WLe7DOVP0q4sn6+V+Mlvhzydrrk2P3RHnm2Fh+Vdzql1+vvNGp/juKvwey87+z7fW/HP9w0rxeW+m+jit/fNZxTnP7+Ntf/9uSt1bt+2Bybu7SeMS25LV6o5v3T7SUm1gpn8V/9Ej7/r83Vl6JQxGRXcQPRcTDEfFIo+2PRsRjEXFkjfh/eunxdzce/+bK4p/u6vyvJLZF6572idL5H79dVelwN/Fn5/9ELXW0sWc973/radfGrmYAAAD470kjYnck6ehyOk1HR+t/w78vdqbl2crc02dm3784Xf+OwHAMpvmdrqGm+6HjjWl9np9oyR9v3Df+orSjlh+dmi1PFx089LldHfp/5s9S0a0DNp3va0H/0v+hf+n/0L/0f+hfbfr/jiLaAWy9dp//HxXQDmDrtfR/y37QR8z/oX/p/9C/9H/oS5UdcfsvyUsUncj/GcPd0p7K5flI74pmSGxSouA3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75NwAA//9wCOUr") 485.585812ms ago: executing program 0 (id=580): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x40, 0x0, 0x1, 0x9, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x64, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0xb, 0x54, [@multicast2, @broadcast]}, @generic={0x44, 0x4, "f842"}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0xa, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2a}, {@local, 0x3}, {@loopback, 0x8000}, {@multicast1, 0x6}, {@private=0xa010101, 0x5}, {@broadcast}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRESHEX], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x5, '\x00', r6, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000000, 0x0) 406.680229ms ago: executing program 3 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800ffffffffffffff7f00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000fb0700000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r8}, 0x3d) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r9}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x2fd7782f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x24040884) socket$inet6(0xa, 0x1, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r10, 0x4b67, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r11 = dup3(r10, r10, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r11, 0x20, &(0x7f00000004c0)={&(0x7f0000000540)=""/66, 0x42, 0x0, &(0x7f00000005c0)=""/72, 0x48}}, 0x10) socket$netlink(0x10, 0x3, 0x0) 389.29916ms ago: executing program 0 (id=582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0xa00, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x4000000, @loopback}, 0x1c) 275.956269ms ago: executing program 1 (id=583): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) (async) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) (async) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd25, 0x25dfdbfb, {}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) clock_adjtime(0xfffffff3, &(0x7f0000000200)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 269.071629ms ago: executing program 4 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x20050800) 214.773494ms ago: executing program 5 (id=585): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) (async) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xa00) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0x7, 0x0, &(0x7f0000000280)="63ec33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 214.366164ms ago: executing program 1 (id=586): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="a20000001500010005000000000000000a000000"], 0x14}}, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='/cpu '], 0x5) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYRES64=r5, @ANYRESDEC=r2, @ANYRES8, @ANYRES8=r0, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x800007, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='cachefiles_ondemand_copen\x00', r8, 0x0, 0x886}, 0x18) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000a8, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$TIOCL_SELLOADLUT(r9, 0x541c, &(0x7f0000000040)={0x5, 0x7, 0xf7, 0xb, 0x8}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12, {0x0, 0xfffa}, {0x0, 0x2000}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 213.640184ms ago: executing program 3 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2000000000000}, 0x18) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2) pwritev(r2, &(0x7f0000003d80)=[{&(0x7f0000000980)='-1', 0x2}, {0x0}], 0x2, 0x7, 0x3ff) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060088"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}]}, 0x20}, 0x1, 0x0, 0x0, 0x4028014}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}]}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@delpolicy={0x74, 0x14, 0x0, 0x70bd29, 0x25dfdbff, {{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x6, 0x4e20, 0x28, 0x2, 0x20, 0xa0, 0x88, r7, r10}, 0x6e6bb1, 0x2}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x32}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x5, 0x4) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r3) getsockopt$inet6_mreq(r6, 0x29, 0x3f, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80081214}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)={0x2a8, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9bf}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8df}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa32}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40010) 153.381238ms ago: executing program 4 (id=588): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x10000, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x7ff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone3(&(0x7f0000000600)={0x42200000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r8, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0xfffffff7fffffffd, 0x8) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x4, 0xf1e0, @vifc_lcl_ifindex=r13, @rand_addr=0x64010101}, 0x10) close(r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000380)={0x0, 0x1d, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="29a626bd7000fddbdf2501000000000000000b80"], 0x30}, 0x1, 0x0, 0x0, 0x4004844}, 0x40000) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), 0x4) 116.399641ms ago: executing program 5 (id=589): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1561, &(0x7f0000000040)={0x0, 0xfda3, 0x2, 0x0, 0x28b, 0x0, r4}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, 0xffffffffffffffff, 0x0, 0x40001) ftruncate(r7, 0x2007ffb) sendfile(r8, r7, 0x0, 0x1000000200fff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYRES64=0x0, @ANYBLOB="2944c739639200a9799900265ce1bc4e12213d54b5fc498c2cbd624288d4af05ddbcdca5fbb2dfbebd3f4a7adc042fc8464f50031afc5721ba2afde6225b0dab806898e7edde4ba628156fbf127195eabe25734b499f3c9c", @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") 55.981346ms ago: executing program 3 (id=590): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x9, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x2, 0x80000001, 0x1, 0x9, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0x6, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x80000003, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket(0x2, 0x80805, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x93, 0x8b, 0x63, 0x40, 0x6cd, 0x108, 0xc75f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x2, 0x41, 0xa1, 0xad, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ef, 0x7, 0x3, 0x74}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0xb, 0x5}}]}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {r5, 0x4}}]}, 0xc4}}, 0x0) 55.258606ms ago: executing program 1 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 0s ago: executing program 1 (id=592): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRES32=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x40, 0x0, 0x1, 0x9, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x64, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0xb, 0x54, [@multicast2, @broadcast]}, @generic={0x44, 0x4, "f842"}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0xa, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2a}, {@local, 0x3}, {@loopback, 0x8000}, {@multicast1, 0x6}, {@private=0xa010101, 0x5}, {@broadcast}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRESHEX], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x5, '\x00', r6, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000000, 0x0) kernel console output (not intermixed with test programs): EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 64.419514][ T3857] EXT4-fs (loop4): 1 orphan inode deleted [ 64.426309][ T3857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.486873][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.541158][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.552455][ T3876] infiniband !yz!: set active [ 64.557300][ T3876] infiniband !yz!: added team_slave_0 [ 64.583951][ T3876] RDS/IB: !yz!: added [ 64.588019][ T3876] smc: adding ib device !yz! with port count 1 [ 64.602837][ T3876] smc: ib device !yz! port 1 has no pnetid [ 64.640649][ T3882] EXT4-fs: Ignoring removed i_version option [ 64.677258][ T3882] EXT4-fs: Ignoring removed bh option [ 64.712844][ T3882] EXT4-fs: Ignoring removed bh option [ 64.731026][ T3865] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 64.762415][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.879944][ T3882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.923313][ T3865] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 64.932372][ T3865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 64.954006][ T3890] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 65.113615][ T3896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 65.272972][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.348613][ T3907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.410604][ T3916] bridge_slave_0: left allmulticast mode [ 65.416392][ T3916] bridge_slave_0: left promiscuous mode [ 65.422159][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.430508][ T3910] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.102: corrupted in-inode xattr: invalid ea_ino [ 65.433093][ T3907] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.463097][ T3921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.471713][ T3907] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.99: directory missing '.' [ 65.498489][ T3921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.517486][ T3916] bridge_slave_1: left allmulticast mode [ 65.523222][ T3916] bridge_slave_1: left promiscuous mode [ 65.528917][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.536534][ T3910] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.102: couldn't read orphan inode 15 (err -117) [ 65.552801][ T3916] bond0: (slave bond_slave_0): Releasing backup interface [ 65.563063][ T3916] bond0: (slave bond_slave_1): Releasing backup interface [ 65.586889][ T3916] team0: Port device team_slave_0 removed [ 65.601830][ T3910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.615930][ T3933] x_tables: duplicate underflow at hook 1 [ 65.628824][ T3910] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6318: inode #18: comm syz.0.102: bad extra_isize 6 (inode size 256) [ 65.632387][ T3916] team0: Port device team_slave_1 removed [ 65.658466][ T3933] raw_sendmsg: syz.3.100 forgot to set AF_INET. Fix it! [ 65.675796][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.683356][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.730410][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.737934][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.753071][ T3916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.858399][ T3949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.104'. [ 65.864588][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.902880][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.923041][ T3960] SELinux: Context system_u:object is not valid (left unmapped). [ 65.962122][ T3958] netlink: 'syz.2.105': attribute type 14 has an invalid length. [ 66.115784][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 66.115830][ T29] audit: type=1326 audit(1766007476.476:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.124595][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 66.176232][ T29] audit: type=1326 audit(1766007476.476:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.199779][ T29] audit: type=1326 audit(1766007476.476:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.223652][ T29] audit: type=1326 audit(1766007476.476:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.247050][ T29] audit: type=1326 audit(1766007476.476:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.270408][ T29] audit: type=1326 audit(1766007476.476:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.293996][ T29] audit: type=1326 audit(1766007476.476:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.317455][ T29] audit: type=1326 audit(1766007476.476:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.340782][ T29] audit: type=1326 audit(1766007476.476:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.352035][ T3977] set_capacity_and_notify: 3 callbacks suppressed [ 66.352060][ T3977] loop1: detected capacity change from 0 to 1024 [ 66.364397][ T29] audit: type=1326 audit(1766007476.476:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3971 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47833f749 code=0x7ffc0000 [ 66.402960][ T3977] EXT4-fs: Ignoring removed i_version option [ 66.412211][ T3977] EXT4-fs: Ignoring removed bh option [ 66.420498][ T3977] EXT4-fs: Ignoring removed bh option [ 66.438726][ T3980] process 'syz.0.111' launched './file0' with NULL argv: empty string added [ 66.470816][ T3984] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 66.479161][ T3980] loop0: detected capacity change from 0 to 4096 [ 66.489063][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.489500][ T3984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.530533][ T3980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.553667][ T3980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.567270][ T3984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.626698][ T3984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.646701][ T3989] loop2: detected capacity change from 0 to 128 [ 66.653680][ T3989] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.687629][ T3989] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.689368][ T3994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.708481][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3989 comm=syz.2.113 [ 66.737754][ T3984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.808474][ T898] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.823569][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.842357][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.871754][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.892445][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.007139][ T4014] xt_NFQUEUE: number of total queues is 0 [ 67.016218][ T4014] loop2: detected capacity change from 0 to 512 [ 67.050916][ T3424] IPVS: starting estimator thread 0... [ 67.100107][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 67.143937][ T4018] IPVS: using max 2112 ests per chain, 105600 per kthread [ 67.147775][ T4024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.160501][ T4020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.169515][ T4024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.201528][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 67.217190][ T4000] team0 (unregistering): Port device team_slave_0 removed [ 67.227350][ T4000] team0 (unregistering): Port device team_slave_1 removed [ 67.259611][ T4026] pim6reg: entered allmulticast mode [ 67.284515][ T4026] pim6reg: left allmulticast mode [ 67.359684][ T4000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.116'. [ 67.425295][ T4000] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 67.453440][ T4028] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 67.461214][ T4028] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 67.551887][ T4035] loop4: detected capacity change from 0 to 1024 [ 67.561275][ T4035] EXT4-fs: Ignoring removed i_version option [ 67.567864][ T4035] EXT4-fs: Ignoring removed bh option [ 67.574049][ T4035] EXT4-fs: Ignoring removed bh option [ 67.587532][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.607006][ T4030] Zero length message leads to an empty skb [ 67.722106][ T4040] FAULT_INJECTION: forcing a failure. [ 67.722106][ T4040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.735266][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.3.130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.735310][ T4040] Tainted: [W]=WARN [ 67.735394][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.735411][ T4040] Call Trace: [ 67.735420][ T4040] [ 67.735430][ T4040] __dump_stack+0x1d/0x30 [ 67.735462][ T4040] dump_stack_lvl+0xe8/0x140 [ 67.735494][ T4040] dump_stack+0x15/0x1b [ 67.735540][ T4040] should_fail_ex+0x265/0x280 [ 67.735570][ T4040] should_fail+0xb/0x20 [ 67.735590][ T4040] should_fail_usercopy+0x1a/0x20 [ 67.735654][ T4040] _copy_from_user+0x1c/0xb0 [ 67.735683][ T4040] ___sys_sendmsg+0xc1/0x1d0 [ 67.735735][ T4040] __x64_sys_sendmsg+0xd4/0x160 [ 67.735804][ T4040] x64_sys_call+0x17ba/0x3000 [ 67.735829][ T4040] do_syscall_64+0xd8/0x2c0 [ 67.735867][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.735945][ T4040] RIP: 0033:0x7f1988a8f749 [ 67.735959][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.736038][ T4040] RSP: 002b:00007f19874ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.736059][ T4040] RAX: ffffffffffffffda RBX: 00007f1988ce5fa0 RCX: 00007f1988a8f749 [ 67.736076][ T4040] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 67.736092][ T4040] RBP: 00007f19874ef090 R08: 0000000000000000 R09: 0000000000000000 [ 67.736108][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.736124][ T4040] R13: 00007f1988ce6038 R14: 00007f1988ce5fa0 R15: 00007ffc08d29c38 [ 67.736163][ T4040] [ 67.949433][ T4048] loop3: detected capacity change from 0 to 512 [ 67.993190][ T4048] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.058881][ T4048] EXT4-fs (loop3): 1 orphan inode deleted [ 68.067938][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.077514][ T4048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.090437][ T4048] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.143738][ T4070] xt_nat: multiple ranges no longer supported [ 68.153188][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 68.155058][ T4048] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.132: iget: bad i_size value: 360287970189639690 [ 68.168516][ T4069] loop4: detected capacity change from 0 to 512 [ 68.190283][ T4069] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.204637][ T4048] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.132: iget: bad i_size value: 360287970189639690 [ 68.218539][ T4048] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.254349][ T3323] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 68.273013][ T4075] FAULT_INJECTION: forcing a failure. [ 68.273013][ T4075] name failslab, interval 1, probability 0, space 0, times 0 [ 68.285737][ T4075] CPU: 1 UID: 0 PID: 4075 Comm: syz.4.141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.285766][ T4075] Tainted: [W]=WARN [ 68.285773][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.285785][ T4075] Call Trace: [ 68.285790][ T4075] [ 68.285798][ T4075] __dump_stack+0x1d/0x30 [ 68.285861][ T4075] dump_stack_lvl+0xe8/0x140 [ 68.285883][ T4075] dump_stack+0x15/0x1b [ 68.285909][ T4075] should_fail_ex+0x265/0x280 [ 68.286004][ T4075] should_failslab+0x8c/0xb0 [ 68.286025][ T4075] kmem_cache_alloc_noprof+0x69/0x4b0 [ 68.286046][ T4075] ? prepare_creds+0x39/0x550 [ 68.286063][ T4075] ? get_random_u64+0x164/0x210 [ 68.286087][ T4075] prepare_creds+0x39/0x550 [ 68.286157][ T4075] copy_creds+0x8f/0x340 [ 68.286173][ T4075] ? dup_task_struct+0x60b/0x950 [ 68.286193][ T4075] copy_process+0x638/0x1ef0 [ 68.286212][ T4075] ? 0xffffffff81000000 [ 68.286246][ T4075] kernel_clone+0x16c/0x5c0 [ 68.286265][ T4075] ? vfs_write+0x7e8/0x960 [ 68.286305][ T4075] __x64_sys_clone+0xe6/0x120 [ 68.286344][ T4075] x64_sys_call+0x12d0/0x3000 [ 68.286400][ T4075] do_syscall_64+0xd8/0x2c0 [ 68.286448][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.286467][ T4075] RIP: 0033:0x7f0f3d21f749 [ 68.286481][ T4075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.286509][ T4075] RSP: 002b:00007f0f3bc7efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 68.286526][ T4075] RAX: ffffffffffffffda RBX: 00007f0f3d475fa0 RCX: 00007f0f3d21f749 [ 68.286539][ T4075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 68.286551][ T4075] RBP: 00007f0f3bc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.286562][ T4075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 68.286573][ T4075] R13: 00007f0f3d476038 R14: 00007f0f3d475fa0 R15: 00007ffff44ffc48 [ 68.286591][ T4075] [ 68.503430][ T4077] loop4: detected capacity change from 0 to 128 [ 68.538131][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.567974][ T4081] loop4: detected capacity change from 0 to 1024 [ 68.585981][ T4081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.611906][ T4081] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.633154][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 3) [ 68.647551][ T4081] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 68.649982][ T4089] netlink: 'syz.3.145': attribute type 3 has an invalid length. [ 68.659930][ T4081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.659930][ T4081] [ 68.664681][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.691729][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.706177][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.721871][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.736114][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.750692][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.765020][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.779814][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.794345][ T4081] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.144: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.795313][ T4095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 68.817664][ T4095] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 69.028690][ T4115] x_tables: ip_tables: osf match: only valid for protocol 6 [ 69.069597][ T4117] loop3: detected capacity change from 0 to 1024 [ 69.076601][ T4117] EXT4-fs: Ignoring removed i_version option [ 69.082890][ T4117] EXT4-fs: Ignoring removed bh option [ 69.088602][ T4117] EXT4-fs: Ignoring removed bh option [ 69.114253][ T4117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.209057][ T4121] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 69.234329][ T4121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.248136][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 69.257620][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.264999][ T4121] bridge_slave_1: left allmulticast mode [ 69.270720][ T4121] bridge_slave_1: left promiscuous mode [ 69.276633][ T4121] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.285227][ T4121] bridge_slave_0: left allmulticast mode [ 69.290900][ T4121] bridge_slave_0: left promiscuous mode [ 69.296711][ T4121] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.435785][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.466365][ T298] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.478778][ T298] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.478778][ T298] [ 69.501006][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.623393][ T4142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.159'. [ 69.632457][ T4143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.159'. [ 69.642198][ T4143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.159'. [ 69.685129][ T4146] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 69.727134][ T3005] udevd[3005]: worker [3918] terminated by signal 33 (Unknown signal 33) [ 69.735838][ T4150] xt_connbytes: Forcing CT accounting to be enabled [ 69.742456][ T4150] Cannot find set identified by id 0 to match [ 69.748621][ T3005] udevd[3005]: worker [3918] failed while handling '/devices/virtual/vc/vcs3' [ 69.762922][ T3005] udevd[3005]: worker [3772] terminated by signal 33 (Unknown signal 33) [ 69.779362][ T3005] udevd[3005]: worker [3772] failed while handling '/devices/virtual/vc/vcsa3' [ 69.796949][ T3005] udevd[3005]: worker [3863] terminated by signal 33 (Unknown signal 33) [ 69.812165][ T3005] udevd[3005]: worker [3863] failed while handling '/devices/virtual/vc/vcsu3' [ 69.838982][ T4152] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 70.306092][ T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.316125][ T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.332154][ T298] bond0 (unregistering): Released all slaves [ 70.340807][ T4215] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 70.454556][ T298] hsr_slave_0: left promiscuous mode [ 70.460310][ T298] hsr_slave_1: left promiscuous mode [ 70.466568][ T298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.477056][ T298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.521520][ T4217] EXT4-fs: dax option not supported [ 70.527308][ T298] team0 (unregistering): Port device team_slave_1 removed [ 70.548330][ T298] team0 (unregistering): Port device team_slave_0 removed [ 70.578499][ T4223] EXT4-fs: Ignoring removed i_version option [ 70.588220][ T4223] EXT4-fs: Ignoring removed bh option [ 70.594812][ T4223] EXT4-fs: Ignoring removed bh option [ 70.614892][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.658755][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 70.705361][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.712481][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.719880][ T4183] bridge_slave_0: entered allmulticast mode [ 70.726456][ T4183] bridge_slave_0: entered promiscuous mode [ 70.733610][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.740711][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.748132][ T4183] bridge_slave_1: entered allmulticast mode [ 70.755294][ T4183] bridge_slave_1: entered promiscuous mode [ 70.775683][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.786051][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.805907][ T4183] team0: Port device team_slave_0 added [ 70.812295][ T4183] team0: Port device team_slave_1 added [ 70.831069][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.838184][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.864130][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.875556][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.882689][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.883307][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.908702][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.965221][ T4183] hsr_slave_0: entered promiscuous mode [ 70.971261][ T4183] hsr_slave_1: entered promiscuous mode [ 70.977345][ T4183] debugfs: 'hsr0' already exists in 'hsr' [ 70.983129][ T4183] Cannot create hsr debugfs directory [ 71.026108][ T4233] syz.4.176 (4233) used greatest stack depth: 10192 bytes left [ 71.144853][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 71.144891][ T29] audit: type=1400 audit(1766007481.506:2507): avc: denied { read } for pid=4244 comm="syz.4.181" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.177489][ T4183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.193593][ T29] audit: type=1400 audit(1766007481.506:2508): avc: denied { open } for pid=4244 comm="syz.4.181" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.217198][ T29] audit: type=1400 audit(1766007481.506:2509): avc: denied { ioctl } for pid=4244 comm="syz.4.181" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.242192][ T29] audit: type=1400 audit(1766007481.536:2510): avc: denied { mounton } for pid=4242 comm="syz.1.180" path="/30/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.264788][ T29] audit: type=1400 audit(1766007481.536:2511): avc: denied { create } for pid=4183 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.285467][ T29] audit: type=1400 audit(1766007481.536:2512): avc: denied { write } for pid=4183 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.294001][ T4243] EXT4-fs (loop1): 1 orphan inode deleted [ 71.306108][ T29] audit: type=1400 audit(1766007481.536:2513): avc: denied { read } for pid=4183 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.321866][ T4243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.346794][ T29] audit: type=1400 audit(1766007481.556:2514): avc: denied { open } for pid=4244 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.363982][ T4243] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.366043][ T29] audit: type=1400 audit(1766007481.556:2515): avc: denied { kernel } for pid=4244 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.376628][ T4183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.395686][ T29] audit: type=1326 audit(1766007481.616:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 71.427044][ T4183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.444251][ T4183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.490918][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.500982][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.528894][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.546188][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.553336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.567625][ T4264] set_capacity_and_notify: 4 callbacks suppressed [ 71.567656][ T4264] loop1: detected capacity change from 0 to 512 [ 71.583806][ T4264] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.185: corrupted in-inode xattr: invalid ea_ino [ 71.592479][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.607463][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.619153][ T4264] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.185: couldn't read orphan inode 15 (err -117) [ 71.638467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.645592][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.654466][ T4264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.671213][ T4266] loop3: detected capacity change from 0 to 128 [ 71.696035][ T4264] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6318: inode #18: comm syz.1.185: bad extra_isize 6 (inode size 256) [ 71.727683][ T4266] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.751465][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.771203][ T4266] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.792811][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.916864][ T4183] veth0_vlan: entered promiscuous mode [ 71.935550][ T4183] veth1_vlan: entered promiscuous mode [ 71.971425][ T4183] veth0_macvtap: entered promiscuous mode [ 72.007698][ T4299] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 72.026165][ T4303] FAULT_INJECTION: forcing a failure. [ 72.026165][ T4303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.039409][ T4303] CPU: 0 UID: 0 PID: 4303 Comm: syz.0.191 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.039446][ T4303] Tainted: [W]=WARN [ 72.039453][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.039525][ T4303] Call Trace: [ 72.039558][ T4303] [ 72.039567][ T4303] __dump_stack+0x1d/0x30 [ 72.039596][ T4303] dump_stack_lvl+0xe8/0x140 [ 72.039666][ T4303] dump_stack+0x15/0x1b [ 72.039693][ T4303] should_fail_ex+0x265/0x280 [ 72.039777][ T4303] should_fail+0xb/0x20 [ 72.039804][ T4303] should_fail_usercopy+0x1a/0x20 [ 72.039837][ T4303] strncpy_from_user+0x27/0x260 [ 72.039934][ T4303] getname_flags+0xae/0x3b0 [ 72.039986][ T4303] user_path_at+0x28/0x130 [ 72.040058][ T4303] __se_sys_mount+0x25b/0x2e0 [ 72.040150][ T4303] ? fput+0x8f/0xc0 [ 72.040190][ T4303] __x64_sys_mount+0x67/0x80 [ 72.040220][ T4303] x64_sys_call+0x2cca/0x3000 [ 72.040255][ T4303] do_syscall_64+0xd8/0x2c0 [ 72.040362][ T4303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.040402][ T4303] RIP: 0033:0x7f8064a8f749 [ 72.040424][ T4303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.040449][ T4303] RSP: 002b:00007f80634ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.040473][ T4303] RAX: ffffffffffffffda RBX: 00007f8064ce5fa0 RCX: 00007f8064a8f749 [ 72.040490][ T4303] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 72.040507][ T4303] RBP: 00007f80634ef090 R08: 0000200000000300 R09: 0000000000000000 [ 72.040520][ T4303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.040545][ T4303] R13: 00007f8064ce6038 R14: 00007f8064ce5fa0 R15: 00007fff897261b8 [ 72.040572][ T4303] [ 72.238170][ T4183] veth1_macvtap: entered promiscuous mode [ 72.273371][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.293599][ T4306] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 72.403943][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.502918][ T4311] __nla_validate_parse: 3 callbacks suppressed [ 72.502987][ T4311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'. [ 72.696822][ T4318] loop1: detected capacity change from 0 to 512 [ 72.760079][ T4318] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.194: bad orphan inode 11862016 [ 72.788563][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.807412][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.815738][ T4318] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.829367][ T298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.841748][ T298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.856330][ T298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.901913][ T4318] EXT4-fs (loop1): shut down requested (2) [ 72.949029][ T4318] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 72.996789][ T4318] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 73.007554][ T4335] loop0: detected capacity change from 0 to 1024 [ 73.024116][ T4335] EXT4-fs: Ignoring removed i_version option [ 73.039923][ T4335] EXT4-fs: Ignoring removed bh option [ 73.071447][ T4335] EXT4-fs: Ignoring removed bh option [ 73.077152][ T4340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4340 comm=syz.5.200 [ 73.105123][ T4335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.207381][ T4345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 73.305685][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.337062][ T4359] netlink: 40 bytes leftover after parsing attributes in process `syz.5.203'. [ 73.428637][ T4361] netlink: 'syz.1.204': attribute type 5 has an invalid length. [ 73.468391][ T4369] loop1: detected capacity change from 0 to 128 [ 73.486649][ T4371] lo speed is unknown, defaulting to 1000 [ 73.502036][ T4371] lo speed is unknown, defaulting to 1000 [ 73.518210][ T4371] lo speed is unknown, defaulting to 1000 [ 73.528739][ T4371] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.536556][ T4371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 73.609754][ T4371] lo speed is unknown, defaulting to 1000 [ 73.625808][ T4371] lo speed is unknown, defaulting to 1000 [ 73.635427][ T4373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 73.671796][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 73.696265][ T4377] loop3: detected capacity change from 0 to 1024 [ 73.735586][ T4371] lo speed is unknown, defaulting to 1000 [ 73.741694][ T4381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4381 comm=syz.4.205 [ 73.764100][ T4371] lo speed is unknown, defaulting to 1000 [ 73.775127][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.776009][ T4377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.793228][ T4371] lo speed is unknown, defaulting to 1000 [ 73.822335][ T4373] loop4: detected capacity change from 0 to 1024 [ 73.839066][ T4373] EXT4-fs: Ignoring removed orlov option [ 73.845025][ T4373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.891788][ T4386] random: crng reseeded on system resumption [ 73.902985][ T4374] smc: removing ib device !yz! [ 73.909885][ T4373] ext4: Unknown parameter 'subj_role' [ 73.924971][ T4377] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.062694][ T4371] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.206: lblock 0 mapped to illegal pblock 0 (length 6) [ 74.086496][ T4371] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 74.109882][ T4371] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.206: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.141196][ T4371] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 74.165791][ T4377] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.206: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.179467][ T4377] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.206: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 74.198326][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'. [ 74.347089][ T4408] loop5: detected capacity change from 0 to 4096 [ 74.371266][ T4408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.388555][ T4411] loop4: detected capacity change from 0 to 1024 [ 74.395775][ T4411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.416696][ T4411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.493336][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.526459][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.556197][ T4416] loop1: detected capacity change from 0 to 1024 [ 74.580430][ T4416] EXT4-fs: Ignoring removed i_version option [ 74.599089][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.602790][ T4416] EXT4-fs: Ignoring removed bh option [ 74.636478][ T4416] EXT4-fs: Ignoring removed bh option [ 74.662706][ T4422] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 74.688433][ T4427] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.222: corrupted in-inode xattr: invalid ea_ino [ 74.689196][ T4416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.721989][ T3005] udevd[3005]: worker [4198] terminated by signal 33 (Unknown signal 33) [ 74.725143][ T4429] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.223: corrupted in-inode xattr: invalid ea_ino [ 74.730643][ T3005] udevd[3005]: worker [4198] failed while handling '/devices/virtual/block/loop0' [ 74.753557][ T3005] udevd[3005]: worker [4200] terminated by signal 33 (Unknown signal 33) [ 74.753882][ T4427] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.222: couldn't read orphan inode 15 (err -117) [ 74.762018][ T3005] udevd[3005]: worker [4200] failed while handling '/devices/virtual/block/loop3' [ 74.784075][ T4427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.796692][ T4429] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.223: couldn't read orphan inode 15 (err -117) [ 74.813964][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.828935][ T4427] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6318: inode #18: comm syz.0.222: bad extra_isize 6 (inode size 256) [ 74.843529][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.854080][ T4429] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6318: inode #18: comm syz.3.223: bad extra_isize 6 (inode size 256) [ 74.872444][ T4435] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.940201][ T4435] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.225: Failed to acquire dquot type 0 [ 74.975134][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.992804][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.027675][ T4446] EXT4-fs: Ignoring removed orlov option [ 75.104616][ T4446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.119814][ T4450] netlink: 96 bytes leftover after parsing attributes in process `syz.3.228'. [ 75.135410][ T4450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.228'. [ 75.146801][ T4450] sctp: [Deprecated]: syz.3.228 (pid 4450) Use of int in maxseg socket option. [ 75.146801][ T4450] Use struct sctp_assoc_value instead [ 75.199511][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.260794][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.286822][ T4458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4458 comm=syz.1.232 [ 75.319400][ T4462] netlink: 148 bytes leftover after parsing attributes in process `syz.0.231'. [ 75.396319][ T4468] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 75.454858][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.503753][ T4474] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.237: corrupted in-inode xattr: invalid ea_ino [ 75.545929][ T4474] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.237: couldn't read orphan inode 15 (err -117) [ 75.562961][ T4489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 75.617717][ T4474] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6318: inode #18: comm syz.1.237: bad extra_isize 6 (inode size 256) [ 75.670898][ T4505] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 75.793307][ T4517] netlink: 'syz.4.250': attribute type 1 has an invalid length. [ 75.838842][ T4523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.863929][ T4522] lo speed is unknown, defaulting to 1000 [ 75.864834][ T4523] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.917533][ T4523] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm LX[X: bg 0: block 248: padding at end of block bitmap is not set [ 75.947118][ T4522] EXT4-fs: inline encryption not supported [ 75.954065][ T4522] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 75.963691][ T4523] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm LX[X: Failed to acquire dquot type 1 [ 75.979136][ T4523] EXT4-fs (loop1): 1 truncate cleaned up [ 76.014425][ T4529] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.057939][ T4529] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 3) [ 76.073959][ T4523] LX[X (4523) used greatest stack depth: 9184 bytes left [ 76.121810][ T4529] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 76.134265][ T4529] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.134265][ T4529] [ 76.158098][ T29] kauditd_printk_skb: 1066 callbacks suppressed [ 76.158113][ T29] audit: type=1400 audit(1766007486.516:3579): avc: denied { map } for pid=4527 comm="syz.4.254" path="/54/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.200003][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.221845][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.239533][ T29] audit: type=1326 audit(1766007486.596:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.262984][ T29] audit: type=1326 audit(1766007486.596:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8064a8e1ff code=0x7ffc0000 [ 76.286153][ T29] audit: type=1326 audit(1766007486.596:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.309586][ T29] audit: type=1326 audit(1766007486.596:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.332978][ T29] audit: type=1326 audit(1766007486.596:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.356552][ T29] audit: type=1326 audit(1766007486.596:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.370143][ T4548] 9p: Bad value for 'rfdno' [ 76.379842][ T29] audit: type=1326 audit(1766007486.596:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.397983][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.407813][ T29] audit: type=1326 audit(1766007486.596:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.444984][ T29] audit: type=1326 audit(1766007486.596:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 76.447165][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.483100][ T4552] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.262: corrupted in-inode xattr: invalid ea_ino [ 76.498454][ T4552] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.262: couldn't read orphan inode 15 (err -117) [ 76.498540][ T4549] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.524940][ T4552] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6318: inode #18: comm syz.5.262: bad extra_isize 6 (inode size 256) [ 76.558956][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.603013][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.617528][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.633448][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.648563][ T4540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.254: lblock 3 mapped to illegal pblock 3 (length 1) [ 76.773644][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.786165][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.786165][ T12] [ 76.910315][ T4577] set_capacity_and_notify: 12 callbacks suppressed [ 76.910331][ T4577] loop5: detected capacity change from 0 to 8192 [ 77.026859][ T4589] mmap: syz.1.271 (4589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.079291][ T4595] loop0: detected capacity change from 0 to 1024 [ 77.089422][ T4593] loop3: detected capacity change from 0 to 1024 [ 77.110602][ T4595] EXT4-fs: Ignoring removed i_version option [ 77.131465][ T4595] EXT4-fs: Ignoring removed bh option [ 77.140332][ T4595] EXT4-fs: Ignoring removed bh option [ 77.146416][ T4593] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.171873][ T4604] loop5: detected capacity change from 0 to 128 [ 77.190136][ T4593] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.263788][ T4604] syz.5.275: attempt to access beyond end of device [ 77.263788][ T4604] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 77.277402][ T4593] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 77.289795][ T4593] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.289795][ T4593] [ 77.324176][ T4604] syz.5.275: attempt to access beyond end of device [ 77.324176][ T4604] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 77.338006][ T4604] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 77.346919][ T4604] syz.5.275: attempt to access beyond end of device [ 77.346919][ T4604] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 77.360552][ T4604] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 77.370700][ T4604] syz.5.275: attempt to access beyond end of device [ 77.370700][ T4604] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 77.384307][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.401137][ T4604] syz.5.275: attempt to access beyond end of device [ 77.401137][ T4604] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 77.414804][ T4604] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 77.452654][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.473102][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.499570][ T4604] syz.5.275: attempt to access beyond end of device [ 77.499570][ T4604] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 77.513318][ T4604] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 77.533002][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.554580][ T4604] syz.5.275: attempt to access beyond end of device [ 77.554580][ T4604] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 77.582794][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.607385][ T4604] syz.5.275: attempt to access beyond end of device [ 77.607385][ T4604] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 77.621019][ T4604] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 77.650517][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.692833][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.706953][ T4604] syz.5.275: attempt to access beyond end of device [ 77.706953][ T4604] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 77.720661][ T4604] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 77.752828][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.777511][ T4604] syz.5.275: attempt to access beyond end of device [ 77.777511][ T4604] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 77.801354][ T4608] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.277: lblock 3 mapped to illegal pblock 3 (length 1) [ 77.823483][ T4604] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 77.842138][ T4604] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 77.947068][ T4614] loop0: detected capacity change from 0 to 128 [ 77.988716][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 78.001153][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.001153][ T12] [ 78.048658][ T4619] loop3: detected capacity change from 0 to 1024 [ 78.083026][ T4619] ext2: Unknown parameter 'smackfshat' [ 78.142299][ T4625] __nla_validate_parse: 5 callbacks suppressed [ 78.142319][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.284'. [ 78.157460][ T4625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.284'. [ 78.374670][ T4634] bridge_slave_0: left allmulticast mode [ 78.380413][ T4634] bridge_slave_0: left promiscuous mode [ 78.386459][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.410315][ T4637] loop3: detected capacity change from 0 to 512 [ 78.445204][ T4637] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.289: inode has both inline data and extents flags [ 78.491688][ T4640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.288'. [ 78.505417][ T4637] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.289: couldn't read orphan inode 15 (err -117) [ 78.547799][ T4634] bridge_slave_1: left allmulticast mode [ 78.553744][ T4634] bridge_slave_1: left promiscuous mode [ 78.559529][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.652946][ T4640] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.695075][ T4634] bond0: (slave bond_slave_0): Releasing backup interface [ 78.711228][ T4634] bond0: (slave bond_slave_1): Releasing backup interface [ 78.730195][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.737701][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.781972][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.789440][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.848858][ T4634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.881713][ T4635] lo speed is unknown, defaulting to 1000 [ 79.183442][ T4648] loop5: detected capacity change from 0 to 2048 [ 79.321696][ T298] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 79.322390][ T4658] loop3: detected capacity change from 0 to 1024 [ 79.343157][ T298] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.355465][ T298] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.355465][ T298] [ 79.365150][ T298] EXT4-fs (loop5): Total free blocks count 0 [ 79.371140][ T298] EXT4-fs (loop5): Free/Dirty block details [ 79.377077][ T298] EXT4-fs (loop5): free_blocks=66060288 [ 79.382662][ T298] EXT4-fs (loop5): dirty_blocks=256 [ 79.387864][ T298] EXT4-fs (loop5): Block reservation details [ 79.393912][ T298] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 79.400776][ T298] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 227 with error 28 [ 79.413641][ T298] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.413641][ T298] [ 79.462354][ T4647] loop0: detected capacity change from 0 to 8192 [ 79.483716][ T4658] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.525192][ T4658] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 3) [ 79.575272][ T4658] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 79.587632][ T4658] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.587632][ T4658] [ 79.624086][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.657561][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.690395][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.722102][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.754057][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.786396][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.816449][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.845702][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 79.879304][ T4661] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.292: lblock 3 mapped to illegal pblock 3 (length 1) [ 80.052074][ T3317] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 80.060060][ T3317] FAT-fs (loop0): Filesystem has been set read-only [ 80.169363][ T4686] FAULT_INJECTION: forcing a failure. [ 80.169363][ T4686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.182639][ T4686] CPU: 1 UID: 0 PID: 4686 Comm: syz.4.299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.182683][ T4686] Tainted: [W]=WARN [ 80.182690][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.182702][ T4686] Call Trace: [ 80.182708][ T4686] [ 80.182716][ T4686] __dump_stack+0x1d/0x30 [ 80.182742][ T4686] dump_stack_lvl+0xe8/0x140 [ 80.182798][ T4686] dump_stack+0x15/0x1b [ 80.182818][ T4686] should_fail_ex+0x265/0x280 [ 80.182883][ T4686] should_fail+0xb/0x20 [ 80.182908][ T4686] should_fail_usercopy+0x1a/0x20 [ 80.182939][ T4686] _copy_to_user+0x20/0xa0 [ 80.182975][ T4686] simple_read_from_buffer+0xb5/0x130 [ 80.183003][ T4686] proc_fail_nth_read+0x10e/0x150 [ 80.183099][ T4686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.183134][ T4686] vfs_read+0x1a8/0x770 [ 80.183178][ T4686] ? __rcu_read_unlock+0x4f/0x70 [ 80.183204][ T4686] ? __fget_files+0x184/0x1c0 [ 80.183232][ T4686] ? mutex_lock+0x58/0x90 [ 80.183266][ T4686] ksys_read+0xda/0x1a0 [ 80.183433][ T4686] __x64_sys_read+0x40/0x50 [ 80.183527][ T4686] x64_sys_call+0x2889/0x3000 [ 80.183559][ T4686] do_syscall_64+0xd8/0x2c0 [ 80.183695][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.183721][ T4686] RIP: 0033:0x7f0f3d21e15c [ 80.183741][ T4686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.183763][ T4686] RSP: 002b:00007f0f3bc7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.183819][ T4686] RAX: ffffffffffffffda RBX: 00007f0f3d475fa0 RCX: 00007f0f3d21e15c [ 80.183840][ T4686] RDX: 000000000000000f RSI: 00007f0f3bc7f0a0 RDI: 0000000000000007 [ 80.183855][ T4686] RBP: 00007f0f3bc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.183870][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.183885][ T4686] R13: 00007f0f3d476038 R14: 00007f0f3d475fa0 R15: 00007ffff44ffc48 [ 80.183910][ T4686] [ 80.198671][ T4683] EXT4-fs (loop0): Invalid log cluster size: 4294967295 [ 80.414438][ T4690] FAULT_INJECTION: forcing a failure. [ 80.414438][ T4690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.427588][ T4690] CPU: 0 UID: 0 PID: 4690 Comm: syz.4.301 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.427624][ T4690] Tainted: [W]=WARN [ 80.427631][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.427645][ T4690] Call Trace: [ 80.427690][ T4690] [ 80.427700][ T4690] __dump_stack+0x1d/0x30 [ 80.427733][ T4690] dump_stack_lvl+0xe8/0x140 [ 80.427765][ T4690] dump_stack+0x15/0x1b [ 80.427792][ T4690] should_fail_ex+0x265/0x280 [ 80.427873][ T4690] should_fail+0xb/0x20 [ 80.427900][ T4690] should_fail_usercopy+0x1a/0x20 [ 80.427984][ T4690] _copy_from_user+0x1c/0xb0 [ 80.428066][ T4690] bpf_test_init+0xb9/0x140 [ 80.428116][ T4690] bpf_prog_test_run_xdp+0x305/0x970 [ 80.428198][ T4690] ? _kstrtol+0x41/0x90 [ 80.428222][ T4690] ? __rcu_read_unlock+0x4f/0x70 [ 80.428255][ T4690] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 80.428296][ T4690] bpf_prog_test_run+0x22a/0x390 [ 80.428355][ T4690] __sys_bpf+0x4c0/0x7c0 [ 80.428383][ T4690] __x64_sys_bpf+0x41/0x50 [ 80.428469][ T4690] x64_sys_call+0x28e1/0x3000 [ 80.428492][ T4690] do_syscall_64+0xd8/0x2c0 [ 80.428526][ T4690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.428582][ T4690] RIP: 0033:0x7f0f3d21f749 [ 80.428635][ T4690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.428659][ T4690] RSP: 002b:00007f0f3bc7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.428700][ T4690] RAX: ffffffffffffffda RBX: 00007f0f3d475fa0 RCX: 00007f0f3d21f749 [ 80.428715][ T4690] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 80.428730][ T4690] RBP: 00007f0f3bc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.428742][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.428754][ T4690] R13: 00007f0f3d476038 R14: 00007f0f3d475fa0 R15: 00007ffff44ffc48 [ 80.428778][ T4690] [ 80.626540][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 80.638872][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.638872][ T12] [ 80.772720][ T4708] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 80.905182][ T4719] infiniband syz!: set down [ 80.909725][ T4719] infiniband syz!: added team_slave_0 [ 80.921205][ T4719] RDS/IB: syz!: added [ 80.925426][ T4719] smc: adding ib device syz! with port count 1 [ 80.931652][ T4719] smc: ib device syz! port 1 has no pnetid [ 81.015690][ T4724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.307'. [ 81.027628][ T4724] bond0: entered promiscuous mode [ 81.032817][ T4724] bond_slave_0: entered promiscuous mode [ 81.038612][ T4724] bond_slave_1: entered promiscuous mode [ 81.046493][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.046546][ T4724] ipvlan1: entered promiscuous mode [ 81.057180][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.060878][ T4724] ipvlan1: left promiscuous mode [ 81.073216][ T4724] bond0: left promiscuous mode [ 81.078007][ T4724] bond_slave_0: left promiscuous mode [ 81.083638][ T4724] bond_slave_1: left promiscuous mode [ 81.242993][ T4726] loop5: p1 p2 p3 p4 [ 81.247316][ T4726] loop5: p1 size 196608 extends beyond EOD, truncated [ 81.255596][ T4726] loop5: p2 start 164919041 is beyond EOD, truncated [ 81.262340][ T4726] loop5: p3 size 66846464 extends beyond EOD, truncated [ 81.270037][ T4726] loop5: p4 size 37048832 extends beyond EOD, truncated [ 81.279553][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 81.279566][ T29] audit: type=1400 audit(1766007491.636:3718): avc: denied { read write } for pid=4725 comm="syz.5.308" name="loop5p4" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.309051][ T29] audit: type=1400 audit(1766007491.636:3719): avc: denied { open } for pid=4725 comm="syz.5.308" path="/dev/loop5p4" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.323356][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b29e400: rx timeout, send abort [ 81.340488][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811b29e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.386986][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 81.399462][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 81.417460][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 81.455551][ T4736] netlink: 'syz.5.313': attribute type 1 has an invalid length. [ 81.492886][ T29] audit: type=1400 audit(1766007491.846:3720): avc: denied { write } for pid=4739 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 81.495066][ T4740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4740 comm=syz.5.314 [ 81.527195][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.314'. [ 81.536781][ T29] audit: type=1400 audit(1766007491.896:3721): avc: denied { getopt } for pid=4739 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.583227][ T29] audit: type=1326 audit(1766007491.946:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153804f749 code=0x7ffc0000 [ 81.606706][ T29] audit: type=1326 audit(1766007491.946:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153804f749 code=0x7ffc0000 [ 81.638401][ T29] audit: type=1326 audit(1766007491.966:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f153804f749 code=0x7ffc0000 [ 81.662209][ T29] audit: type=1326 audit(1766007491.966:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153804f749 code=0x7ffc0000 [ 81.685580][ T29] audit: type=1326 audit(1766007491.976:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153804f749 code=0x7ffc0000 [ 81.708927][ T29] audit: type=1326 audit(1766007491.976:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.5.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153804f749 code=0x7ffc0000 [ 81.772275][ T4756] FAULT_INJECTION: forcing a failure. [ 81.772275][ T4756] name failslab, interval 1, probability 0, space 0, times 0 [ 81.785038][ T4756] CPU: 1 UID: 0 PID: 4756 Comm: syz.3.317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.785078][ T4756] Tainted: [W]=WARN [ 81.785087][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.785104][ T4756] Call Trace: [ 81.785119][ T4756] [ 81.785127][ T4756] __dump_stack+0x1d/0x30 [ 81.785173][ T4756] dump_stack_lvl+0xe8/0x140 [ 81.785197][ T4756] dump_stack+0x15/0x1b [ 81.785235][ T4756] should_fail_ex+0x265/0x280 [ 81.785309][ T4756] should_failslab+0x8c/0xb0 [ 81.785339][ T4756] __kmalloc_cache_noprof+0x65/0x4c0 [ 81.785394][ T4756] ? rxrpc_lookup_local+0x2a3/0xc70 [ 81.785466][ T4756] rxrpc_lookup_local+0x2a3/0xc70 [ 81.785494][ T4756] ? _raw_spin_lock_bh+0x56/0xb0 [ 81.785522][ T4756] ? _raw_spin_unlock_bh+0x36/0x40 [ 81.785548][ T4756] ? lock_sock_nested+0x112/0x140 [ 81.785597][ T4756] rxrpc_sendmsg+0x2f3/0x590 [ 81.785623][ T4756] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 81.785649][ T4756] __sock_sendmsg+0x145/0x180 [ 81.785676][ T4756] ____sys_sendmsg+0x31e/0x4a0 [ 81.785792][ T4756] ___sys_sendmsg+0x17b/0x1d0 [ 81.785853][ T4756] __x64_sys_sendmsg+0xd4/0x160 [ 81.785968][ T4756] x64_sys_call+0x17ba/0x3000 [ 81.786000][ T4756] do_syscall_64+0xd8/0x2c0 [ 81.786040][ T4756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.786060][ T4756] RIP: 0033:0x7f1988a8f749 [ 81.786074][ T4756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.786117][ T4756] RSP: 002b:00007f19874ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.786135][ T4756] RAX: ffffffffffffffda RBX: 00007f1988ce5fa0 RCX: 00007f1988a8f749 [ 81.786147][ T4756] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 81.786158][ T4756] RBP: 00007f19874ef090 R08: 0000000000000000 R09: 0000000000000000 [ 81.786172][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.786187][ T4756] R13: 00007f1988ce6038 R14: 00007f1988ce5fa0 R15: 00007ffc08d29c38 [ 81.786211][ T4756] [ 82.030349][ T4770] netlink: 'syz.3.319': attribute type 29 has an invalid length. [ 82.048996][ T4770] netlink: 'syz.3.319': attribute type 7 has an invalid length. [ 82.056850][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 82.190093][ T4787] set_capacity_and_notify: 3 callbacks suppressed [ 82.190114][ T4787] loop0: detected capacity change from 0 to 1024 [ 82.196644][ T4789] loop1: detected capacity change from 0 to 512 [ 82.211403][ T4789] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.323: corrupted in-inode xattr: invalid ea_ino [ 82.211688][ T4787] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 82.241774][ T4787] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 82.257327][ T4787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.267963][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 82.279591][ T4787] bond1 (unregistering): Released all slaves [ 82.289995][ T4789] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.323: couldn't read orphan inode 15 (err -117) [ 82.318090][ T4789] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6318: inode #18: comm syz.1.323: bad extra_isize 6 (inode size 256) [ 82.495744][ T4808] loop3: detected capacity change from 0 to 128 [ 82.505790][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.328'. [ 82.522469][ T4813] hsr0: entered promiscuous mode [ 82.803750][ T4830] FAULT_INJECTION: forcing a failure. [ 82.803750][ T4830] name failslab, interval 1, probability 0, space 0, times 0 [ 82.816491][ T4830] CPU: 0 UID: 0 PID: 4830 Comm: syz.0.334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.816542][ T4830] Tainted: [W]=WARN [ 82.816548][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.816564][ T4830] Call Trace: [ 82.816571][ T4830] [ 82.816580][ T4830] __dump_stack+0x1d/0x30 [ 82.816605][ T4830] dump_stack_lvl+0xe8/0x140 [ 82.816634][ T4830] dump_stack+0x15/0x1b [ 82.816654][ T4830] should_fail_ex+0x265/0x280 [ 82.816726][ T4830] should_failslab+0x8c/0xb0 [ 82.816751][ T4830] kmem_cache_alloc_noprof+0x69/0x4b0 [ 82.816774][ T4830] ? security_file_alloc+0x32/0x100 [ 82.816834][ T4830] security_file_alloc+0x32/0x100 [ 82.816860][ T4830] init_file+0x5c/0x1c0 [ 82.816928][ T4830] alloc_empty_file+0x8b/0x200 [ 82.816960][ T4830] path_openat+0x63/0x23b0 [ 82.817026][ T4830] ? perf_swevent_event+0x40d/0x450 [ 82.817064][ T4830] ? perf_bp_event+0x1a7/0x1e0 [ 82.817108][ T4830] do_filp_open+0x109/0x230 [ 82.817155][ T4830] do_sys_openat2+0xa6/0x150 [ 82.817262][ T4830] __x64_sys_openat+0xf2/0x120 [ 82.817293][ T4830] x64_sys_call+0x2b07/0x3000 [ 82.817322][ T4830] do_syscall_64+0xd8/0x2c0 [ 82.817367][ T4830] ? exc_debug_user+0x136/0x220 [ 82.817471][ T4830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.817503][ T4830] RIP: 0033:0x7f8064a8df90 [ 82.817518][ T4830] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 82.817604][ T4830] RSP: 002b:00007f80634eef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 82.817651][ T4830] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8064a8df90 [ 82.817664][ T4830] RDX: 0000000000000002 RSI: 00007f80634eefa0 RDI: 00000000ffffff9c [ 82.817679][ T4830] RBP: 00007f80634eefa0 R08: 0000000000000000 R09: 0000000000000000 [ 82.817695][ T4830] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 82.817711][ T4830] R13: 00007f8064ce6038 R14: 00007f8064ce5fa0 R15: 00007fff897261b8 [ 82.817747][ T4830] [ 83.035623][ T4828] capability: warning: `syz.1.332' uses 32-bit capabilities (legacy support in use) [ 83.036680][ T4831] loop0: detected capacity change from 0 to 1024 [ 83.053345][ T4831] EXT4-fs: inline encryption not supported [ 83.223995][ T4843] loop3: detected capacity change from 0 to 512 [ 83.233748][ T4843] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.339: corrupted in-inode xattr: invalid ea_ino [ 83.247802][ T4843] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.339: couldn't read orphan inode 15 (err -117) [ 83.278955][ T4843] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6318: inode #18: comm syz.3.339: bad extra_isize 6 (inode size 256) [ 83.297169][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.341'. [ 83.310232][ T4849] pim6reg: entered allmulticast mode [ 83.321834][ T4849] loop5: detected capacity change from 0 to 1024 [ 83.330377][ T4849] EXT4-fs: Mount option(s) incompatible with ext2 [ 83.421373][ T4849] pim6reg: left allmulticast mode [ 83.501305][ T4866] capability: warning: `syz.5.345' uses deprecated v2 capabilities in a way that may be insecure [ 83.569283][ T4868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.346'. [ 83.610367][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 83.632266][ T4872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.347'. [ 83.785093][ T4883] lo speed is unknown, defaulting to 1000 [ 83.801063][ T4885] lo speed is unknown, defaulting to 1000 [ 83.935360][ T4880] netlink: 'syz.1.349': attribute type 3 has an invalid length. [ 83.943074][ T4880] netlink: 3 bytes leftover after parsing attributes in process `syz.1.349'. [ 84.023676][ T4895] loop3: detected capacity change from 0 to 512 [ 84.038174][ T4895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.047025][ T4895] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.058449][ T4897] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 84.079126][ T4895] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.353: Allocating blocks 41-42 which overlap fs metadata [ 84.085700][ T4900] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 84.100759][ T4895] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.353: Allocating blocks 41-42 which overlap fs metadata [ 84.122589][ T4895] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.353: Failed to acquire dquot type 1 [ 84.146156][ T4895] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.162451][ T4895] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.353: corrupted inode contents [ 84.175016][ T4895] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.353: mark_inode_dirty error [ 84.186653][ T4895] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.353: corrupted inode contents [ 84.198754][ T4895] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.353: mark_inode_dirty error [ 84.210264][ T4895] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.353: corrupted inode contents [ 84.222511][ T4895] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 84.231620][ T4905] netlink: 36 bytes leftover after parsing attributes in process `syz.5.356'. [ 84.247887][ T4895] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.353: corrupted inode contents [ 84.251092][ T4905] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 84.281414][ T4895] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.353: mark_inode_dirty error [ 84.294011][ T4895] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 84.303233][ T4895] EXT4-fs (loop3): 1 truncate cleaned up [ 84.404868][ T4919] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 84.436185][ T4919] loop1: detected capacity change from 0 to 512 [ 84.448337][ T4920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.362'. [ 84.458708][ T4919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.477149][ T4926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4926 comm=syz.3.363 [ 84.490437][ T4919] EXT4-fs error (device loop1): __ext4_fill_super:5553: inode #2: comm syz.1.361: casefold flag without casefold feature [ 84.506336][ T4919] EXT4-fs (loop1): get root inode failed [ 84.512111][ T4919] EXT4-fs (loop1): mount failed [ 84.518051][ T4926] loop3: detected capacity change from 0 to 1024 [ 84.534646][ T4926] EXT4-fs: inline encryption not supported [ 84.552707][ T4926] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 84.563693][ T4926] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 84.583030][ T4926] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.593268][ T4926] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 84.602006][ T4926] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 84.610134][ T4931] loop1: detected capacity change from 0 to 1024 [ 84.643003][ T4931] EXT4-fs: Ignoring removed i_version option [ 84.662692][ T4931] EXT4-fs: Ignoring removed bh option [ 84.683171][ T4931] EXT4-fs: Ignoring removed bh option [ 85.270701][ T4965] FAULT_INJECTION: forcing a failure. [ 85.270701][ T4965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.283835][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: syz.4.373 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.283907][ T4965] Tainted: [W]=WARN [ 85.283917][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.283934][ T4965] Call Trace: [ 85.283943][ T4965] [ 85.283953][ T4965] __dump_stack+0x1d/0x30 [ 85.283982][ T4965] dump_stack_lvl+0xe8/0x140 [ 85.284005][ T4965] dump_stack+0x15/0x1b [ 85.284046][ T4965] should_fail_ex+0x265/0x280 [ 85.284091][ T4965] should_fail+0xb/0x20 [ 85.284146][ T4965] should_fail_usercopy+0x1a/0x20 [ 85.284177][ T4965] _copy_from_user+0x1c/0xb0 [ 85.284266][ T4965] ___sys_sendmsg+0xc1/0x1d0 [ 85.284314][ T4965] __x64_sys_sendmsg+0xd4/0x160 [ 85.284411][ T4965] x64_sys_call+0x17ba/0x3000 [ 85.284438][ T4965] do_syscall_64+0xd8/0x2c0 [ 85.284482][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.284544][ T4965] RIP: 0033:0x7f0f3d21f749 [ 85.284563][ T4965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.284635][ T4965] RSP: 002b:00007f0f3bc7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.284658][ T4965] RAX: ffffffffffffffda RBX: 00007f0f3d475fa0 RCX: 00007f0f3d21f749 [ 85.284674][ T4965] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 85.284690][ T4965] RBP: 00007f0f3bc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.284706][ T4965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.284719][ T4965] R13: 00007f0f3d476038 R14: 00007f0f3d475fa0 R15: 00007ffff44ffc48 [ 85.284739][ T4965] [ 85.936024][ T4982] netlink: 'syz.3.378': attribute type 6 has an invalid length. [ 86.169255][ T4993] veth0_to_team: entered promiscuous mode [ 86.216309][ T4995] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57114 sclass=netlink_xfrm_socket pid=4995 comm=syz.1.383 [ 86.334508][ T4998] lo speed is unknown, defaulting to 1000 [ 86.489562][ T29] kauditd_printk_skb: 1113 callbacks suppressed [ 86.489578][ T29] audit: type=1326 audit(1766007496.846:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.630352][ T29] audit: type=1326 audit(1766007496.886:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.653825][ T29] audit: type=1326 audit(1766007496.886:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.677196][ T29] audit: type=1326 audit(1766007496.886:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.701009][ T29] audit: type=1326 audit(1766007496.886:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.709806][ T5015] FAULT_INJECTION: forcing a failure. [ 86.709806][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 86.724565][ T29] audit: type=1326 audit(1766007496.886:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.737079][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.737116][ T5015] Tainted: [W]=WARN [ 86.737124][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.737179][ T5015] Call Trace: [ 86.737190][ T5015] [ 86.737201][ T5015] __dump_stack+0x1d/0x30 [ 86.737311][ T5015] dump_stack_lvl+0xe8/0x140 [ 86.737343][ T5015] dump_stack+0x15/0x1b [ 86.737366][ T5015] should_fail_ex+0x265/0x280 [ 86.737391][ T5015] should_failslab+0x8c/0xb0 [ 86.737421][ T5015] __kmalloc_cache_noprof+0x65/0x4c0 [ 86.737456][ T5015] ? sctp_association_new+0x71/0x1190 [ 86.737575][ T5015] sctp_association_new+0x71/0x1190 [ 86.737638][ T5015] ? sctp_has_association+0x7a/0xa0 [ 86.737758][ T5015] ? sctp_v4_scope+0x140/0x150 [ 86.737798][ T5015] sctp_connect_new_asoc+0x1a8/0x3a0 [ 86.737866][ T5015] sctp_sendmsg+0xf10/0x18d0 [ 86.737910][ T5015] ? selinux_socket_sendmsg+0x121/0x1b0 [ 86.737957][ T5015] ? __pfx_sctp_sendmsg+0x10/0x10 [ 86.738056][ T5015] inet_sendmsg+0xc5/0xd0 [ 86.738165][ T5015] __sock_sendmsg+0x102/0x180 [ 86.738192][ T5015] ____sys_sendmsg+0x31e/0x4a0 [ 86.738242][ T5015] ___sys_sendmsg+0x17b/0x1d0 [ 86.738303][ T5015] __x64_sys_sendmsg+0xd4/0x160 [ 86.738349][ T5015] x64_sys_call+0x17ba/0x3000 [ 86.738427][ T5015] do_syscall_64+0xd8/0x2c0 [ 86.738475][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.738525][ T5015] RIP: 0033:0x7fc8b55cf749 [ 86.738547][ T5015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.738573][ T5015] RSP: 002b:00007fc8b4037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.738601][ T5015] RAX: ffffffffffffffda RBX: 00007fc8b5825fa0 RCX: 00007fc8b55cf749 [ 86.738620][ T5015] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 86.738639][ T5015] RBP: 00007fc8b4037090 R08: 0000000000000000 R09: 0000000000000000 [ 86.738728][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.738745][ T5015] R13: 00007fc8b5826038 R14: 00007fc8b5825fa0 R15: 00007fff5c073aa8 [ 86.738773][ T5015] [ 86.974404][ T29] audit: type=1326 audit(1766007496.886:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 86.997792][ T29] audit: type=1326 audit(1766007496.886:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 87.021377][ T29] audit: type=1326 audit(1766007496.886:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 87.044812][ T29] audit: type=1326 audit(1766007496.886:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3d21f749 code=0x7ffc0000 [ 87.069849][ T5029] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.394: corrupted in-inode xattr: invalid ea_ino [ 87.102611][ T5029] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.394: couldn't read orphan inode 15 (err -117) [ 87.140445][ T5029] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6318: inode #18: comm syz.1.394: bad extra_isize 6 (inode size 256) [ 87.306770][ T5040] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 87.393456][ T5032] lo speed is unknown, defaulting to 1000 [ 87.556134][ T5055] set_capacity_and_notify: 5 callbacks suppressed [ 87.556154][ T5055] loop1: detected capacity change from 0 to 512 [ 87.575648][ T5056] lo speed is unknown, defaulting to 1000 [ 87.594207][ T5055] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 87.611839][ T5055] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.624407][ T5055] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.405: corrupted inode contents [ 87.668577][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 87.702102][ T5055] EXT4-fs (loop1): 1 truncate cleaned up [ 87.707932][ T2785] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.718545][ T2785] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.764971][ T2785] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 87.873077][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 88.051633][ T5077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.410'. [ 88.254422][ T5081] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 88.363463][ T5083] loop4: detected capacity change from 0 to 512 [ 88.652693][ T5083] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.412: inode has both inline data and extents flags [ 88.667014][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 88.675966][ T5091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.414'. [ 88.712829][ T5083] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.412: couldn't read orphan inode 15 (err -117) [ 88.749267][ T5091] bridge1: entered promiscuous mode [ 88.754611][ T5091] bridge1: entered allmulticast mode [ 88.815189][ T5095] loop5: detected capacity change from 0 to 512 [ 88.832433][ T5095] EXT4-fs: test_dummy_encryption option not supported [ 88.864979][ T5097] loop0: detected capacity change from 0 to 128 [ 89.077145][ T5109] loop7: detected capacity change from 0 to 7 [ 89.090120][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.099746][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.108206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.117861][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.126120][ T5109] loop7: unable to read partition table [ 89.140767][ T5109] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 89.143719][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.163878][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.172241][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.182149][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.214333][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.223989][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.306264][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.315880][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.339260][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.348916][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 89.681183][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.422'. [ 89.977262][ T5130] loop1: detected capacity change from 0 to 512 [ 90.018280][ T5130] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 90.058387][ T5130] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.428: attempt to clear invalid blocks 2 len 1 [ 90.083267][ T5130] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 90.099782][ T5135] loop3: detected capacity change from 0 to 128 [ 90.109077][ T5130] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.428: invalid indirect mapped block 1819239214 (level 0) [ 90.124432][ T5130] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.428: invalid indirect mapped block 1819239214 (level 1) [ 90.139087][ T5130] EXT4-fs (loop1): 1 truncate cleaned up [ 90.174307][ T5128] loop0: detected capacity change from 0 to 128 [ 90.182415][ T5128] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.261657][ T5145] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 90.415746][ T5152] loop3: detected capacity change from 0 to 512 [ 90.428957][ T5152] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.436: corrupted in-inode xattr: invalid ea_ino [ 90.443093][ T5152] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.436: couldn't read orphan inode 15 (err -117) [ 90.469339][ T5152] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6318: inode #18: comm syz.3.436: bad extra_isize 6 (inode size 256) [ 90.500052][ T5149] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 90.515508][ T5149] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 90.550902][ T5159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.437'. [ 90.618787][ T5161] loop5: detected capacity change from 0 to 1024 [ 90.626138][ T5161] EXT4-fs: test_dummy_encryption option not supported [ 90.633766][ T5163] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.439: corrupted in-inode xattr: invalid ea_ino [ 90.655803][ T5163] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.439: couldn't read orphan inode 15 (err -117) [ 90.672911][ T5161] ref_ctr_offset mismatch. inode: 0xab offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 90.711324][ T5163] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6318: inode #18: comm syz.0.439: bad extra_isize 6 (inode size 256) [ 90.879314][ T5161] bridge0: port 3(vlan2) entered blocking state [ 90.885686][ T5161] bridge0: port 3(vlan2) entered disabled state [ 90.892166][ T5161] vlan2: entered allmulticast mode [ 90.897415][ T5161] bridge0: entered allmulticast mode [ 90.914173][ T5161] vlan2: left allmulticast mode [ 90.919069][ T5161] bridge0: left allmulticast mode [ 90.944818][ T5184] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 90.963625][ T4201] Alternate GPT is invalid, using primary GPT. [ 90.969940][ T4201] loop0: p1 p2 p3 [ 90.990505][ T5185] Alternate GPT is invalid, using primary GPT. [ 90.996885][ T5185] loop0: p1 p2 p3 [ 91.013341][ T5185] tmpfs: Bad value for 'mpol' [ 91.066416][ T5189] ip6gretap0: entered promiscuous mode [ 91.072196][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 91.073025][ T5189] vlan2: entered promiscuous mode [ 91.088296][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 91.099643][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 91.206353][ T5191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.448'. [ 91.216632][ T5193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.232801][ T3424] lo speed is unknown, defaulting to 1000 [ 91.268941][ T5203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.452'. [ 91.322706][ T5203] netem: change failed [ 91.358993][ T5209] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.454: inode has both inline data and extents flags [ 91.455057][ T5209] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.454: couldn't read orphan inode 15 (err -117) [ 91.545894][ T5209] EXT4-fs mount: 40 callbacks suppressed [ 91.545912][ T5209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.604520][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 91.604556][ T29] audit: type=1326 audit(1766007501.966:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8064a8f749 code=0x0 [ 91.754810][ T29] audit: type=1400 audit(1766007502.116:5507): avc: denied { block_suspend } for pid=5229 comm="syz.4.464" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.776442][ T29] audit: type=1400 audit(1766007502.116:5508): avc: denied { module_load } for pid=5229 comm="syz.4.464" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 91.850449][ T5237] vlan2: entered allmulticast mode [ 91.855659][ T5237] batadv0: entered allmulticast mode [ 91.885613][ T29] audit: type=1400 audit(1766007502.186:5509): avc: denied { setopt } for pid=5229 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.904656][ T29] audit: type=1400 audit(1766007502.186:5510): avc: denied { write } for pid=5229 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.923681][ T29] audit: type=1400 audit(1766007502.206:5511): avc: denied { audit_read } for pid=5236 comm="syz.4.465" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.946959][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 91.956158][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 92.206150][ T5242] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 92.214222][ T5242] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.229241][ T5242] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 92.248454][ T5242] EXT4-fs (loop5): Remounting filesystem read-only [ 92.255185][ T5242] EXT4-fs (loop5): 1 truncate cleaned up [ 92.261051][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 92.271649][ T52] Quota error (device loop5): write_blk: dquota write failed [ 92.279158][ T52] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 92.289220][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 92.299804][ T52] Quota error (device loop5): write_blk: dquota write failed [ 92.307213][ T52] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 92.363436][ T52] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 92.394327][ T5251] FAULT_INJECTION: forcing a failure. [ 92.394327][ T5251] name failslab, interval 1, probability 0, space 0, times 0 [ 92.407034][ T5251] CPU: 1 UID: 0 PID: 5251 Comm: syz.4.468 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.407130][ T5251] Tainted: [W]=WARN [ 92.407137][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.407151][ T5251] Call Trace: [ 92.407160][ T5251] [ 92.407170][ T5251] __dump_stack+0x1d/0x30 [ 92.407277][ T5251] dump_stack_lvl+0xe8/0x140 [ 92.407307][ T5251] dump_stack+0x15/0x1b [ 92.407334][ T5251] should_fail_ex+0x265/0x280 [ 92.407366][ T5251] should_failslab+0x8c/0xb0 [ 92.407397][ T5251] kmem_cache_alloc_noprof+0x69/0x4b0 [ 92.407500][ T5251] ? skb_clone+0x151/0x1f0 [ 92.407531][ T5251] skb_clone+0x151/0x1f0 [ 92.407568][ T5251] __netlink_deliver_tap+0x2c9/0x500 [ 92.407617][ T5251] netlink_unicast+0x66b/0x690 [ 92.407655][ T5251] netlink_sendmsg+0x58b/0x6b0 [ 92.407730][ T5251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.407812][ T5251] __sock_sendmsg+0x145/0x180 [ 92.407851][ T5251] ____sys_sendmsg+0x31e/0x4a0 [ 92.407882][ T5251] ___sys_sendmsg+0x17b/0x1d0 [ 92.407997][ T5251] __x64_sys_sendmsg+0xd4/0x160 [ 92.408037][ T5251] x64_sys_call+0x17ba/0x3000 [ 92.408061][ T5251] do_syscall_64+0xd8/0x2c0 [ 92.408130][ T5251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.408215][ T5251] RIP: 0033:0x7f0f3d21f749 [ 92.408241][ T5251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.408288][ T5251] RSP: 002b:00007f0f3bc7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.408310][ T5251] RAX: ffffffffffffffda RBX: 00007f0f3d475fa0 RCX: 00007f0f3d21f749 [ 92.408346][ T5251] RDX: 0000000020008800 RSI: 0000200000001100 RDI: 0000000000000003 [ 92.408360][ T5251] RBP: 00007f0f3bc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.408372][ T5251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.408388][ T5251] R13: 00007f0f3d476038 R14: 00007f0f3d475fa0 R15: 00007ffff44ffc48 [ 92.408413][ T5251] [ 92.409201][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.517714][ T5242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.630175][ T5242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.672208][ T5235] lo speed is unknown, defaulting to 1000 [ 92.871002][ T5266] bridge_slave_0: left allmulticast mode [ 92.877154][ T5266] bridge_slave_0: left promiscuous mode [ 92.883082][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.900643][ T5260] set_capacity_and_notify: 5 callbacks suppressed [ 92.900662][ T5260] loop3: detected capacity change from 0 to 764 [ 92.915131][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.916114][ T5266] bridge_slave_1: left allmulticast mode [ 92.929353][ T5266] bridge_slave_1: left promiscuous mode [ 92.935036][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.956984][ T5266] bond0: (slave bond_slave_0): Releasing backup interface [ 92.982909][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.991421][ T5266] bond0: (slave bond_slave_1): Releasing backup interface [ 93.022356][ T5266] team0: Port device team_slave_0 removed [ 93.028523][ T5260] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 93.039826][ T5271] loop5: detected capacity change from 0 to 1024 [ 93.041260][ T5266] team0: Port device team_slave_1 removed [ 93.196401][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.198272][ T5271] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 93.203891][ T5266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.232902][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.240410][ T5266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.448355][ T5266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.483560][ T5271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.541765][ T5273] lo speed is unknown, defaulting to 1000 [ 93.673407][ T5278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.475'. [ 93.686538][ T5271] netdevsim netdevsim5: Direct firmware load for [ 93.686538][ T5271] failed with error -2 [ 93.803293][ T5281] loop1: detected capacity change from 0 to 512 [ 93.807329][ T5284] loop0: detected capacity change from 0 to 512 [ 93.816612][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.836754][ T5281] EXT4-fs (loop1): 1 orphan inode deleted [ 93.862674][ T3396] IPVS: starting estimator thread 0... [ 93.863339][ T5284] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.478: inode has both inline data and extents flags [ 93.903196][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.936245][ T5281] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.953443][ T5284] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.478: couldn't read orphan inode 15 (err -117) [ 93.973299][ T5292] IPVS: using max 2160 ests per chain, 108000 per kthread [ 93.974159][ T5284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.015907][ T5297] serio: Serial port ptm1 [ 94.028529][ T5296] loop5: detected capacity change from 0 to 2364 [ 94.046303][ T5296] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.480' sets config #1 [ 94.077317][ T5285] loop3: detected capacity change from 0 to 1024 [ 94.095401][ T5285] EXT4-fs: Ignoring removed orlov option [ 94.101297][ T5285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.114789][ T5302] all: renamed from lo (while UP) [ 94.133972][ T5285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.214553][ T5312] loop5: detected capacity change from 0 to 128 [ 94.242250][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.262640][ T31] bio_check_eod: 3 callbacks suppressed [ 94.262658][ T31] kworker/u8:1: attempt to access beyond end of device [ 94.262658][ T31] loop5: rw=1, sector=145, nr_sectors = 25 limit=128 [ 94.271122][ T5314] loop4: detected capacity change from 0 to 1024 [ 94.298633][ T5314] EXT4-fs: Ignoring removed i_version option [ 94.304855][ T5316] loop3: detected capacity change from 0 to 2048 [ 94.305468][ T5314] EXT4-fs: Ignoring removed bh option [ 94.322480][ T5318] loop5: detected capacity change from 0 to 1024 [ 94.324488][ T5314] EXT4-fs: Ignoring removed bh option [ 94.335788][ T5318] EXT4-fs: Ignoring removed i_version option [ 94.341921][ T5318] EXT4-fs: Ignoring removed bh option [ 94.349065][ T5318] EXT4-fs: Ignoring removed bh option [ 94.350320][ T5314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.376141][ T5316] Alternate GPT is invalid, using primary GPT. [ 94.382451][ T5316] loop3: p1 p2 p3 [ 94.387673][ T5318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.403460][ T3005] Alternate GPT is invalid, using primary GPT. [ 94.409780][ T3005] loop3: p1 p2 p3 [ 94.498534][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.509378][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 94.519766][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 94.552599][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 94.563513][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.576108][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 94.615230][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.660711][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.758266][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.785406][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.841559][ T5341] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 94.905311][ T5333] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 94.913161][ T5333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 94.930682][ T5334] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 94.938671][ T5334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 94.948627][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.955124][ T5334] ipvlan2: entered promiscuous mode [ 94.963938][ T5334] bridge0: port 1(ipvlan2) entered blocking state [ 94.970416][ T5334] bridge0: port 1(ipvlan2) entered disabled state [ 94.984200][ T5343] tmpfs: Bad value for 'mpol' [ 94.997034][ T5334] ipvlan2: entered allmulticast mode [ 95.002397][ T5334] bridge0: entered allmulticast mode [ 95.008702][ T5334] ipvlan2: left allmulticast mode [ 95.014339][ T5334] bridge0: left allmulticast mode [ 95.029736][ T5333] ipvlan2: entered promiscuous mode [ 95.036099][ T5333] bridge0: port 1(ipvlan2) entered blocking state [ 95.042757][ T5333] bridge0: port 1(ipvlan2) entered disabled state [ 95.050855][ T5333] ipvlan2: entered allmulticast mode [ 95.056277][ T5333] bridge0: entered allmulticast mode [ 95.063521][ T5333] ipvlan2: left allmulticast mode [ 95.068578][ T5333] bridge0: left allmulticast mode [ 95.103829][ T5345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.113307][ T5345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.117007][ T5353] bridge_slave_0: left allmulticast mode [ 95.126851][ T5353] bridge_slave_0: left promiscuous mode [ 95.132642][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.147073][ T5353] bridge_slave_1: left allmulticast mode [ 95.152792][ T5353] bridge_slave_1: left promiscuous mode [ 95.158688][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.169931][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.179706][ T5353] bond0: (slave bond_slave_0): Releasing backup interface [ 95.214591][ T5359] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 95.224464][ T5353] bond0: (slave bond_slave_1): Releasing backup interface [ 95.235047][ T5353] team_slave_0: left promiscuous mode [ 95.247307][ T5353] team0: Port device team_slave_0 removed [ 95.267654][ T5353] team_slave_1: left promiscuous mode [ 95.276631][ T5353] team0: Port device team_slave_1 removed [ 95.284275][ T5353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.291782][ T5353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.302214][ T5353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.309685][ T5353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.320204][ T5353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.400155][ T5365] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.500: corrupted in-inode xattr: invalid ea_ino [ 95.414741][ T5365] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.500: couldn't read orphan inode 15 (err -117) [ 95.428162][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.444406][ T5365] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6318: inode #18: comm syz.4.500: bad extra_isize 6 (inode size 256) [ 95.488348][ T5372] EXT4-fs: Ignoring removed i_version option [ 95.503945][ T5372] EXT4-fs: Ignoring removed bh option [ 95.509645][ T5372] EXT4-fs: Ignoring removed bh option [ 95.540788][ T5372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.603035][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 95.614126][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.746911][ T5391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.509'. [ 95.880435][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.930454][ T5406] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 95.959708][ T5408] EXT4-fs: dax option not supported [ 96.028844][ T5413] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.517: corrupted in-inode xattr: invalid ea_ino [ 96.061769][ T5413] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.517: couldn't read orphan inode 15 (err -117) [ 96.074275][ T5419] bridge0: entered promiscuous mode [ 96.083109][ T5413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.084043][ T5419] bridge0: port 1(vlan2) entered blocking state [ 96.102073][ T5419] bridge0: port 1(vlan2) entered disabled state [ 96.108703][ T5419] vlan2: entered allmulticast mode [ 96.111330][ T5413] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6318: inode #18: comm syz.0.517: bad extra_isize 6 (inode size 256) [ 96.113919][ T5419] bridge0: entered allmulticast mode [ 96.141258][ T5419] vlan2: left allmulticast mode [ 96.146247][ T5419] bridge0: left allmulticast mode [ 96.148811][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 96.160272][ T5419] bridge0: left promiscuous mode [ 96.187216][ T5424] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.202173][ T5424] journal_path: Non-blockdev passed as './bus' [ 96.208454][ T5424] EXT4-fs: error: could not find journal device path [ 96.265192][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.316038][ T5432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.338638][ T5440] EXT4-fs: Ignoring removed i_version option [ 96.364917][ T5441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.368679][ T5440] EXT4-fs: Ignoring removed bh option [ 96.379259][ T5440] EXT4-fs: Ignoring removed bh option [ 96.397112][ T5439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.413902][ T5440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.414110][ T5441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.436802][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.589112][ T5451] syz.3.530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.599912][ T5451] 9p: Bad value for 'source' [ 96.636836][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 96.636849][ T29] audit: type=1400 audit(1766007506.996:6480): avc: denied { read } for pid=5452 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.688486][ T29] audit: type=1400 audit(1766007507.046:6481): avc: denied { write } for pid=5452 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.709324][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.867371][ T29] audit: type=1326 audit(1766007507.226:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 96.891104][ T29] audit: type=1326 audit(1766007507.226:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 96.914650][ T29] audit: type=1326 audit(1766007507.226:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 96.938391][ T29] audit: type=1326 audit(1766007507.226:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 96.961942][ T29] audit: type=1326 audit(1766007507.226:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 96.985303][ T29] audit: type=1326 audit(1766007507.226:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 97.008678][ T29] audit: type=1326 audit(1766007507.226:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 97.032073][ T29] audit: type=1326 audit(1766007507.226:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.0.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8064a8f749 code=0x7ffc0000 [ 97.059116][ T5469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 97.127376][ T5473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.539'. [ 97.160788][ T5477] sch_tbf: peakrate 146 is lower than or equals to rate 3221225473 ! [ 97.179061][ T5479] netlink: 232 bytes leftover after parsing attributes in process `syz.3.541'. [ 97.188860][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 97.244218][ T5483] EXT4-fs: Ignoring removed i_version option [ 97.255136][ T5484] FAULT_INJECTION: forcing a failure. [ 97.255136][ T5484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.268298][ T5484] CPU: 1 UID: 0 PID: 5484 Comm: syz.3.542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.268337][ T5484] Tainted: [W]=WARN [ 97.268346][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.268361][ T5484] Call Trace: [ 97.268368][ T5484] [ 97.268377][ T5484] __dump_stack+0x1d/0x30 [ 97.268433][ T5484] dump_stack_lvl+0xe8/0x140 [ 97.268543][ T5484] dump_stack+0x15/0x1b [ 97.268638][ T5484] should_fail_ex+0x265/0x280 [ 97.268664][ T5484] should_fail+0xb/0x20 [ 97.268683][ T5483] EXT4-fs: Ignoring removed bh option [ 97.268765][ T5484] should_fail_usercopy+0x1a/0x20 [ 97.268807][ T5484] _copy_from_user+0x1c/0xb0 [ 97.268848][ T5484] bpf_test_init+0xb9/0x140 [ 97.268922][ T5484] bpf_prog_test_run_skb+0x2b6/0xf50 [ 97.269017][ T5484] ? __rcu_read_unlock+0x4f/0x70 [ 97.269049][ T5484] ? __fget_files+0x184/0x1c0 [ 97.269088][ T5484] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 97.269207][ T5484] bpf_prog_test_run+0x22a/0x390 [ 97.269311][ T5484] __sys_bpf+0x4c0/0x7c0 [ 97.269354][ T5484] __x64_sys_bpf+0x41/0x50 [ 97.269402][ T5484] x64_sys_call+0x28e1/0x3000 [ 97.269480][ T5484] do_syscall_64+0xd8/0x2c0 [ 97.269532][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.269565][ T5484] RIP: 0033:0x7f1988a8f749 [ 97.269618][ T5484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.269644][ T5484] RSP: 002b:00007f19874ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.269672][ T5484] RAX: ffffffffffffffda RBX: 00007f1988ce5fa0 RCX: 00007f1988a8f749 [ 97.269696][ T5484] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 97.269721][ T5484] RBP: 00007f19874ef090 R08: 0000000000000000 R09: 0000000000000000 [ 97.269739][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.269757][ T5484] R13: 00007f1988ce6038 R14: 00007f1988ce5fa0 R15: 00007ffc08d29c38 [ 97.269787][ T5484] [ 97.408770][ T5488] 9p: Could not find request transport: rdm [ 97.433876][ T5483] EXT4-fs: Ignoring removed bh option [ 97.525927][ T5483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.757447][ T5510] geneve2: entered promiscuous mode [ 97.762857][ T5510] geneve2: entered allmulticast mode [ 97.809468][ T5515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.867142][ T5515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.885125][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.906159][ T5515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.939985][ T5520] netlink: 'syz.5.554': attribute type 1 has an invalid length. [ 97.965918][ T5515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.006638][ T5525] batadv1: entered promiscuous mode [ 98.012990][ T5525] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.044728][ T5525] bridge0: port 3(batadv1) entered blocking state [ 98.051239][ T5525] bridge0: port 3(batadv1) entered disabled state [ 98.058220][ T5525] batadv1: entered allmulticast mode [ 98.064680][ T5525] bridge0: port 3(batadv1) entered blocking state [ 98.071191][ T5525] bridge0: port 3(batadv1) entered forwarding state [ 98.093628][ T911] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.115622][ T5245] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.130880][ T5528] lo speed is unknown, defaulting to 1000 [ 98.163437][ T5245] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.178595][ T5245] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.302848][ T5549] set_capacity_and_notify: 9 callbacks suppressed [ 98.302870][ T5549] loop4: detected capacity change from 0 to 2048 [ 98.344094][ T4201] Alternate GPT is invalid, using primary GPT. [ 98.350570][ T4201] loop4: p1 p2 p3 [ 98.371057][ T5549] Alternate GPT is invalid, using primary GPT. [ 98.374849][ T5550] syzkaller1: entered promiscuous mode [ 98.377537][ T5549] loop4: p1 p2 p3 [ 98.382845][ T5550] syzkaller1: entered allmulticast mode [ 98.399885][ T5555] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.411895][ T5555] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 98.454545][ T4598] udevd[4598]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 98.465510][ T4596] udevd[4596]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 98.476868][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 98.502871][ T298] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 98.512201][ T298] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 98.573605][ T5559] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.595832][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.605472][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.746055][ T5566] tipc: Started in network mode [ 98.750999][ T5566] tipc: Node identity ac14140f, cluster identity 4711 [ 98.758132][ T5566] tipc: New replicast peer: 255.255.255.255 [ 98.764434][ T5566] tipc: Enabled bearer , priority 10 [ 98.796894][ T5568] __nla_validate_parse: 1 callbacks suppressed [ 98.796909][ T5568] netlink: 256 bytes leftover after parsing attributes in process `syz.4.571'. [ 98.940835][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 99.004049][ T5577] syz.4.574 (5577) used greatest stack depth: 9056 bytes left [ 99.040970][ T5580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.575'. [ 99.109922][ T5584] loop4: detected capacity change from 0 to 8192 [ 99.181993][ T5590] loop5: detected capacity change from 0 to 512 [ 99.197250][ T5590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.235985][ T5590] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 99.265708][ T5590] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.279985][ T5590] EXT4-fs (loop5): 1 truncate cleaned up [ 99.302910][ T5590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.382044][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.410043][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 99.499282][ T5623] lo speed is unknown, defaulting to 1000 [ 99.549638][ T5629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.584710][ T5632] loop5: detected capacity change from 0 to 512 [ 99.592968][ T5634] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 99.601664][ T5632] FAT-fs (loop5): Directory bread(block 199916) failed [ 99.624313][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.649495][ T4201] ================================================================== [ 99.654831][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.657633][ T4201] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 99.666896][ T5632] FAT-fs (loop5): Directory bread(block 199917) failed [ 99.672431][ T4201] [ 99.672441][ T4201] write to 0xffff88810512b82c of 4 bytes by task 4598 on cpu 1: [ 99.689259][ T4201] shmem_symlink+0x387/0x3b0 [ 99.693887][ T4201] vfs_symlink+0x1b4/0x1f0 [ 99.698323][ T4201] do_symlinkat+0xf0/0x470 [ 99.702768][ T4201] __x64_sys_symlink+0x50/0x60 [ 99.707550][ T4201] x64_sys_call+0x24a9/0x3000 [ 99.712246][ T4201] do_syscall_64+0xd8/0x2c0 [ 99.716779][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.722692][ T4201] [ 99.725029][ T4201] read to 0xffff88810512b82c of 4 bytes by task 4201 on cpu 0: [ 99.732608][ T4201] fill_mg_cmtime+0x5b/0x260 [ 99.737220][ T4201] generic_fillattr+0x24a/0x340 [ 99.742096][ T4201] shmem_getattr+0x181/0x200 [ 99.746705][ T4201] vfs_getattr_nosec+0x146/0x1e0 [ 99.751752][ T4201] vfs_statx+0x113/0x390 [ 99.756012][ T4201] vfs_fstatat+0x115/0x170 [ 99.760458][ T4201] __se_sys_newfstatat+0x55/0x260 [ 99.765523][ T4201] __x64_sys_newfstatat+0x55/0x70 [ 99.770562][ T4201] x64_sys_call+0x111f/0x3000 [ 99.775260][ T4201] do_syscall_64+0xd8/0x2c0 [ 99.779884][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.785791][ T4201] [ 99.788119][ T4201] value changed: 0x0066db46 -> 0x01239be6 [ 99.793837][ T4201] [ 99.796166][ T4201] Reported by Kernel Concurrency Sanitizer on: [ 99.802329][ T4201] CPU: 0 UID: 0 PID: 4201 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.813200][ T4201] Tainted: [W]=WARN [ 99.817005][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.827067][ T4201] ================================================================== [ 99.836024][ T3424] tipc: Node number set to 2886997007 [ 99.849179][ T5632] FAT-fs (loop5): Directory bread(block 199918) failed [ 99.856125][ T5632] FAT-fs (loop5): Directory bread(block 199919) failed [ 99.863042][ T5632] FAT-fs (loop5): Directory bread(block 199920) failed [ 99.869933][ T5632] FAT-fs (loop5): Directory bread(block 199921) failed [ 99.876908][ T5632] FAT-fs (loop5): Directory bread(block 199922) failed [ 99.884308][ T5632] FAT-fs (loop5): Directory bread(block 199923) failed