last executing test programs: 1m37.843632341s ago: executing program 0 (id=182): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000072f2e3665139ffedcd51b58a2100000021a0d2fa00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r3], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES64=0xffffffffffffffff, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYBLOB="27ce9c24db319ea4bb4a3cef0fd1faf4f61d41ccb5e0358c9e88d9cf6f4dbb9ac6ae8af497e979f743b8eb61d8c2ed83da6078658341bca9b71103016cba6d7ad569250544c337e1b454a62dece1374588ba9ade0ff535da21db88a4fcb44a695018f6b3926e3fe902a6fe716897c6b4cfcea0a2377ff26502f4a3b01bf754632324a19cbaa831ab4711b943ab22bf1b2f1b3b798508fe9daa3afbacba5387301b2fbdeec0c5857ac7a037bfbe56fab68362b968b0e7a1b3d4b19191fb2f6f8a22b9bbed111876c26da93d29ddd7e9c8e29cda9bd5d644253e53dd82f0a075615dfed6aed0dfb4f2", @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRESDEC=0x0, @ANYRES16=r7], 0x20) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) 1m37.842394951s ago: executing program 0 (id=184): r0 = socket$kcm(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='cpuset\x00') r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) (async, rerun: 32) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f00000001c0)={0x8001, 0x8, 0x8, 0xffffaf72, 0x200, 0x61}) (async, rerun: 32) fchdir(r1) open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x400000, @mcast1, 0x5}, 0x80, 0x0}, 0x404c810) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfb}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@dax_never}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51a, &(0x7f0000001300)="$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") 1m37.779617797s ago: executing program 0 (id=186): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x174d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) getxattr(&(0x7f0000000380)='./bus\x00', &(0x7f0000000700)=@known='security.selinux\x00', &(0x7f0000000680)=""/71, 0x47) 1m37.597084795s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2d48c2, 0x5e) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2d48c2, 0x5e) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101100, 0xb5) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101100, 0xb5) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffdfff9}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r3, 0x40044591, 0x0) read(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44080) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) (async) fcntl$setlease(r5, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r7 = mq_open(&(0x7f0000000200)='\x00', 0x2, 0xc4, &(0x7f0000000240)={0x8, 0x7, 0x7, 0x5}) mq_getsetattr(r7, &(0x7f0000000280)={0x3, 0x5, 0xffffffffffffffff, 0x4}, &(0x7f00000002c0)) (async) mq_getsetattr(r7, &(0x7f0000000280)={0x3, 0x5, 0xffffffffffffffff, 0x4}, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x800728b, &(0x7f0000000540)={0x0, 0x8236, 0x800, 0x2, 0x249, 0x0, r0}) (async) r8 = io_uring_setup(0x800728b, &(0x7f0000000540)={0x0, 0x8236, 0x800, 0x2, 0x249, 0x0, r0}) close_range(r8, r8, 0x0) semget$private(0x0, 0x6, 0x0) 1m37.503733574s ago: executing program 0 (id=192): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 1m37.295116695s ago: executing program 0 (id=196): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0x6, 0x5}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (fail_nth: 1) 1m37.291533365s ago: executing program 32 (id=196): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0x6, 0x5}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (fail_nth: 1) 1m21.956029801s ago: executing program 2 (id=556): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400", @ANYRES8=r0, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0xe7, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 1m21.898342137s ago: executing program 2 (id=560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 1m21.875222809s ago: executing program 2 (id=562): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0xb, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 1m21.311251664s ago: executing program 2 (id=568): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x4982, 0x50080}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r4}, &(0x7f0000001080), &(0x7f00000001c0)=r5}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaa23b2563be083bf85aaaaaa8490ffac1414bbffffffff00080000000000000017000000000031"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x400008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) rmdir(&(0x7f0000000000)='./bus/file0\x00') 1m21.15535437s ago: executing program 2 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) (fail_nth: 1) 1m20.906046124s ago: executing program 2 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 1m20.898170735s ago: executing program 33 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 1m14.1289785s ago: executing program 5 (id=697): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000400", @ANYRES8=r0, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x6071, 0x0, 0xe7, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 1m14.097437413s ago: executing program 5 (id=701): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r0, &(0x7f0000005640)=ANY=[@ANYRES16=r2], 0x69) close(r0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[0x0, &(0x7f0000000000)='\v\x00\x00\x00']}) (fail_nth: 2) 1m13.854751417s ago: executing program 5 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0xfffffffe, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 1m13.838884488s ago: executing program 5 (id=707): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20000810) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040091}, 0x40004) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nodelalloc}, {@user_xattr}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x10}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m13.203945291s ago: executing program 5 (id=714): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4000000, 0x10000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0xfffffef9, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m12.49219645s ago: executing program 5 (id=720): r0 = getpid() sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r2 = syz_open_procfs$userns(r0, &(0x7f00000007c0)) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)={0x1f8, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x178, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xe24a}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004fcd2467f73a0909ada99ef59a24e4b51c57c9c511101fe18f14771b92f0809d6a48d7f1fff92e7a56d629c64429b17b971a283a32cd1ebcd0c65a73f5a0cef0ad5ad6487bba49c31b262167bffa124a8d422bc445d00c30ce44da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000020601040000000000000000070000000c000b00686173683a697000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007805008e5989a8a082cee68753ea62635f140003000000605f9e574bdee7b0cdd6f461ee33de9744783304abcf0dacee1be4ee79a34976ac9e3711825a82c22ee466f0b9b586dcccc8f91868c0"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfe, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x84) lgetxattr(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x64, r9, 0x100, 0x70bd29, 0xa5dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) 1m12.467485473s ago: executing program 34 (id=720): r0 = getpid() sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) r2 = syz_open_procfs$userns(r0, &(0x7f00000007c0)) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)={0x1f8, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x178, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xe24a}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004fcd2467f73a0909ada99ef59a24e4b51c57c9c511101fe18f14771b92f0809d6a48d7f1fff92e7a56d629c64429b17b971a283a32cd1ebcd0c65a73f5a0cef0ad5ad6487bba49c31b262167bffa124a8d422bc445d00c30ce44da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000020601040000000000000000070000000c000b00686173683a697000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007805008e5989a8a082cee68753ea62635f140003000000605f9e574bdee7b0cdd6f461ee33de9744783304abcf0dacee1be4ee79a34976ac9e3711825a82c22ee466f0b9b586dcccc8f91868c0"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x']) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfe, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x84) lgetxattr(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x64, r9, 0x100, 0x70bd29, 0xa5dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) creat(&(0x7f0000000140)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) 51.485849044s ago: executing program 7 (id=1211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)=""/172, 0xac) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100000008000000100000000000000a030000000392000000000010100000000900000004000013090000000f00000009000000040000000f00000051600000ff7f80000f0000000100008009000000050000000900000004000000010000000000000e0400210002000073511430000000000b010000000c00000003000006040000000100000003000000090000000700000003000000ff0f00000d000000000000120200000000000000305f3000"], &(0x7f0000000900)=""/128, 0xc0, 0x80, 0x1, 0x6}, 0x28) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') socket(0x18, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 51.467238185s ago: executing program 7 (id=1213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fee3ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x11000000, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 51.411441941s ago: executing program 7 (id=1216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 51.393353233s ago: executing program 7 (id=1218): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x4982, 0x50080}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r4}, &(0x7f0000001080), &(0x7f00000001c0)=r5}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaa23b2563be083bf85aaaaaa8490ffac1414bbffffffff00080000000000000017000000000031"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x400008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) rmdir(&(0x7f0000000000)='./bus/file0\x00') 51.133398908s ago: executing program 7 (id=1225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (fail_nth: 1) 50.866396115s ago: executing program 7 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="16000000001b0000040000000180000000000000ea67f5817e21ac035a837c550e76a9e0a403cd94af8eb886c08117151815084d2f4c8a13c344291ab46421cdfad2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2000000000}, 0x18) r7 = socket$inet(0x2, 0x2, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f00000002c0)="8790dc95cf2dc15d5b72b1672ae35d3ead00fb437322a323191ed4082e59cc31916249763b354418477aeb59440bd1a2a8e846470143d3bee2a6ea1ddfa06d563793ba187174e54322d153b0573c39bf0a6d6ae5f64e199e4d8dd25385ba2b0bba6102bd181a9d638b828d00afafc4218c468bc7"}, {&(0x7f0000000340)="4a95559d9cd8447e672f170b2840fc0cca6cbc699b2863b91d86d2625c1da8cce70247b829037e28663588300554ecdbd864747f69e389f60af3cfa54e01a6ea726434b32b73dcd181daf699b2c66152bf2e24a497d5"}], 0x1000000000000196) flock(r5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c020000160002002bbd7000fedbdf25000000163cf1b24e6503accb60ecc11d82a3d1b97f012c5a5c00000000000000000000000001fe8000000000000000000000000000aa4e2000094e2400000200008087000000533cb0ba4be48b6fcc8ff59646425388000000005f99a1fcccecf6d37cf46b3d5828aee9618ea605e711a163aa55cb41ce7578e2ebf298bdb674871bc21eeb808c8820581d9b13e6fb1e8f83a7c1aa279e420bd44373168ea17cf0c36c55058dd5372f70946e0c03b45544a996f644b0410e54635b2294d70771af7423acb1668a045a6213398f2cd7ccacd949c809696f551cbb", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"/468], 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f400", @ANYRES16=r11, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4005040}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x11}, 0x40010) creat(&(0x7f0000000500)='./file0\x00', 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 50.846510317s ago: executing program 35 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="16000000001b0000040000000180000000000000ea67f5817e21ac035a837c550e76a9e0a403cd94af8eb886c08117151815084d2f4c8a13c344291ab46421cdfad2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2000000000}, 0x18) r7 = socket$inet(0x2, 0x2, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f00000002c0)="8790dc95cf2dc15d5b72b1672ae35d3ead00fb437322a323191ed4082e59cc31916249763b354418477aeb59440bd1a2a8e846470143d3bee2a6ea1ddfa06d563793ba187174e54322d153b0573c39bf0a6d6ae5f64e199e4d8dd25385ba2b0bba6102bd181a9d638b828d00afafc4218c468bc7"}, {&(0x7f0000000340)="4a95559d9cd8447e672f170b2840fc0cca6cbc699b2863b91d86d2625c1da8cce70247b829037e28663588300554ecdbd864747f69e389f60af3cfa54e01a6ea726434b32b73dcd181daf699b2c66152bf2e24a497d5"}], 0x1000000000000196) flock(r5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c020000160002002bbd7000fedbdf25000000163cf1b24e6503accb60ecc11d82a3d1b97f012c5a5c00000000000000000000000001fe8000000000000000000000000000aa4e2000094e2400000200008087000000533cb0ba4be48b6fcc8ff59646425388000000005f99a1fcccecf6d37cf46b3d5828aee9618ea605e711a163aa55cb41ce7578e2ebf298bdb674871bc21eeb808c8820581d9b13e6fb1e8f83a7c1aa279e420bd44373168ea17cf0c36c55058dd5372f70946e0c03b45544a996f644b0410e54635b2294d70771af7423acb1668a045a6213398f2cd7ccacd949c809696f551cbb", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"/468], 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f400", @ANYRES16=r11, @ANYBLOB="020029bd0500fcdbdf250e0000001c000380080003000100010008000300000000000800010009000000b80001803c00028057ff01001b000000080004000b0000000800020008000000080004000500000008000200010000000800020006000000080001000900000008000300030000000d0001007564703a73797a30000000002c0004001400010002004e21e0000001000000000000000014000200020009f3bffad30f1909d8820e56d97a924e210a01010100000000000000003400028008000300ff0700000800030007000000080003005e88e85c0800040009000000080001001000000008000300050000000c0007800800010004000000"], 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4005040}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00042abd7000fbdbdf250200000010000680040005000800010009000000880004803c00078008000200ffffff7f08000200c3290000080003000000000008000100120000000800030001000000080004000900000008000300000100000900010073797a30000000003c000780080004000300000008000300060000000800010001000000080003000f0000000800030001000000080004000700000008000400060000000c0002800800010004000000100004800900010073797a31000000000c00078008000100f7ffffff3c0009800800010001000000080001007e05000008000200060000000800020001000080080002000500000008000200da6800000800010000080000180004801300010062726f61646361"], 0x128}, 0x1, 0x0, 0x0, 0x11}, 0x40010) creat(&(0x7f0000000500)='./file0\x00', 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 3.893232928s ago: executing program 4 (id=2102): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800"/26], &(0x7f0000000200)=""/17, 0x1a, 0x11, 0x0, 0x4, 0x10000}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet(0x2, 0x1, 0x0) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) mq_open(&(0x7f00000004c0)='\x00', 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.454851581s ago: executing program 4 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, "102dab", 0x0, 0x6c, 0x0, @rand_addr=' \x01\x00', @loopback, [], "2498a9ecba66320d"}}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 3.398262786s ago: executing program 4 (id=2112): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.177928676s ago: executing program 8 (id=2142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.149857449s ago: executing program 4 (id=2143): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000100)=ANY=[], 0x0, 0x4e, 0x0, 0x1}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet(0x2, 0x2, 0x10000b35) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x3, 0x6, @random="cea0300a1672"}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf2500000000000000a3f10000ff64010100fc0100000000000000000000000000014e2300004efd00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d52b0000007f0000010000000000000000000000000700000000000000b507000000000000490000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000ffffffffffffffff03000000000000000100000000000000faffffffffffffff0000000003000100f9ffffff2abd7000fcffffff000002060100000000000000080000004f070000"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x4000cc5) r8 = socket(0x1, 0x1, 0x2) ioctl$sock_ifreq(r8, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x1}}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="575d14d7c8bb80680000000057d0fa", @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf25090000000800090005ac0f0004000b00080037000200000005000800040000000400280004002800", @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) 2.143284969s ago: executing program 8 (id=2145): getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20040000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf25100000000c0099000700000070000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004894}, 0x4040005) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESOCT=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffefb, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) close(r4) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r6) recvfrom(r0, &(0x7f0000000900)=""/229, 0xe5, 0x20, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x80) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) 1.815511802s ago: executing program 8 (id=2149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000000080)={0x5}, 0x20) 1.392142364s ago: executing program 8 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x40, 0x7, 0x7fffffff, 0x2, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @rand_addr=0x64010101}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.388381123s ago: executing program 8 (id=2155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.293967263s ago: executing program 4 (id=2156): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000280)=0xeb6e) sched_setaffinity(0x0, 0x0, 0x0) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\t\x00'/19, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) timerfd_gettime(0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 1.287667934s ago: executing program 8 (id=2157): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3}, {0x3, 0x1, 0x0, 0x1}}], 0x8) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3}, {0x3, 0x1, 0x0, 0x1}}], 0x8) r5 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7ff, 0x81, 0x5af3, 0x5, r0, 0x79, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000001c0)='./file0\x00', r7}, 0x18) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x3c, 0x60a, @vifc_lcl_ifindex=r3, @loopback}, 0x10) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x3c, 0x60a, @vifc_lcl_ifindex=r3, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.177766564s ago: executing program 1 (id=2160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x80, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x218, 0x7, 0xea, 0x6e]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe461}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 847.812267ms ago: executing program 1 (id=2162): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200011, &(0x7f0000000540)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@auto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@noacl}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\xa9^($&'}}, {@obj_type={'obj_type', 0x3d, '&!*)\xe4'}}, {@smackfsdef={'smackfsdef', 0x3d, 'measure'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x617, &(0x7f0000001080)="$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") 845.806697ms ago: executing program 1 (id=2163): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000072f2e3665139ffedcd51b58a2100000021a0d2fa00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r3], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES64=0xffffffffffffffff, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYBLOB="27ce9c24db319ea4bb4a3cef0fd1faf4f61d41ccb5e0358c9e88d9cf6f4dbb9ac6ae8af497e979f743b8eb61d8c2ed83da6078658341bca9b71103016cba6d7ad569250544c337e1b454a62dece1374588ba9ade0ff535da21db88a4fcb44a695018f6b3926e3fe902a6fe716897c6b4cfcea0a2377ff26502f4a3b01bf754632324a19cbaa831ab4711b943ab22bf1b2f1b3b798508fe9daa3afbacba5387301b2fbdeec0c5857ac7a037bfbe56fab68362b968b0e7a1b3d4b19191fb2f6f8a22b9bbed111876c26da93d29ddd7e9c8e29cda9bd5d644253e53dd82f0a075615dfed6aed0dfb4f2", @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRESDEC=0x0, @ANYRES16=r7], 0x20) 783.236033ms ago: executing program 1 (id=2165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x541740, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000280)='tunl0\x00') write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fc_commit_start\x00', r4, 0x0, 0xffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x541740, 0x0) (async) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000280)='tunl0\x00') (async) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_fc_commit_start\x00', r4, 0x0, 0xffffffff}, 0x18) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 655.410516ms ago: executing program 3 (id=2167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 644.781857ms ago: executing program 1 (id=2168): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800"/26], &(0x7f0000000200)=""/17, 0x1a, 0x11, 0x0, 0x4, 0x10000}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet(0x2, 0x1, 0x0) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) mq_open(&(0x7f00000004c0)='\x00', 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 623.668609ms ago: executing program 3 (id=2169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pipe2(&(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019200)={&(0x7f0000019280)='percpu_free_percpu\x00', r0, 0x0, 0x444d}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000000)=0xfff, 0x5) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x1170, 0x1170, 0x118, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'vcan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@hl={{0x28}, {0x3, 0x65}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0xff000000, 0xffffff00], [0xffffffff], 'rose0\x00', 'bond0\x00', {}, {0xff}, 0x2, 0x2, 0x5, 0x68}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6, 'snmp_trap\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 586.443782ms ago: executing program 1 (id=2171): socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@remote, @empty, 0x0}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x2004}) epoll_wait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_clone(0x10800180, 0x0, 0x0, 0x0, 0x0, 0x0) 541.773257ms ago: executing program 3 (id=2172): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000072f2e3665139ffedcd51b58a2100000021a0d2fa00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r3], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES64=0xffffffffffffffff, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYBLOB="27ce9c24db319ea4bb4a3cef0fd1faf4f61d41ccb5e0358c9e88d9cf6f4dbb9ac6ae8af497e979f743b8eb61d8c2ed83da6078658341bca9b71103016cba6d7ad569250544c337e1b454a62dece1374588ba9ade0ff535da21db88a4fcb44a695018f6b3926e3fe902a6fe716897c6b4cfcea0a2377ff26502f4a3b01bf754632324a19cbaa831ab4711b943ab22bf1b2f1b3b798508fe9daa3afbacba5387301b2fbdeec0c5857ac7a037bfbe56fab68362b968b0e7a1b3d4b19191fb2f6f8a22b9bbed111876c26da93d29ddd7e9c8e29cda9bd5d644253e53dd82f0a075615dfed6aed0dfb4f2", @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRESDEC=0x0, @ANYRES16=r7], 0x20) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) 541.344487ms ago: executing program 3 (id=2173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0xc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 537.589117ms ago: executing program 6 (id=2174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x300, 0x0, 0x2004d808}, 0x0) 476.114993ms ago: executing program 3 (id=2175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'hugetlb'}]}, 0x9) tee(r1, r2, 0x10, 0x0) eventfd2(0x240, 0x80801) 474.724963ms ago: executing program 6 (id=2176): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x80000008, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x16, &(0x7f0000000200)=""/117) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 474.401714ms ago: executing program 3 (id=2177): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 396.714561ms ago: executing program 4 (id=2178): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 368.383574ms ago: executing program 6 (id=2179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000000000000070000007b"], 0x18}, 0x4080) (fail_nth: 2) 60.428524ms ago: executing program 6 (id=2180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={0x0, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f9ff0000000500"/28], 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 59.902694ms ago: executing program 6 (id=2181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 0s ago: executing program 6 (id=2182): mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x40c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0700000004000000005a98e20a31286888c801000006000000280000004a6fde244f5daf18fec0a5424f137ef65fd7f065ec2d0317d8e127dbef4be553e043d352a40f3a5d27b6557d5545f356519436c2aba14faad399bdd19eb344b9b99c3d916636de49f4ba45f5bc5706f9504348f42fe042fc10889718f7b5fa96ba05faa1d24ee63a6dcf2ac4c368eadc95e1af28f867f566e0bce792f4f80a635c4de88b8929576674b418569089eaa83d7b4d8a3dd45835d597abe28d59e26318eccea80d156dd4e4e3cbf855fea389663cbe347b0b00000049281d9b1044", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001b00)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x20000004007b1}}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe9}}, {@abort}, {@grpjquota_path={'grpjquota', 0x3d, './file1/file0'}}, {@noquota}, {@stripe={'stripe', 0x3d, 0x154}}], [{@smackfsfloor}, {@obj_user}, {@flag='sync'}, {@smackfsfloor}]}, 0x1, 0x571, &(0x7f00000022c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0f0f29bd7000fedbdf2519"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r5) socket$packet(0x11, 0x2, 0x300) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41091aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e7890200000065ccd19545b778fb470ef7c7247c631882fe3cee1ad627ad729a6854be4caee94165189cececc6ed604084f0de672a6143348dff41ef68fb47af35228b6eeb54e1afe8564aa6b18234add638dfecef8df0f90b274de0edd802c6295f55af1965e8904d0bbe9083e2264eb82d0704440bd01c8ee32d09636bef65fa39451137ba", 0xf1}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000002840)="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", 0xa98}], 0x3, 0x0, 0x0, 0x1000000}, 0x20000044) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f0000000500)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x29}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000006c0)="ebc79846bf99d36d49bc028f9459c760f2f86212b0a0ee3f013dfac18176c6ed106ee8530059f2409dff99f5c3ac8d775d8e9b767c961e4f307945cd350cfe6b36ac30654010b3bbef6b553b9995ee551f9b127ec6b10e37add8aaad2440e73dd53dcd493dffe299a4ecf5c53bb4351abdb54e5f2b94d6e5fae1ef7f47401c786e5a9fbbab8a3852a4fb568a6d1f95f6d948f412ef9566d000982bf9d9756afbb8746ce89c1cc33372349e125a0f4c2504ec5aff147b466331582f2f004b35878a2f39e059657be5e0127040443490ec8f0db022e03ac43a30c129bfe539ee7117eaf3e6a4d1c8715c3e5b0790d6c8", 0xef}], 0x1}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r9, 0x200, 0x8002}, 0xfd6f) kernel console output (not intermixed with test programs): 00000000. [ 109.022176][ T8337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.061807][ T8337] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.079922][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 109.079934][ T29] audit: type=1326 audit(2000000068.199:20170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.1.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 109.109789][ T29] audit: type=1326 audit(2000000068.199:20171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.1.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 109.133396][ T29] audit: type=1326 audit(2000000068.199:20172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.1.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 109.156810][ T29] audit: type=1326 audit(2000000068.209:20173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.1.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 109.180460][ T29] audit: type=1326 audit(2000000068.209:20174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.1.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 109.232027][ T10] IPVS: starting estimator thread 0... [ 109.236859][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.247884][ T8349] validate_nla: 2 callbacks suppressed [ 109.247898][ T8349] netlink: 'syz.3.1685': attribute type 12 has an invalid length. [ 109.300972][ T8356] loop6: detected capacity change from 0 to 512 [ 109.329761][ T8346] IPVS: using max 3168 ests per chain, 158400 per kthread [ 109.340223][ T8356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.343716][ T8367] loop3: detected capacity change from 0 to 512 [ 109.377130][ T8356] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.384628][ T8371] loop4: detected capacity change from 0 to 1024 [ 109.462756][ T8356] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1688: corrupted inode contents [ 109.475957][ T8367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.481294][ T8371] EXT4-fs: Ignoring removed nobh option [ 109.494152][ T8371] EXT4-fs: Ignoring removed bh option [ 109.500236][ T8356] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1688: mark_inode_dirty error [ 109.500269][ T8367] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.522182][ T8371] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 109.535809][ T8356] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1688: corrupted inode contents [ 109.539056][ T8367] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1691: corrupted inode contents [ 109.669884][ T8367] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1691: mark_inode_dirty error [ 109.714306][ T8367] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1691: corrupted inode contents [ 109.727254][ T8356] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1688: mark_inode_dirty error [ 109.741791][ T5756] IPVS: stop unused estimator thread 0... [ 109.753582][ T8367] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1691: mark_inode_dirty error [ 109.784337][ T8371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.858815][ T8383] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #18: comm syz.3.1691: directory missing '.' [ 109.877555][ T8385] team0 (unregistering): Port device team_slave_0 removed [ 109.906749][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.965652][ T8385] team0 (unregistering): Port device team_slave_1 removed [ 109.996401][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.014221][ T29] audit: type=1326 audit(2000000069.129:20175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.6.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 110.037855][ T29] audit: type=1326 audit(2000000069.129:20176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.6.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 110.061514][ T29] audit: type=1326 audit(2000000069.129:20177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.6.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 110.085159][ T29] audit: type=1326 audit(2000000069.129:20178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.6.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 110.108732][ T29] audit: type=1326 audit(2000000069.129:20179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.6.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 110.299271][ T8394] loop6: detected capacity change from 0 to 1024 [ 110.400830][ T8394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.426894][ T8394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1698: bg 0: block 88: padding at end of block bitmap is not set [ 110.462050][ T8403] __nla_validate_parse: 2 callbacks suppressed [ 110.462063][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1701'. [ 110.481276][ T8394] netlink: 'syz.6.1698': attribute type 10 has an invalid length. [ 110.497912][ T8394] netlink: 'syz.6.1698': attribute type 10 has an invalid length. [ 110.505791][ T8394] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1698'. [ 110.527309][ T8406] netlink: 'syz.1.1702': attribute type 12 has an invalid length. [ 110.537489][ T8394] batadv0: entered promiscuous mode [ 110.542905][ T8394] batadv0: entered allmulticast mode [ 110.550846][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.575192][ T8394] bond0: (slave batadv0): Releasing backup interface [ 110.598536][ T8394] bridge0: port 3(batadv0) entered blocking state [ 110.605235][ T8394] bridge0: port 3(batadv0) entered disabled state [ 110.610753][ T8404] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1698'. [ 110.638498][ T8416] loop4: detected capacity change from 0 to 512 [ 110.647848][ T8412] wireguard0: entered promiscuous mode [ 110.653392][ T8412] wireguard0: entered allmulticast mode [ 110.653781][ T8421] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 110.668658][ T8421] SELinux: failed to load policy [ 110.680385][ T8416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.693315][ T8416] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.693547][ T8418] netlink: 'syz.8.1714': attribute type 12 has an invalid length. [ 110.723006][ T8424] loop3: detected capacity change from 0 to 512 [ 110.730136][ T8416] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1705: corrupted inode contents [ 110.742328][ T8424] EXT4-fs: Ignoring removed oldalloc option [ 110.749987][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.759736][ T8416] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1705: mark_inode_dirty error [ 110.772864][ T8424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.786225][ T8416] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1705: corrupted inode contents [ 110.786372][ T8424] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.808614][ T8416] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1705: mark_inode_dirty error [ 110.823327][ T8416] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #18: comm syz.4.1705: directory missing '.' [ 110.835863][ T8431] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 110.842474][ T8431] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.850236][ T8431] vhci_hcd vhci_hcd.0: Device attached [ 110.861354][ T3380] kernel write not supported for file /326/clear_refs (pid: 3380 comm: kworker/0:2) [ 110.870349][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.880319][ T3380] IPVS: starting estimator thread 0... [ 110.888890][ T8437] loop4: detected capacity change from 0 to 512 [ 110.891066][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.903968][ T8437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.924483][ T8437] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.950073][ T8441] loop3: detected capacity change from 0 to 1024 [ 110.950229][ T8437] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1709: corrupted inode contents [ 110.950525][ T8441] EXT4-fs: Ignoring removed nobh option [ 110.956824][ T8437] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1709: mark_inode_dirty error [ 110.968698][ T8441] EXT4-fs: Ignoring removed bh option [ 110.974702][ T8437] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1709: corrupted inode contents [ 110.986301][ T8441] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 110.992493][ T8437] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1709: mark_inode_dirty error [ 111.003642][ T5764] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 111.013005][ T8435] IPVS: using max 2736 ests per chain, 136800 per kthread [ 111.023967][ T5764] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 111.060195][ T8441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.074870][ T8432] vhci_hcd: connection closed [ 111.075098][ T4358] vhci_hcd: stop threads [ 111.080248][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.084105][ T4358] vhci_hcd: release socket [ 111.097457][ T4358] vhci_hcd: disconnect device [ 111.103758][ T5756] IPVS: stop unused estimator thread 0... [ 111.191649][ T8450] loop4: detected capacity change from 0 to 1024 [ 111.200852][ T8450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.216191][ T8450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1712: bg 0: block 88: padding at end of block bitmap is not set [ 111.270731][ T8453] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 111.279053][ T8453] batadv0: left allmulticast mode [ 111.284183][ T8453] batadv0: left promiscuous mode [ 111.289267][ T8453] bridge0: port 3(batadv0) entered disabled state [ 111.312380][ T8453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.321236][ T8453] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 111.368780][ T8450] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 111.376711][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1712'. [ 111.501910][ T8453] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1712'. [ 111.563581][ T8450] batadv0: entered promiscuous mode [ 111.568852][ T8450] batadv0: entered allmulticast mode [ 111.580523][ T8450] bond0: (slave batadv0): Releasing backup interface [ 111.588959][ T8450] bridge0: port 3(batadv0) entered blocking state [ 111.595663][ T8450] bridge0: port 3(batadv0) entered disabled state [ 111.630936][ T8467] netlink: 'syz.6.1719': attribute type 12 has an invalid length. [ 111.663220][ T8472] wireguard0: entered promiscuous mode [ 111.668734][ T8472] wireguard0: entered allmulticast mode [ 111.710948][ T8484] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 111.728245][ T8482] loop8: detected capacity change from 0 to 512 [ 111.742552][ T8482] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.769580][ T8484] SELinux: failed to load policy [ 111.794953][ T8482] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1725: corrupted inode contents [ 111.824255][ T8482] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.1725: mark_inode_dirty error [ 111.862871][ T8482] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1725: corrupted inode contents [ 111.883463][ T8501] loop3: detected capacity change from 0 to 1024 [ 111.894223][ T8482] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1725: mark_inode_dirty error [ 111.895401][ T8503] FAULT_INJECTION: forcing a failure. [ 111.895401][ T8503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.918483][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.1.1729 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.918569][ T8503] Tainted: [W]=WARN [ 111.918576][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.918590][ T8503] Call Trace: [ 111.918597][ T8503] [ 111.918606][ T8503] __dump_stack+0x1d/0x30 [ 111.918695][ T8503] dump_stack_lvl+0xe8/0x140 [ 111.918717][ T8503] dump_stack+0x15/0x1b [ 111.918736][ T8503] should_fail_ex+0x265/0x280 [ 111.918757][ T8503] should_fail+0xb/0x20 [ 111.918788][ T8503] should_fail_usercopy+0x1a/0x20 [ 111.918810][ T8503] _copy_to_user+0x20/0xa0 [ 111.918838][ T8503] simple_read_from_buffer+0xb5/0x130 [ 111.918907][ T8503] proc_fail_nth_read+0x10e/0x150 [ 111.918984][ T8503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.919016][ T8503] vfs_read+0x1a8/0x770 [ 111.919097][ T8503] ? _raw_spin_unlock_bh+0x36/0x40 [ 111.919123][ T8503] ? __rcu_read_unlock+0x4f/0x70 [ 111.919150][ T8503] ? __fget_files+0x184/0x1c0 [ 111.919252][ T8503] ? tipc_setsockopt+0x5a2/0x620 [ 111.919279][ T8503] ksys_read+0xda/0x1a0 [ 111.919307][ T8503] __x64_sys_read+0x40/0x50 [ 111.919352][ T8503] x64_sys_call+0x27c0/0x3000 [ 111.919377][ T8503] do_syscall_64+0xd2/0x200 [ 111.919398][ T8503] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.919428][ T8503] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.919539][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.919559][ T8503] RIP: 0033:0x7fa4e8cbd9dc [ 111.919577][ T8503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.919597][ T8503] RSP: 002b:00007fa4e7727030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.919617][ T8503] RAX: ffffffffffffffda RBX: 00007fa4e8f15fa0 RCX: 00007fa4e8cbd9dc [ 111.919709][ T8503] RDX: 000000000000000f RSI: 00007fa4e77270a0 RDI: 0000000000000004 [ 111.919723][ T8503] RBP: 00007fa4e7727090 R08: 0000000000000000 R09: 0000000000000000 [ 111.919765][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.919778][ T8503] R13: 00007fa4e8f16038 R14: 00007fa4e8f15fa0 R15: 00007ffd4ffd5a08 [ 111.919799][ T8503] [ 112.135955][ T5756] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 112.145321][ T5756] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 112.148940][ T8501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1728: bg 0: block 88: padding at end of block bitmap is not set [ 112.186822][ T8508] netlink: 'syz.1.1731': attribute type 12 has an invalid length. [ 112.188942][ T8501] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 112.203449][ T8501] batadv0: left promiscuous mode [ 112.208396][ T8501] batadv0: left allmulticast mode [ 112.215010][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.217901][ T8509] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 112.223307][ T8501] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.228274][ T8509] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.244599][ T8509] vhci_hcd vhci_hcd.0: Device attached [ 112.255810][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1728'. [ 112.265020][ T8501] batadv0: entered promiscuous mode [ 112.266867][ T10] kernel write not supported for file /178/clear_refs (pid: 10 comm: kworker/0:1) [ 112.270372][ T8501] batadv0: entered allmulticast mode [ 112.285261][ T8501] bond0: (slave batadv0): Releasing backup interface [ 112.294345][ T8501] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 112.323548][ T8510] vhci_hcd: connection closed [ 112.323741][ T5756] vhci_hcd: stop threads [ 112.324517][ T8501] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1728'. [ 112.328441][ T5756] vhci_hcd: release socket [ 112.346083][ T5756] vhci_hcd: disconnect device [ 112.529306][ T8521] loop4: detected capacity change from 0 to 512 [ 112.540889][ T8521] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.553369][ T8521] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1735: corrupted inode contents [ 112.565792][ T8521] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1735: mark_inode_dirty error [ 112.577321][ T8521] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1735: corrupted inode contents [ 112.589445][ T8521] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1735: mark_inode_dirty error [ 112.654739][ T8532] loop4: detected capacity change from 0 to 512 [ 112.659022][ T8534] loop6: detected capacity change from 0 to 1024 [ 112.667896][ T8534] EXT4-fs: Ignoring removed nobh option [ 112.673535][ T8534] EXT4-fs: Ignoring removed bh option [ 112.679336][ T8534] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 112.681152][ T8532] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.705924][ T8532] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1739: corrupted inode contents [ 112.717921][ T8532] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1739: mark_inode_dirty error [ 112.729433][ T8532] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1739: corrupted inode contents [ 112.741325][ T8532] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1739: mark_inode_dirty error [ 112.926335][ T8549] loop8: detected capacity change from 0 to 512 [ 112.932943][ T8549] EXT4-fs: Ignoring removed oldalloc option [ 112.941264][ T8549] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.953094][ T8549] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1744: bg 0: block 217: padding at end of block bitmap is not set [ 112.969175][ T36] IPVS: starting estimator thread 0... [ 112.990982][ T8554] loop8: detected capacity change from 0 to 1024 [ 112.997755][ T8554] EXT4-fs: Ignoring removed nobh option [ 113.003366][ T8554] EXT4-fs: Ignoring removed bh option [ 113.026583][ T8554] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 113.069601][ T8552] IPVS: using max 3264 ests per chain, 163200 per kthread [ 113.172086][ T3443] IPVS: stop unused estimator thread 0... [ 113.181936][ T8565] FAULT_INJECTION: forcing a failure. [ 113.181936][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 113.194638][ T8565] CPU: 0 UID: 0 PID: 8565 Comm: syz.1.1749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.194699][ T8565] Tainted: [W]=WARN [ 113.194705][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.194716][ T8565] Call Trace: [ 113.194723][ T8565] [ 113.194732][ T8565] __dump_stack+0x1d/0x30 [ 113.194756][ T8565] dump_stack_lvl+0xe8/0x140 [ 113.194837][ T8565] dump_stack+0x15/0x1b [ 113.194855][ T8565] should_fail_ex+0x265/0x280 [ 113.194873][ T8565] ? ip_ra_control+0xd6/0x2c0 [ 113.194961][ T8565] should_failslab+0x8c/0xb0 [ 113.194987][ T8565] __kmalloc_cache_noprof+0x4c/0x4a0 [ 113.195020][ T8565] ? __pfx_mrtsock_destruct+0x10/0x10 [ 113.195041][ T8565] ip_ra_control+0xd6/0x2c0 [ 113.195066][ T8565] ? __pfx_mrtsock_destruct+0x10/0x10 [ 113.195156][ T8565] ip_mroute_setsockopt+0x32b/0x960 [ 113.195187][ T8565] do_ip_setsockopt+0xcea/0x2240 [ 113.195267][ T8565] ip_setsockopt+0x58/0x110 [ 113.195294][ T8565] raw_setsockopt+0xbd/0x150 [ 113.195312][ T8565] sock_common_setsockopt+0x69/0x80 [ 113.195339][ T8565] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 113.195413][ T8565] __sys_setsockopt+0x184/0x200 [ 113.195490][ T8565] __x64_sys_setsockopt+0x64/0x80 [ 113.195522][ T8565] x64_sys_call+0x20ec/0x3000 [ 113.195556][ T8565] do_syscall_64+0xd2/0x200 [ 113.195576][ T8565] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.195654][ T8565] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 113.195685][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.195709][ T8565] RIP: 0033:0x7fa4e8cbefc9 [ 113.195726][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.195744][ T8565] RSP: 002b:00007fa4e7727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.195761][ T8565] RAX: ffffffffffffffda RBX: 00007fa4e8f15fa0 RCX: 00007fa4e8cbefc9 [ 113.195810][ T8565] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.195821][ T8565] RBP: 00007fa4e7727090 R08: 0000000000000004 R09: 0000000000000000 [ 113.195833][ T8565] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 113.195847][ T8565] R13: 00007fa4e8f16038 R14: 00007fa4e8f15fa0 R15: 00007ffd4ffd5a08 [ 113.195865][ T8565] [ 113.580260][ T8583] loop6: detected capacity change from 0 to 512 [ 113.591049][ T8583] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.888263][ T8612] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 113.888263][ T8612] ÄUúeâ[¦ÓÎ%#s' [ 113.916504][ T8613] loop6: detected capacity change from 0 to 512 [ 113.941055][ T8613] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.036590][ T8623] loop6: detected capacity change from 0 to 512 [ 114.043482][ T8623] EXT4-fs: Ignoring removed oldalloc option [ 114.062234][ T8623] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.075787][ T8623] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1770: bg 0: block 217: padding at end of block bitmap is not set [ 114.092590][ T36] IPVS: starting estimator thread 0... [ 114.161548][ T8639] wireguard0: entered promiscuous mode [ 114.167176][ T8639] wireguard0: entered allmulticast mode [ 114.173574][ T8642] loop6: detected capacity change from 0 to 1024 [ 114.180689][ T8642] EXT4-fs: Ignoring removed nobh option [ 114.186306][ T8642] EXT4-fs: Ignoring removed bh option [ 114.192361][ T8642] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 114.199925][ T8630] IPVS: using max 2928 ests per chain, 146400 per kthread [ 114.211253][ T8643] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 114.221287][ T8643] SELinux: failed to load policy [ 114.301277][ T4358] IPVS: stop unused estimator thread 0... [ 114.643171][ T8650] FAULT_INJECTION: forcing a failure. [ 114.643171][ T8650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.656373][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.4.1777 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.656408][ T8650] Tainted: [W]=WARN [ 114.656414][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.656427][ T8650] Call Trace: [ 114.656434][ T8650] [ 114.656447][ T8650] __dump_stack+0x1d/0x30 [ 114.656470][ T8650] dump_stack_lvl+0xe8/0x140 [ 114.656489][ T8650] dump_stack+0x15/0x1b [ 114.656504][ T8650] should_fail_ex+0x265/0x280 [ 114.656533][ T8650] should_fail+0xb/0x20 [ 114.656548][ T8650] should_fail_usercopy+0x1a/0x20 [ 114.656676][ T8650] _copy_from_user+0x1c/0xb0 [ 114.656700][ T8650] io_submit_one+0x52/0x11d0 [ 114.656747][ T8650] __se_sys_io_submit+0xfb/0x280 [ 114.656783][ T8650] __x64_sys_io_submit+0x43/0x50 [ 114.656813][ T8650] x64_sys_call+0x2d6c/0x3000 [ 114.656912][ T8650] do_syscall_64+0xd2/0x200 [ 114.656932][ T8650] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.656973][ T8650] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.657007][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.657026][ T8650] RIP: 0033:0x7fbe3286efc9 [ 114.657040][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.657128][ T8650] RSP: 002b:00007fbe312d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 114.657145][ T8650] RAX: ffffffffffffffda RBX: 00007fbe32ac5fa0 RCX: 00007fbe3286efc9 [ 114.657156][ T8650] RDX: 0000200000000c40 RSI: 0000000000000001 RDI: 00007fbe31293000 [ 114.657167][ T8650] RBP: 00007fbe312d7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.657178][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.657191][ T8650] R13: 00007fbe32ac6038 R14: 00007fbe32ac5fa0 R15: 00007ffd0e635908 [ 114.657212][ T8650] [ 114.857469][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 114.857495][ T29] audit: type=1326 audit(2000000073.979:20560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 114.887685][ T29] audit: type=1326 audit(2000000073.979:20561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 114.911347][ T29] audit: type=1326 audit(2000000073.979:20562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 114.934840][ T29] audit: type=1326 audit(2000000073.979:20563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 114.958381][ T29] audit: type=1326 audit(2000000073.979:20564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 114.981940][ T29] audit: type=1326 audit(2000000073.979:20565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 115.005495][ T29] audit: type=1326 audit(2000000073.979:20566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 115.029079][ T29] audit: type=1326 audit(2000000073.979:20567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.8.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 115.042238][ T8653] validate_nla: 1 callbacks suppressed [ 115.042252][ T8653] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 115.052638][ T29] audit: type=1326 audit(2000000073.989:20568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 115.058360][ T8653] batadv0: left allmulticast mode [ 115.065860][ T29] audit: type=1326 audit(2000000073.989:20569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e8cbefc9 code=0x7ffc0000 [ 115.118239][ T8653] batadv0: left promiscuous mode [ 115.120007][ T8661] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 115.123389][ T8653] bridge0: port 1(batadv0) entered disabled state [ 115.131105][ T8661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1778'. [ 115.181828][ T8665] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1778'. [ 115.194886][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.209783][ T8653] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 115.218924][ T8670] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 115.229035][ T8661] batadv0: entered promiscuous mode [ 115.234299][ T8661] batadv0: entered allmulticast mode [ 115.242754][ T8670] SELinux: failed to load policy [ 115.248084][ T8661] bond0: (slave batadv0): Releasing backup interface [ 115.265953][ T8671] loop6: detected capacity change from 0 to 512 [ 115.272598][ T8671] EXT4-fs: Ignoring removed oldalloc option [ 115.284654][ T8673] FAULT_INJECTION: forcing a failure. [ 115.284654][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.290735][ T8661] bridge0: port 1(batadv0) entered blocking state [ 115.297752][ T8673] CPU: 1 UID: 0 PID: 8673 Comm: syz.8.1785 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.297949][ T8673] Tainted: [W]=WARN [ 115.297955][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.297968][ T8673] Call Trace: [ 115.297975][ T8673] [ 115.297983][ T8673] __dump_stack+0x1d/0x30 [ 115.298006][ T8673] dump_stack_lvl+0xe8/0x140 [ 115.298027][ T8673] dump_stack+0x15/0x1b [ 115.298052][ T8673] should_fail_ex+0x265/0x280 [ 115.298071][ T8673] should_fail+0xb/0x20 [ 115.298087][ T8673] should_fail_usercopy+0x1a/0x20 [ 115.298109][ T8673] _copy_from_user+0x1c/0xb0 [ 115.298134][ T8673] io_eventfd_register+0x77/0x1e0 [ 115.298286][ T8673] __se_sys_io_uring_register+0xb8c/0xf30 [ 115.298337][ T8673] ? __secure_computing+0x82/0x150 [ 115.298367][ T8673] __x64_sys_io_uring_register+0x55/0x70 [ 115.298508][ T8673] x64_sys_call+0x18a3/0x3000 [ 115.298531][ T8673] do_syscall_64+0xd2/0x200 [ 115.298550][ T8673] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.298653][ T8673] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.298684][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.298712][ T8673] RIP: 0033:0x7fabdec7efc9 [ 115.298727][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.298743][ T8673] RSP: 002b:00007fabdd6e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 115.298759][ T8673] RAX: ffffffffffffffda RBX: 00007fabdeed5fa0 RCX: 00007fabdec7efc9 [ 115.298770][ T8673] RDX: 0000200000007600 RSI: 0000000000000007 RDI: 0000000000000008 [ 115.298781][ T8673] RBP: 00007fabdd6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.298792][ T8673] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 115.298811][ T8673] R13: 00007fabdeed6038 R14: 00007fabdeed5fa0 R15: 00007fffda6f65c8 [ 115.298830][ T8673] [ 115.300967][ T8673] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 115.304249][ T8661] bridge0: port 1(batadv0) entered disabled state [ 115.358752][ T8671] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.516374][ T8660] wireguard0: entered promiscuous mode [ 115.519689][ T8671] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1783: bg 0: block 217: padding at end of block bitmap is not set [ 115.521940][ T8660] wireguard0: entered allmulticast mode [ 115.549747][ T8679] netlink: 'syz.8.1787': attribute type 12 has an invalid length. [ 115.653723][ T8698] loop6: detected capacity change from 0 to 1024 [ 115.660598][ T8698] EXT4-fs: Ignoring removed nobh option [ 115.666179][ T8698] EXT4-fs: Ignoring removed bh option [ 115.672124][ T8698] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 115.704772][ T8706] loop8: detected capacity change from 0 to 1024 [ 115.711807][ T8706] EXT4-fs: Ignoring removed nobh option [ 115.717464][ T8706] EXT4-fs: Ignoring removed bh option [ 115.726743][ T8706] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 116.695516][ T8734] loop6: detected capacity change from 0 to 1024 [ 116.717632][ T8725] loop3: detected capacity change from 0 to 2048 [ 116.739149][ T8725] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.750634][ T8734] netlink: 'syz.6.1801': attribute type 10 has an invalid length. [ 116.762889][ T8734] batadv0: left allmulticast mode [ 116.767952][ T8734] batadv0: left promiscuous mode [ 116.773084][ T8734] bridge0: port 3(batadv0) entered disabled state [ 116.811282][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.823088][ T8748] netlink: 'syz.6.1801': attribute type 10 has an invalid length. [ 116.831397][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1801'. [ 116.850904][ T8734] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.853206][ T8749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1810'. [ 116.859633][ T8732] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1803: bg 0: block 345: padding at end of block bitmap is not set [ 116.884751][ T8732] EXT4-fs (loop3): Remounting filesystem read-only [ 116.902607][ T8748] batadv0: entered promiscuous mode [ 116.907911][ T8748] batadv0: entered allmulticast mode [ 116.913364][ T8734] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1801'. [ 116.931320][ T8748] bond0: (slave batadv0): Releasing backup interface [ 116.935324][ T5750] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 116.953332][ T8748] bridge0: port 3(batadv0) entered blocking state [ 116.959984][ T8748] bridge0: port 3(batadv0) entered disabled state [ 117.052824][ T8764] loop3: detected capacity change from 0 to 1024 [ 117.060742][ T8764] EXT4-fs: Ignoring removed nobh option [ 117.066712][ T8764] EXT4-fs: Ignoring removed bh option [ 117.088454][ T8764] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 117.128375][ T8770] loop4: detected capacity change from 0 to 512 [ 117.135132][ T8770] EXT4-fs: Ignoring removed oldalloc option [ 117.197574][ T8770] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.218493][ T8770] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1820: bg 0: block 217: padding at end of block bitmap is not set [ 117.241034][ T10] IPVS: starting estimator thread 0... [ 118.174813][ T8791] loop8: detected capacity change from 0 to 512 [ 118.185680][ T8792] netlink: 'syz.4.1824': attribute type 12 has an invalid length. [ 118.219659][ T8784] IPVS: using max 2880 ests per chain, 144000 per kthread [ 118.243213][ T8791] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.270221][ T8804] loop4: detected capacity change from 0 to 1024 [ 118.276370][ T8791] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1825: corrupted inode contents [ 118.338173][ T8791] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.1825: mark_inode_dirty error [ 118.355264][ T8804] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1829: bg 0: block 88: padding at end of block bitmap is not set [ 118.371972][ T8791] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1825: corrupted inode contents [ 118.374014][ T8804] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 118.392034][ T8804] batadv0: left allmulticast mode [ 118.397079][ T8804] batadv0: left promiscuous mode [ 118.402288][ T8804] bridge0: port 3(batadv0) entered disabled state [ 118.410852][ T8804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.419367][ T8804] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.430317][ T8791] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1825: mark_inode_dirty error [ 118.430394][ T8816] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 118.449368][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1829'. [ 118.474407][ T8816] batadv0: entered promiscuous mode [ 118.479699][ T8816] batadv0: entered allmulticast mode [ 118.489914][ T8818] loop6: detected capacity change from 0 to 1024 [ 118.503621][ T8818] EXT4-fs: Ignoring removed nobh option [ 118.509315][ T8818] EXT4-fs: Ignoring removed bh option [ 118.518867][ T8818] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 118.532102][ T8816] bond0: (slave batadv0): Releasing backup interface [ 118.542461][ T8816] bridge0: port 3(batadv0) entered blocking state [ 118.548947][ T8816] bridge0: port 3(batadv0) entered disabled state [ 118.660063][ T8833] netlink: 'syz.1.1840': attribute type 12 has an invalid length. [ 118.667970][ T8830] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1841'. [ 118.702693][ T5764] IPVS: stop unused estimator thread 0... [ 118.734862][ T8840] netlink: 678 bytes leftover after parsing attributes in process `syz.3.1844'. [ 118.923595][ T8850] loop4: detected capacity change from 0 to 1024 [ 119.002942][ T8850] EXT4-fs: Ignoring removed nobh option [ 119.008629][ T8850] EXT4-fs: Ignoring removed bh option [ 119.079025][ T8850] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 119.154928][ T8862] loop3: detected capacity change from 0 to 1024 [ 119.228604][ T8862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1853: bg 0: block 88: padding at end of block bitmap is not set [ 119.248011][ T8862] netlink: 'syz.3.1853': attribute type 10 has an invalid length. [ 119.256213][ T8862] batadv0: left promiscuous mode [ 119.261196][ T8862] batadv0: left allmulticast mode [ 119.267563][ T8862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.279468][ T8862] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 119.318906][ T8872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1853'. [ 119.328096][ T8872] batadv0: entered promiscuous mode [ 119.333324][ T8872] batadv0: entered allmulticast mode [ 119.341525][ T8872] bond0: (slave batadv0): Releasing backup interface [ 119.354012][ T8872] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 119.385519][ T8878] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1857'. [ 119.482042][ T8885] netlink: 444 bytes leftover after parsing attributes in process `syz.8.1860'. [ 119.491394][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1860'. [ 119.583619][ T8895] FAULT_INJECTION: forcing a failure. [ 119.583619][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 119.596312][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.1.1859 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.596420][ T8895] Tainted: [W]=WARN [ 119.596426][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.596437][ T8895] Call Trace: [ 119.596445][ T8895] [ 119.596453][ T8895] __dump_stack+0x1d/0x30 [ 119.596478][ T8895] dump_stack_lvl+0xe8/0x140 [ 119.596566][ T8895] dump_stack+0x15/0x1b [ 119.596584][ T8895] should_fail_ex+0x265/0x280 [ 119.596606][ T8895] should_failslab+0x8c/0xb0 [ 119.596637][ T8895] kmem_cache_alloc_noprof+0x50/0x480 [ 119.596696][ T8895] ? copy_fs_struct+0x31/0x110 [ 119.596731][ T8895] copy_fs_struct+0x31/0x110 [ 119.596766][ T8895] copy_fs+0x58/0xf0 [ 119.596790][ T8895] copy_process+0xc85/0x2000 [ 119.596841][ T8895] kernel_clone+0x16c/0x5c0 [ 119.596873][ T8895] __x64_sys_clone+0xe6/0x120 [ 119.596913][ T8895] x64_sys_call+0x119c/0x3000 [ 119.596941][ T8895] do_syscall_64+0xd2/0x200 [ 119.596958][ T8895] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.597060][ T8895] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.597225][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.597244][ T8895] RIP: 0033:0x7fa4e8cbefc9 [ 119.597257][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.597273][ T8895] RSP: 002b:00007fa4e76e4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 119.597353][ T8895] RAX: ffffffffffffffda RBX: 00007fa4e8f16180 RCX: 00007fa4e8cbefc9 [ 119.597368][ T8895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 119.597381][ T8895] RBP: 00007fa4e76e5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.597391][ T8895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 119.597442][ T8895] R13: 00007fa4e8f16218 R14: 00007fa4e8f16180 R15: 00007ffd4ffd5a08 [ 119.597462][ T8895] [ 119.836995][ T8896] loop3: detected capacity change from 0 to 512 [ 119.865267][ T8896] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.883656][ T8904] FAULT_INJECTION: forcing a failure. [ 119.883656][ T8904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.884461][ T29] kauditd_printk_skb: 830 callbacks suppressed [ 119.884481][ T29] audit: type=1326 audit(2000000079.009:21400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 119.896799][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.8.1867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.896826][ T8904] Tainted: [W]=WARN [ 119.896833][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.896845][ T8904] Call Trace: [ 119.896851][ T8904] [ 119.896865][ T8904] __dump_stack+0x1d/0x30 [ 119.896888][ T8904] dump_stack_lvl+0xe8/0x140 [ 119.896909][ T8904] dump_stack+0x15/0x1b [ 119.896927][ T8904] should_fail_ex+0x265/0x280 [ 119.896947][ T8904] should_fail+0xb/0x20 [ 119.896963][ T8904] should_fail_usercopy+0x1a/0x20 [ 119.897011][ T8904] _copy_to_user+0x20/0xa0 [ 119.897104][ T8904] simple_read_from_buffer+0xb5/0x130 [ 119.897129][ T8904] proc_fail_nth_read+0x10e/0x150 [ 119.897162][ T8904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.897247][ T8904] vfs_read+0x1a8/0x770 [ 119.897271][ T8904] ? __rcu_read_unlock+0x4f/0x70 [ 119.897297][ T8904] ? __fget_files+0x184/0x1c0 [ 119.897454][ T8904] ksys_read+0xda/0x1a0 [ 119.897601][ T8904] __x64_sys_read+0x40/0x50 [ 119.897631][ T8904] x64_sys_call+0x27c0/0x3000 [ 119.897653][ T8904] do_syscall_64+0xd2/0x200 [ 119.897672][ T8904] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.897700][ T8904] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.897791][ T8904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.897813][ T8904] RIP: 0033:0x7fabdec7d9dc [ 119.897828][ T8904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.897845][ T8904] RSP: 002b:00007fabdd6e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.897864][ T8904] RAX: ffffffffffffffda RBX: 00007fabdeed5fa0 RCX: 00007fabdec7d9dc [ 119.897878][ T8904] RDX: 000000000000000f RSI: 00007fabdd6e70a0 RDI: 0000000000000007 [ 119.897890][ T8904] RBP: 00007fabdd6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.897902][ T8904] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 119.897915][ T8904] R13: 00007fabdeed6038 R14: 00007fabdeed5fa0 R15: 00007fffda6f65c8 [ 119.897933][ T8904] [ 119.906730][ T8906] loop6: detected capacity change from 0 to 1024 [ 119.929919][ T29] audit: type=1326 audit(2000000079.059:21401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 119.961410][ T8893] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1863: corrupted inode contents [ 119.963047][ T29] audit: type=1326 audit(2000000079.059:21402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 119.968388][ T8893] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1863: mark_inode_dirty error [ 119.971520][ T29] audit: type=1326 audit(2000000079.059:21403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 119.976510][ T8893] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1863: corrupted inode contents [ 119.980368][ T29] audit: type=1326 audit(2000000079.059:21404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 119.990968][ T8893] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1863: mark_inode_dirty error [ 119.995128][ T29] audit: type=1326 audit(2000000079.059:21405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 120.014619][ T8906] EXT4-fs: Ignoring removed nobh option [ 120.014880][ T29] audit: type=1326 audit(2000000079.059:21406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 120.019592][ T8906] EXT4-fs: Ignoring removed bh option [ 120.023739][ T29] audit: type=1326 audit(2000000079.059:21407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 120.050098][ T8906] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 120.055039][ T29] audit: type=1326 audit(2000000079.059:21408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 120.116204][ T8908] loop4: detected capacity change from 0 to 512 [ 120.119539][ T29] audit: type=1326 audit(2000000079.059:21409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8902 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 120.127947][ T8908] EXT4-fs: Ignoring removed oldalloc option [ 120.155343][ T8913] loop8: detected capacity change from 0 to 512 [ 120.224701][ T8908] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.250979][ T8913] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.365344][ T8908] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1869: bg 0: block 217: padding at end of block bitmap is not set [ 120.422932][ T3380] IPVS: starting estimator thread 0... [ 120.540597][ T8928] loop3: detected capacity change from 0 to 1024 [ 120.599693][ T8920] IPVS: using max 2928 ests per chain, 146400 per kthread [ 120.661724][ T8928] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1874: bg 0: block 88: padding at end of block bitmap is not set [ 120.785923][ T8942] loop8: detected capacity change from 0 to 1024 [ 120.821562][ T8928] validate_nla: 1 callbacks suppressed [ 120.821574][ T8928] netlink: 'syz.3.1874': attribute type 10 has an invalid length. [ 120.849942][ T8942] EXT4-fs: Ignoring removed nobh option [ 120.855535][ T8942] EXT4-fs: Ignoring removed bh option [ 120.881387][ T8928] batadv0: left promiscuous mode [ 120.886367][ T8928] batadv0: left allmulticast mode [ 120.893735][ T8946] FAULT_INJECTION: forcing a failure. [ 120.893735][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 120.906531][ T8946] CPU: 1 UID: 0 PID: 8946 Comm: syz.4.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.906640][ T8946] Tainted: [W]=WARN [ 120.906647][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.906661][ T8946] Call Trace: [ 120.906667][ T8946] [ 120.906675][ T8946] __dump_stack+0x1d/0x30 [ 120.906735][ T8946] dump_stack_lvl+0xe8/0x140 [ 120.906755][ T8946] dump_stack+0x15/0x1b [ 120.906775][ T8946] should_fail_ex+0x265/0x280 [ 120.906794][ T8946] ? io_setxattr_prep+0xfc/0x1d0 [ 120.906856][ T8946] should_failslab+0x8c/0xb0 [ 120.906944][ T8946] __kmalloc_cache_noprof+0x4c/0x4a0 [ 120.907046][ T8946] ? __io_alloc_req_refill+0x12e/0x1d0 [ 120.907073][ T8946] io_setxattr_prep+0xfc/0x1d0 [ 120.907103][ T8946] io_submit_sqes+0x5ef/0x1060 [ 120.907152][ T8946] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 120.907187][ T8946] ? 0xffffffff81000000 [ 120.907203][ T8946] ? __rcu_read_unlock+0x4f/0x70 [ 120.907283][ T8946] ? get_pid_task+0x96/0xd0 [ 120.907305][ T8946] ? proc_fail_nth_write+0x13b/0x160 [ 120.907377][ T8946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.907404][ T8946] ? vfs_write+0x7e8/0x960 [ 120.907489][ T8946] ? __rcu_read_unlock+0x4f/0x70 [ 120.907513][ T8946] ? __fget_files+0x184/0x1c0 [ 120.907563][ T8946] ? fput+0x8f/0xc0 [ 120.907657][ T8946] __x64_sys_io_uring_enter+0x78/0x90 [ 120.907723][ T8946] x64_sys_call+0x2df0/0x3000 [ 120.907747][ T8946] do_syscall_64+0xd2/0x200 [ 120.907763][ T8946] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.907791][ T8946] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.907865][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.907888][ T8946] RIP: 0033:0x7fbe3286efc9 [ 120.907932][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.907948][ T8946] RSP: 002b:00007fbe312d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 120.907970][ T8946] RAX: ffffffffffffffda RBX: 00007fbe32ac5fa0 RCX: 00007fbe3286efc9 [ 120.907982][ T8946] RDX: 0000000000000003 RSI: 00000000000046bc RDI: 0000000000000005 [ 120.907995][ T8946] RBP: 00007fbe312d7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.908028][ T8946] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 120.908042][ T8946] R13: 00007fbe32ac6038 R14: 00007fbe32ac5fa0 R15: 00007ffd0e635908 [ 120.908062][ T8946] [ 120.908779][ T8942] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 120.916130][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.930690][ T8944] netlink: 'syz.3.1874': attribute type 10 has an invalid length. [ 120.935492][ T8928] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.959241][ T8949] loop6: detected capacity change from 0 to 1024 [ 121.068896][ T8944] batadv0: entered promiscuous mode [ 121.101160][ T8949] EXT4-fs: Ignoring removed nobh option [ 121.108808][ T8944] batadv0: entered allmulticast mode [ 121.116857][ T8949] EXT4-fs: Ignoring removed bh option [ 121.140568][ T8949] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 121.266153][ T8944] bond0: (slave batadv0): Releasing backup interface [ 121.275384][ T8944] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 121.341238][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.348738][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.356388][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.363836][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.371235][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.378783][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.386190][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.393614][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.401059][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.408442][ T3380] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.458979][ T3380] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.110932][ T8974] program syz.3.1888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.258517][ T8988] loop8: detected capacity change from 0 to 512 [ 122.268111][ T8987] netlink: 'syz.6.1894': attribute type 12 has an invalid length. [ 122.324512][ T8988] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.335112][ T8995] wireguard0: entered promiscuous mode [ 122.340736][ T8995] wireguard0: entered allmulticast mode [ 122.354612][ T8988] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1891: corrupted inode contents [ 122.374284][ T9005] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 122.508726][ T9005] SELinux: failed to load policy [ 122.542291][ T8988] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.1891: mark_inode_dirty error [ 122.718813][ T8988] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.1891: corrupted inode contents [ 122.749824][ T8988] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1891: mark_inode_dirty error [ 122.817507][ T9019] loop4: detected capacity change from 0 to 1024 [ 122.825250][ T9019] EXT4-fs: Ignoring removed nobh option [ 122.830908][ T9019] EXT4-fs: Ignoring removed bh option [ 122.836936][ T9019] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 122.885196][ T9022] loop3: detected capacity change from 0 to 1024 [ 122.894391][ T9022] EXT4-fs: Ignoring removed nobh option [ 122.900171][ T9022] EXT4-fs: Ignoring removed bh option [ 122.907011][ T9022] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 122.935182][ T9027] loop8: detected capacity change from 0 to 2048 [ 123.030872][ T9027] loop8: p1 p2 p3 [ 123.728576][ T9046] loop8: detected capacity change from 0 to 512 [ 123.735462][ T9046] EXT4-fs: Ignoring removed oldalloc option [ 123.771468][ T9046] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.788564][ T9046] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1910: bg 0: block 217: padding at end of block bitmap is not set [ 123.806944][ T9061] loop6: detected capacity change from 0 to 512 [ 123.839387][ T3393] IPVS: starting estimator thread 0... [ 123.861453][ T9064] loop4: detected capacity change from 0 to 2048 [ 123.869406][ T9061] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.886589][ T9076] netlink: 'syz.1.1920': attribute type 39 has an invalid length. [ 123.902372][ T9064] loop4: p1 < > p4 < > [ 123.905599][ T9078] netlink: 'syz.8.1922': attribute type 10 has an invalid length. [ 123.924794][ T9078] batadv0: left allmulticast mode [ 123.929878][ T9078] batadv0: left promiscuous mode [ 123.935017][ T9061] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1917: corrupted inode contents [ 123.935131][ T9078] bridge0: port 3(batadv0) entered disabled state [ 123.949414][ T9079] __nla_validate_parse: 1 callbacks suppressed [ 123.949428][ T9079] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1920'. [ 123.954427][ T9065] IPVS: using max 3072 ests per chain, 153600 per kthread [ 123.975354][ T9061] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1917: mark_inode_dirty error [ 123.976026][ T9081] netlink: 'syz.8.1922': attribute type 10 has an invalid length. [ 123.995017][ T9081] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1922'. [ 124.004755][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.013611][ T9078] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 124.019995][ T9061] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1917: corrupted inode contents [ 124.034303][ T9061] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1917: mark_inode_dirty error [ 124.045969][ T9081] batadv0: entered promiscuous mode [ 124.051199][ T9081] batadv0: entered allmulticast mode [ 124.051528][ T9078] loop8: detected capacity change from 0 to 1024 [ 124.072214][ T9078] EXT4-fs: inline encryption not supported [ 124.078125][ T9078] EXT4-fs: Ignoring removed i_version option [ 124.078729][ T9081] bond0: (slave batadv0): Releasing backup interface [ 124.086211][ T9078] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.121166][ T9081] bridge0: port 3(batadv0) entered blocking state [ 124.127667][ T9081] bridge0: port 3(batadv0) entered disabled state [ 124.168414][ T9078] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1922: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.201739][ T9078] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1922: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.219403][ T9078] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.1922: Failed to acquire dquot type 0 [ 124.233874][ T9078] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.248238][ T9078] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1922: mark_inode_dirty error [ 124.261342][ T9078] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 124.271626][ T9078] EXT4-fs (loop8): 1 orphan inode deleted [ 124.321267][ T5731] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.352962][ T5764] IPVS: stop unused estimator thread 0... [ 124.370224][ T5731] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:17: Failed to release dquot type 0 [ 124.388478][ T9078] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.1922: Invalid inode table block 1 in block_group 0 [ 124.408725][ T9112] TCP: tcp_parse_options: Illegal window scaling value 168 > 14 received [ 124.417212][ T9112] TCP: tcp_parse_options: Illegal window scaling value 139 > 14 received [ 124.442109][ T9110] loop4: detected capacity change from 0 to 512 [ 124.583658][ T9078] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 124.614516][ T9110] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.645045][ T9078] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz.8.1922: mark_inode_dirty error [ 124.715537][ T9110] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1933: corrupted inode contents [ 124.790627][ T9110] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1933: mark_inode_dirty error [ 124.802295][ T9110] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1933: corrupted inode contents [ 124.814325][ T9110] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1933: mark_inode_dirty error [ 124.829175][ T9078] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1922'. [ 124.873222][ T9134] loop4: detected capacity change from 0 to 256 [ 124.889632][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 124.889646][ T29] audit: type=1326 audit(2000000084.019:21970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 124.919566][ T29] audit: type=1326 audit(2000000084.009:21969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 124.943908][ T29] audit: type=1326 audit(2000000084.049:21971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 124.968560][ T29] audit: type=1326 audit(2000000084.049:21972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 124.992183][ T29] audit: type=1326 audit(2000000084.049:21973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 125.015672][ T29] audit: type=1326 audit(2000000084.049:21974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 125.039153][ T29] audit: type=1326 audit(2000000084.049:21975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 125.062686][ T29] audit: type=1326 audit(2000000084.049:21976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 125.086396][ T29] audit: type=1326 audit(2000000084.049:21977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdec7efc9 code=0x7ffc0000 [ 125.109901][ T29] audit: type=1326 audit(2000000084.049:21978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.8.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fabdec7f003 code=0x7ffc0000 [ 125.134519][ T9142] wireguard0: entered promiscuous mode [ 125.140067][ T9142] wireguard0: entered allmulticast mode [ 125.168482][ T9148] loop3: detected capacity change from 0 to 512 [ 125.183461][ T9148] EXT4-fs: Ignoring removed oldalloc option [ 125.185514][ T9149] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 125.199267][ T9149] SELinux: failed to load policy [ 125.208543][ T9151] loop4: detected capacity change from 0 to 512 [ 125.221967][ T9151] EXT4-fs: Ignoring removed oldalloc option [ 125.231192][ T9148] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.252947][ T9151] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.284261][ T10] IPVS: starting estimator thread 0... [ 125.309083][ T9163] FAULT_INJECTION: forcing a failure. [ 125.309083][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 125.321867][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.1.1950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.321958][ T9163] Tainted: [W]=WARN [ 125.321964][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.321977][ T9163] Call Trace: [ 125.321983][ T9163] [ 125.321991][ T9163] __dump_stack+0x1d/0x30 [ 125.322045][ T9163] dump_stack_lvl+0xe8/0x140 [ 125.322066][ T9163] dump_stack+0x15/0x1b [ 125.322136][ T9163] should_fail_ex+0x265/0x280 [ 125.322157][ T9163] should_failslab+0x8c/0xb0 [ 125.322185][ T9163] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 125.322227][ T9163] ? __alloc_skb+0x101/0x320 [ 125.322256][ T9163] __alloc_skb+0x101/0x320 [ 125.322282][ T9163] ? audit_log_start+0x342/0x720 [ 125.322335][ T9163] audit_log_start+0x3a0/0x720 [ 125.322356][ T9163] ? kstrtouint+0x76/0xc0 [ 125.322410][ T9163] audit_seccomp+0x48/0x100 [ 125.322442][ T9163] ? __seccomp_filter+0x82d/0x1250 [ 125.322500][ T9163] __seccomp_filter+0x83e/0x1250 [ 125.322537][ T9163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 125.322637][ T9163] ? vfs_write+0x7e8/0x960 [ 125.322661][ T9163] ? __rcu_read_unlock+0x4f/0x70 [ 125.322687][ T9163] ? __fget_files+0x184/0x1c0 [ 125.322774][ T9163] __secure_computing+0x82/0x150 [ 125.322819][ T9163] syscall_trace_enter+0xcf/0x1e0 [ 125.322847][ T9163] do_syscall_64+0xac/0x200 [ 125.322865][ T9163] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.322929][ T9163] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.322958][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.322978][ T9163] RIP: 0033:0x7fa4e8cbefc9 [ 125.322993][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.323037][ T9163] RSP: 002b:00007fa4e7727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 125.323056][ T9163] RAX: ffffffffffffffda RBX: 00007fa4e8f15fa0 RCX: 00007fa4e8cbefc9 [ 125.323068][ T9163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.323080][ T9163] RBP: 00007fa4e7727090 R08: 0000000000000000 R09: 0000000000000000 [ 125.323092][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.323103][ T9163] R13: 00007fa4e8f16038 R14: 00007fa4e8f15fa0 R15: 00007ffd4ffd5a08 [ 125.323122][ T9163] [ 125.553955][ T9166] FAULT_INJECTION: forcing a failure. [ 125.553955][ T9166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.567202][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.1951 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.567231][ T9166] Tainted: [W]=WARN [ 125.567237][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.567248][ T9166] Call Trace: [ 125.567254][ T9166] [ 125.567261][ T9166] __dump_stack+0x1d/0x30 [ 125.567309][ T9166] dump_stack_lvl+0xe8/0x140 [ 125.567327][ T9166] dump_stack+0x15/0x1b [ 125.567342][ T9166] should_fail_ex+0x265/0x280 [ 125.567360][ T9166] should_fail+0xb/0x20 [ 125.567408][ T9166] should_fail_usercopy+0x1a/0x20 [ 125.567426][ T9166] _copy_from_iter+0xd2/0xe80 [ 125.567505][ T9166] ? alloc_pages_mpol+0x217/0x260 [ 125.567526][ T9166] copy_page_from_iter+0x178/0x2a0 [ 125.567548][ T9166] tun_get_user+0x679/0x26e0 [ 125.567657][ T9166] ? ref_tracker_alloc+0x1f2/0x2f0 [ 125.567690][ T9166] tun_chr_write_iter+0x15e/0x210 [ 125.567757][ T9166] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 125.567840][ T9166] vfs_write+0x52a/0x960 [ 125.567866][ T9166] ksys_write+0xda/0x1a0 [ 125.567888][ T9166] __x64_sys_write+0x40/0x50 [ 125.567911][ T9166] x64_sys_call+0x2802/0x3000 [ 125.567964][ T9166] do_syscall_64+0xd2/0x200 [ 125.567980][ T9166] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.568089][ T9166] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.568210][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.568228][ T9166] RIP: 0033:0x7fab8e2cda7f [ 125.568247][ T9166] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 125.568263][ T9166] RSP: 002b:00007fab8cd0e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.568279][ T9166] RAX: ffffffffffffffda RBX: 00007fab8e526090 RCX: 00007fab8e2cda7f [ 125.568290][ T9166] RDX: 0000000000000046 RSI: 00002000000004c0 RDI: 00000000000000c8 [ 125.568380][ T9166] RBP: 00007fab8cd0e090 R08: 0000000000000000 R09: 0000000000000000 [ 125.568396][ T9166] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 125.568407][ T9166] R13: 00007fab8e526128 R14: 00007fab8e526090 R15: 00007ffd35fe8fa8 [ 125.568422][ T9166] [ 125.777406][ T9157] IPVS: using max 2928 ests per chain, 146400 per kthread [ 125.789698][ T3407] IPVS: starting estimator thread 0... [ 125.847067][ T9177] netlink: 'syz.6.1957': attribute type 39 has an invalid length. [ 125.861482][ T9183] loop3: detected capacity change from 0 to 1024 [ 125.868375][ T9183] EXT4-fs: Ignoring removed nobh option [ 125.874077][ T9183] EXT4-fs: Ignoring removed bh option [ 125.879670][ T9169] IPVS: using max 3216 ests per chain, 160800 per kthread [ 125.882031][ T9179] netlink: 'syz.1.1956': attribute type 39 has an invalid length. [ 125.887440][ T9183] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 125.906841][ T9184] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1957'. [ 125.915033][ T9179] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1956'. [ 125.926703][ T5731] IPVS: stop unused estimator thread 0... [ 126.117165][ T9198] loop4: detected capacity change from 0 to 512 [ 126.175997][ T9198] EXT4-fs: Ignoring removed oldalloc option [ 126.192472][ T9198] EXT4-fs mount: 81 callbacks suppressed [ 126.192485][ T9198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.353817][ T5731] IPVS: stop unused estimator thread 0... [ 126.419928][ T9198] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.468441][ T9198] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1964: bg 0: block 217: padding at end of block bitmap is not set [ 126.513976][ T10] IPVS: starting estimator thread 0... [ 126.527065][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.642363][ T9217] IPVS: using max 2880 ests per chain, 144000 per kthread [ 126.883996][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.016969][ T9239] loop3: detected capacity change from 0 to 512 [ 127.024056][ T9242] netlink: 'syz.8.1979': attribute type 1 has an invalid length. [ 127.031823][ T9242] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1979'. [ 127.044964][ T9239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.046542][ T5731] IPVS: stop unused estimator thread 0... [ 127.058064][ T9239] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.089372][ T9239] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1977: corrupted inode contents [ 127.101836][ T9239] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1977: mark_inode_dirty error [ 127.113746][ T9239] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1977: corrupted inode contents [ 127.129999][ T9239] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1977: mark_inode_dirty error [ 127.177163][ T9261] loop8: detected capacity change from 0 to 512 [ 127.184215][ T9261] EXT4-fs: Ignoring removed oldalloc option [ 127.188775][ T9260] loop4: detected capacity change from 0 to 1024 [ 127.198140][ T9260] EXT4-fs: Ignoring removed nobh option [ 127.203736][ T9260] EXT4-fs: Ignoring removed bh option [ 127.219890][ T9260] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 127.232440][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.245110][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1987'. [ 127.256222][ T9260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.292598][ T9261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.305391][ T9261] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.350301][ T10] IPVS: starting estimator thread 0... [ 127.390696][ T7061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.459596][ T9270] IPVS: using max 3024 ests per chain, 151200 per kthread [ 127.546941][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1989'. [ 127.575282][ T9292] FAULT_INJECTION: forcing a failure. [ 127.575282][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 127.588031][ T9292] CPU: 0 UID: 0 PID: 9292 Comm: syz.8.1994 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.588067][ T9292] Tainted: [W]=WARN [ 127.588074][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.588155][ T9292] Call Trace: [ 127.588162][ T9292] [ 127.588171][ T9292] __dump_stack+0x1d/0x30 [ 127.588194][ T9292] dump_stack_lvl+0xe8/0x140 [ 127.588217][ T9292] dump_stack+0x15/0x1b [ 127.588234][ T9292] should_fail_ex+0x265/0x280 [ 127.588255][ T9292] should_failslab+0x8c/0xb0 [ 127.588291][ T9292] kmem_cache_alloc_noprof+0x50/0x480 [ 127.588325][ T9292] ? security_file_alloc+0x32/0x100 [ 127.588356][ T9292] security_file_alloc+0x32/0x100 [ 127.588378][ T9292] init_file+0x5c/0x1d0 [ 127.588474][ T9292] alloc_empty_file+0x8b/0x200 [ 127.588503][ T9292] alloc_file_pseudo+0xc6/0x160 [ 127.588521][ T9292] __shmem_file_setup+0x1de/0x210 [ 127.588561][ T9292] shmem_file_setup+0x3b/0x50 [ 127.588580][ T9292] __se_sys_memfd_create+0x2c3/0x590 [ 127.588608][ T9292] __x64_sys_memfd_create+0x31/0x40 [ 127.588693][ T9292] x64_sys_call+0x2ac2/0x3000 [ 127.588715][ T9292] do_syscall_64+0xd2/0x200 [ 127.588732][ T9292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.588757][ T9292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.588855][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.588878][ T9292] RIP: 0033:0x7fabdec7efc9 [ 127.588932][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.589062][ T9292] RSP: 002b:00007fabdd6e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 127.589082][ T9292] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007fabdec7efc9 [ 127.589096][ T9292] RDX: 00007fabdd6e6ef0 RSI: 0000000000000000 RDI: 00007fabded02960 [ 127.589110][ T9292] RBP: 0000200000000640 R08: 00007fabdd6e6bb7 R09: 00007fabdd6e6e40 [ 127.589124][ T9292] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 127.589134][ T9292] R13: 00007fabdd6e6ef0 R14: 00007fabdd6e6eb0 R15: 00002000000001c0 [ 127.589150][ T9292] [ 127.799333][ T5731] IPVS: stop unused estimator thread 0... [ 127.808306][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.954144][ T9316] loop8: detected capacity change from 0 to 512 [ 127.961486][ T9313] loop4: detected capacity change from 0 to 1024 [ 127.968460][ T9313] EXT4-fs: Ignoring removed nobh option [ 127.974160][ T9313] EXT4-fs: Ignoring removed bh option [ 127.986824][ T9316] EXT4-fs: Ignoring removed oldalloc option [ 127.998299][ T9313] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 128.031560][ T9316] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.050128][ T9313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.186493][ T3407] IPVS: starting estimator thread 0... [ 128.202441][ T7061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.226102][ T9330] loop6: detected capacity change from 0 to 1024 [ 128.237726][ T9330] EXT4-fs: Ignoring removed nobh option [ 128.243423][ T9330] EXT4-fs: Ignoring removed bh option [ 128.299556][ T9327] IPVS: using max 3024 ests per chain, 151200 per kthread [ 128.307152][ T9330] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 128.381529][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.392840][ T9330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.498626][ T9338] FAULT_INJECTION: forcing a failure. [ 128.498626][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.511809][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.4.2008 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.511873][ T9338] Tainted: [W]=WARN [ 128.511880][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.511892][ T9338] Call Trace: [ 128.511899][ T9338] [ 128.511907][ T9338] __dump_stack+0x1d/0x30 [ 128.511935][ T9338] dump_stack_lvl+0xe8/0x140 [ 128.511953][ T9338] dump_stack+0x15/0x1b [ 128.511970][ T9338] should_fail_ex+0x265/0x280 [ 128.511990][ T9338] should_fail+0xb/0x20 [ 128.512004][ T9338] should_fail_usercopy+0x1a/0x20 [ 128.512025][ T9338] _copy_from_user+0x1c/0xb0 [ 128.512130][ T9338] memdup_user+0x5e/0xd0 [ 128.512159][ T9338] strndup_user+0x68/0xb0 [ 128.512183][ T9338] perf_uprobe_init+0x48/0x150 [ 128.512267][ T9338] perf_uprobe_event_init+0xc4/0x140 [ 128.512347][ T9338] perf_try_init_event+0xd9/0x540 [ 128.512373][ T9338] ? perf_event_alloc+0xb1c/0x1740 [ 128.512476][ T9338] perf_event_alloc+0xb27/0x1740 [ 128.512520][ T9338] __se_sys_perf_event_open+0x615/0x11c0 [ 128.512552][ T9338] ? __rcu_read_unlock+0x4f/0x70 [ 128.512649][ T9338] __x64_sys_perf_event_open+0x67/0x80 [ 128.512691][ T9338] x64_sys_call+0x7bd/0x3000 [ 128.512758][ T9338] do_syscall_64+0xd2/0x200 [ 128.512775][ T9338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.512852][ T9338] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.512885][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.512909][ T9338] RIP: 0033:0x7fbe3286efc9 [ 128.512925][ T9338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.513003][ T9338] RSP: 002b:00007fbe312d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 128.513021][ T9338] RAX: ffffffffffffffda RBX: 00007fbe32ac5fa0 RCX: 00007fbe3286efc9 [ 128.513033][ T9338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 128.513119][ T9338] RBP: 00007fbe312d7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.513131][ T9338] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 128.513142][ T9338] R13: 00007fbe32ac6038 R14: 00007fbe32ac5fa0 R15: 00007ffd0e635908 [ 128.513159][ T9338] [ 128.770992][ T5731] IPVS: stop unused estimator thread 0... [ 128.868645][ T9348] loop4: detected capacity change from 0 to 512 [ 128.883783][ T9348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.929797][ T9352] lo speed is unknown, defaulting to 1000 [ 128.938861][ T9352] lo speed is unknown, defaulting to 1000 [ 128.965829][ T9352] lo speed is unknown, defaulting to 1000 [ 128.972032][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.006060][ T9354] random: crng reseeded on system resumption [ 129.026413][ T9352] infiniband sz1: set active [ 129.031270][ T9352] infiniband sz1: added lo [ 129.036858][ T10] lo speed is unknown, defaulting to 1000 [ 129.093208][ T9352] RDS/IB: sz1: added [ 129.098357][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.110854][ T9352] smc: adding ib device sz1 with port count 1 [ 129.122505][ T9352] smc: ib device sz1 port 1 has no pnetid [ 129.128676][ T10] lo speed is unknown, defaulting to 1000 [ 129.135131][ T9352] lo speed is unknown, defaulting to 1000 [ 129.141634][ T9360] loop4: detected capacity change from 0 to 1024 [ 129.170077][ T9352] lo speed is unknown, defaulting to 1000 [ 129.181569][ T9360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.203546][ T9360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2015: bg 0: block 88: padding at end of block bitmap is not set [ 129.205775][ T9352] lo speed is unknown, defaulting to 1000 [ 129.222722][ T9370] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 129.231850][ T9370] batadv0: left allmulticast mode [ 129.236885][ T9370] batadv0: left promiscuous mode [ 129.242195][ T9370] bridge0: port 3(batadv0) entered disabled state [ 129.250040][ T9369] netlink: 'syz.8.2019': attribute type 39 has an invalid length. [ 129.260409][ T9370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.262679][ T9360] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 129.270173][ T9370] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.283913][ T9352] lo speed is unknown, defaulting to 1000 [ 129.290833][ T9360] batadv0: left allmulticast mode [ 129.295950][ T9360] batadv0: left promiscuous mode [ 129.301299][ T9360] bridge0: port 3(batadv0) entered disabled state [ 129.315467][ T9370] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 129.317827][ T9371] netlink: 'syz.4.2015': attribute type 10 has an invalid length. [ 129.323425][ T9370] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2018'. [ 129.331259][ T9371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2015'. [ 129.342290][ T9374] FAULT_INJECTION: forcing a failure. [ 129.342290][ T9374] name failslab, interval 1, probability 0, space 0, times 0 [ 129.361852][ T9374] CPU: 1 UID: 0 PID: 9374 Comm: syz.1.2020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.361884][ T9374] Tainted: [W]=WARN [ 129.361890][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.361925][ T9374] Call Trace: [ 129.361931][ T9374] [ 129.361939][ T9374] __dump_stack+0x1d/0x30 [ 129.361960][ T9374] dump_stack_lvl+0xe8/0x140 [ 129.361978][ T9374] dump_stack+0x15/0x1b [ 129.362033][ T9374] should_fail_ex+0x265/0x280 [ 129.362052][ T9374] should_failslab+0x8c/0xb0 [ 129.362102][ T9374] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 129.362133][ T9374] ? sidtab_sid2str_get+0xa0/0x130 [ 129.362263][ T9374] kmemdup_noprof+0x2b/0x70 [ 129.362287][ T9374] sidtab_sid2str_get+0xa0/0x130 [ 129.362377][ T9374] security_sid_to_context_core+0x1eb/0x2e0 [ 129.362406][ T9374] security_sid_to_context+0x27/0x40 [ 129.362511][ T9374] selinux_lsmprop_to_secctx+0x67/0xf0 [ 129.362539][ T9374] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 129.362561][ T9374] audit_log_subj_ctx+0xa4/0x3e0 [ 129.362591][ T9374] ? skb_put+0xa9/0xf0 [ 129.362676][ T9374] audit_log_task_context+0x48/0x70 [ 129.362700][ T9374] audit_log_task+0xf4/0x250 [ 129.362740][ T9374] audit_seccomp+0x61/0x100 [ 129.362773][ T9374] ? __seccomp_filter+0x82d/0x1250 [ 129.362797][ T9374] __seccomp_filter+0x83e/0x1250 [ 129.362826][ T9374] ? fdget+0x105/0x110 [ 129.362852][ T9374] ? do_mq_timedreceive+0x193/0x6d0 [ 129.362929][ T9374] __secure_computing+0x82/0x150 [ 129.362957][ T9374] syscall_trace_enter+0xcf/0x1e0 [ 129.362986][ T9374] do_syscall_64+0xac/0x200 [ 129.363005][ T9374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.363085][ T9374] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.363129][ T9374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.363150][ T9374] RIP: 0033:0x7fa4e8cbd9dc [ 129.363166][ T9374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.363185][ T9374] RSP: 002b:00007fa4e7706030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.363205][ T9374] RAX: ffffffffffffffda RBX: 00007fa4e8f16090 RCX: 00007fa4e8cbd9dc [ 129.363246][ T9374] RDX: 000000000000000f RSI: 00007fa4e77060a0 RDI: 0000000000000004 [ 129.363259][ T9374] RBP: 00007fa4e7706090 R08: 0000000000000000 R09: 0000000000000000 [ 129.363313][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.363324][ T9374] R13: 00007fa4e8f16128 R14: 00007fa4e8f16090 R15: 00007ffd4ffd5a08 [ 129.363340][ T9374] [ 129.364952][ T9360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.620438][ T9360] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.634577][ T9379] loop6: detected capacity change from 0 to 1024 [ 129.641461][ T9379] EXT4-fs: inline encryption not supported [ 129.644888][ T9360] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2015'. [ 129.647300][ T9379] EXT4-fs: Ignoring removed i_version option [ 129.662712][ T9379] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.673981][ T9352] lo speed is unknown, defaulting to 1000 [ 129.674629][ T9379] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2018: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.679773][ T9371] batadv0: entered promiscuous mode [ 129.679789][ T9371] batadv0: entered allmulticast mode [ 129.705328][ T9379] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2018: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.719906][ T9379] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2018: Failed to acquire dquot type 0 [ 129.723393][ T9371] bond0: (slave batadv0): Releasing backup interface [ 129.738880][ T9379] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 129.741428][ T9371] bridge0: port 3(batadv0) entered blocking state [ 129.754855][ T9371] bridge0: port 3(batadv0) entered disabled state [ 129.760540][ T9379] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2018: mark_inode_dirty error [ 129.774202][ T9370] batadv0: entered promiscuous mode [ 129.779421][ T9370] batadv0: entered allmulticast mode [ 129.779802][ T9379] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 129.795009][ T9379] EXT4-fs (loop6): 1 orphan inode deleted [ 129.801139][ T9370] bond0: (slave batadv0): Releasing backup interface [ 129.801318][ T9379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.820304][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.821778][ T9370] bridge0: port 3(batadv0) entered blocking state [ 129.835126][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 129.840979][ T9370] bridge0: port 3(batadv0) entered disabled state [ 129.859293][ T9379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.868683][ T9379] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.2018: Invalid inode table block 1 in block_group 0 [ 129.881742][ T9379] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 129.891668][ T9379] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz.6.2018: mark_inode_dirty error [ 129.900330][ T9382] lo speed is unknown, defaulting to 1000 [ 129.940913][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.975703][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 129.975718][ T29] audit: type=1326 audit(129.954:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 130.005154][ T29] audit: type=1326 audit(129.954:22357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3286efc9 code=0x7ffc0000 [ 130.012607][ T9370] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2018'. [ 130.029389][ T29] audit: type=1326 audit(129.984:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 130.059977][ T29] audit: type=1326 audit(129.984:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 130.082882][ T29] audit: type=1326 audit(129.994:22360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 130.105785][ T29] audit: type=1326 audit(129.994:22361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742dd00ee7 code=0x7ffc0000 [ 130.129142][ T29] audit: type=1326 audit(129.994:22362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f742dd00e5c code=0x7ffc0000 [ 130.152111][ T4358] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 130.152127][ T4358] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 130.152188][ T4358] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 130.152219][ T4358] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 130.188999][ T29] audit: type=1326 audit(129.994:22363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f742dd00d94 code=0x7ffc0000 [ 130.211834][ T29] audit: type=1326 audit(129.994:22364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f742dd00d94 code=0x7ffc0000 [ 130.234906][ T29] audit: type=1326 audit(129.994:22365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.6.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f742dcfdc2a code=0x7ffc0000 [ 130.298788][ T9398] FAULT_INJECTION: forcing a failure. [ 130.298788][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 130.311629][ T9398] CPU: 1 UID: 0 PID: 9398 Comm: syz.4.2027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.311722][ T9398] Tainted: [W]=WARN [ 130.311729][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.311743][ T9398] Call Trace: [ 130.311749][ T9398] [ 130.311757][ T9398] __dump_stack+0x1d/0x30 [ 130.311843][ T9398] dump_stack_lvl+0xe8/0x140 [ 130.311861][ T9398] dump_stack+0x15/0x1b [ 130.311880][ T9398] should_fail_ex+0x265/0x280 [ 130.311901][ T9398] should_failslab+0x8c/0xb0 [ 130.312090][ T9398] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 130.312178][ T9398] ? __alloc_skb+0x101/0x320 [ 130.312281][ T9398] __alloc_skb+0x101/0x320 [ 130.312309][ T9398] netlink_alloc_large_skb+0xbf/0xf0 [ 130.312411][ T9398] netlink_sendmsg+0x3cf/0x6b0 [ 130.312433][ T9398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.312454][ T9398] __sock_sendmsg+0x145/0x180 [ 130.312481][ T9398] ____sys_sendmsg+0x31e/0x4e0 [ 130.312553][ T9398] ___sys_sendmsg+0x17b/0x1d0 [ 130.312600][ T9398] __x64_sys_sendmsg+0xd4/0x160 [ 130.312635][ T9398] x64_sys_call+0x191e/0x3000 [ 130.312656][ T9398] do_syscall_64+0xd2/0x200 [ 130.312696][ T9398] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.312730][ T9398] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.312825][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.312909][ T9398] RIP: 0033:0x7fbe3286efc9 [ 130.312925][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.312943][ T9398] RSP: 002b:00007fbe312d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.313021][ T9398] RAX: ffffffffffffffda RBX: 00007fbe32ac5fa0 RCX: 00007fbe3286efc9 [ 130.313035][ T9398] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 130.313048][ T9398] RBP: 00007fbe312d7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.313059][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.313145][ T9398] R13: 00007fbe32ac6038 R14: 00007fbe32ac5fa0 R15: 00007ffd0e635908 [ 130.313165][ T9398] [ 130.592548][ T9401] lo speed is unknown, defaulting to 1000 [ 130.692951][ T9421] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 130.700974][ T9421] batadv0: left allmulticast mode [ 130.706029][ T9421] batadv0: left promiscuous mode [ 130.711226][ T9421] bridge0: port 1(batadv0) entered disabled state [ 130.733365][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.745704][ T9421] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 130.759408][ T9429] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 130.767364][ T9429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2035'. [ 130.778720][ T9429] batadv0: entered promiscuous mode [ 130.784091][ T9429] batadv0: entered allmulticast mode [ 130.790526][ T9429] bond0: (slave batadv0): Releasing backup interface [ 130.816086][ T9436] binfmt_misc: register: failed to install interpreter file ./file0 [ 130.832270][ T9429] bridge0: port 1(batadv0) entered blocking state [ 130.838786][ T9429] bridge0: port 1(batadv0) entered disabled state [ 130.840313][ T9421] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2035'. [ 130.864915][ T9436] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 130.965247][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2049'. [ 130.985738][ T9451] binfmt_misc: register: failed to install interpreter file ./file0 [ 131.005320][ T9451] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 131.098869][ T9464] lo speed is unknown, defaulting to 1000 [ 131.164421][ T9475] loop4: detected capacity change from 0 to 1024 [ 131.192084][ T9500] loop8: detected capacity change from 0 to 1024 [ 131.199438][ T9500] EXT4-fs: Ignoring removed nobh option [ 131.205091][ T9500] EXT4-fs: Ignoring removed bh option [ 131.206074][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2056'. [ 131.221454][ T9475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.233067][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.242283][ T9500] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 131.254164][ T9475] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2057: bg 0: block 88: padding at end of block bitmap is not set [ 131.272842][ T9475] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 131.290294][ T9475] batadv0: left allmulticast mode [ 131.295433][ T9475] batadv0: left promiscuous mode [ 131.300538][ T9475] bridge0: port 3(batadv0) entered disabled state [ 131.309011][ T9500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.324304][ T9527] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 131.332405][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2057'. [ 131.345432][ T9475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.353833][ T9475] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.364604][ T9527] batadv0: entered promiscuous mode [ 131.369912][ T9527] batadv0: entered allmulticast mode [ 131.376863][ T9527] bond0: (slave batadv0): Releasing backup interface [ 131.387609][ T9527] bridge0: port 3(batadv0) entered blocking state [ 131.394425][ T9527] bridge0: port 3(batadv0) entered disabled state [ 131.408983][ T9500] lo speed is unknown, defaulting to 1000 [ 131.409306][ T9475] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2057'. [ 131.465862][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.535072][ T9597] FAULT_INJECTION: forcing a failure. [ 131.535072][ T9597] name failslab, interval 1, probability 0, space 0, times 0 [ 131.547829][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.6.2065 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.547862][ T9597] Tainted: [W]=WARN [ 131.547868][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.547880][ T9597] Call Trace: [ 131.547887][ T9597] [ 131.547895][ T9597] __dump_stack+0x1d/0x30 [ 131.547915][ T9597] dump_stack_lvl+0xe8/0x140 [ 131.548012][ T9597] dump_stack+0x15/0x1b [ 131.548027][ T9597] should_fail_ex+0x265/0x280 [ 131.548043][ T9597] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 131.548110][ T9597] should_failslab+0x8c/0xb0 [ 131.548160][ T9597] __kmalloc_cache_noprof+0x4c/0x4a0 [ 131.548189][ T9597] ftrace_profile_set_filter+0xc2/0x1b0 [ 131.548284][ T9597] perf_ioctl+0x7b3/0x12e0 [ 131.548313][ T9597] ? ioctl_has_perm+0x289/0x2a0 [ 131.548361][ T9597] ? do_vfs_ioctl+0x866/0xe10 [ 131.548379][ T9597] ? selinux_file_ioctl+0x308/0x3a0 [ 131.548407][ T9597] ? __fget_files+0x184/0x1c0 [ 131.548430][ T9597] ? __pfx_perf_ioctl+0x10/0x10 [ 131.548452][ T9597] __se_sys_ioctl+0xce/0x140 [ 131.548470][ T9597] __x64_sys_ioctl+0x43/0x50 [ 131.548597][ T9597] x64_sys_call+0x1816/0x3000 [ 131.548616][ T9597] do_syscall_64+0xd2/0x200 [ 131.548660][ T9597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.548684][ T9597] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.548711][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.548729][ T9597] RIP: 0033:0x7f742dcfefc9 [ 131.548769][ T9597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.548784][ T9597] RSP: 002b:00007f742c75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.548800][ T9597] RAX: ffffffffffffffda RBX: 00007f742df55fa0 RCX: 00007f742dcfefc9 [ 131.548811][ T9597] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000003 [ 131.548822][ T9597] RBP: 00007f742c75f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.548832][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.548899][ T9597] R13: 00007f742df56038 R14: 00007f742df55fa0 R15: 00007ffcae5eea58 [ 131.548914][ T9597] [ 131.777279][ T7061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.852299][ T9608] loop6: detected capacity change from 0 to 512 [ 131.858888][ T9608] EXT4-fs: Ignoring removed i_version option [ 131.862854][ T9610] lo speed is unknown, defaulting to 1000 [ 131.865108][ T9608] EXT4-fs: Ignoring removed bh option [ 131.919003][ T9608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.950548][ T9617] loop4: detected capacity change from 0 to 512 [ 131.957151][ T9617] EXT4-fs: Ignoring removed oldalloc option [ 131.968385][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.991474][ T9617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.027937][ T9630] loop8: detected capacity change from 0 to 1024 [ 132.034822][ T9630] EXT4-fs: Ignoring removed nobh option [ 132.040483][ T9630] EXT4-fs: Ignoring removed bh option [ 132.048604][ T9630] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 132.052890][ T9635] loop6: detected capacity change from 0 to 512 [ 132.064876][ T3407] IPVS: starting estimator thread 0... [ 132.065323][ T9635] EXT4-fs: Ignoring removed i_version option [ 132.076732][ T9635] EXT4-fs: Ignoring removed bh option [ 132.080843][ T9630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.083116][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.112596][ T9635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.138046][ T9630] lo speed is unknown, defaulting to 1000 [ 132.203407][ T9643] loop4: detected capacity change from 0 to 8192 [ 132.226769][ T9645] selinux_netlink_send: 120 callbacks suppressed [ 132.226785][ T9645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9645 comm=syz.6.2079 [ 132.259988][ T4358] IPVS: stop unused estimator thread 0... [ 132.362057][ T7061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.404451][ T9657] loop4: detected capacity change from 0 to 2048 [ 132.439965][ T9657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.479286][ T9665] lo speed is unknown, defaulting to 1000 [ 132.527049][ T9667] loop8: detected capacity change from 0 to 512 [ 132.540528][ T9667] EXT4-fs: Ignoring removed oldalloc option [ 132.565026][ T9667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.586922][ T10] IPVS: starting estimator thread 0... [ 132.609211][ T9668] lo speed is unknown, defaulting to 1000 [ 132.665945][ T7061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.689645][ T9671] IPVS: using max 3072 ests per chain, 153600 per kthread [ 132.701096][ T9672] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2088: bg 0: block 345: padding at end of block bitmap is not set [ 132.715794][ T9672] EXT4-fs (loop4): Remounting filesystem read-only [ 132.746817][ T5764] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 132.785574][ T9678] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.802286][ T4358] IPVS: stop unused estimator thread 0... [ 132.824045][ T9685] FAULT_INJECTION: forcing a failure. [ 132.824045][ T9685] name failslab, interval 1, probability 0, space 0, times 0 [ 132.836795][ T9685] CPU: 0 UID: 0 PID: 9685 Comm: syz.1.2094 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.836864][ T9685] Tainted: [W]=WARN [ 132.836880][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.836891][ T9685] Call Trace: [ 132.836898][ T9685] [ 132.836907][ T9685] __dump_stack+0x1d/0x30 [ 132.836932][ T9685] dump_stack_lvl+0xe8/0x140 [ 132.836954][ T9685] dump_stack+0x15/0x1b [ 132.836974][ T9685] should_fail_ex+0x265/0x280 [ 132.836999][ T9685] ? ceph_key_preparse+0x96/0x140 [ 132.837033][ T9685] should_failslab+0x8c/0xb0 [ 132.837064][ T9685] __kmalloc_cache_noprof+0x4c/0x4a0 [ 132.837208][ T9685] ceph_key_preparse+0x96/0x140 [ 132.837242][ T9685] __key_create_or_update+0x28b/0x750 [ 132.837293][ T9685] ? key_validate+0xad/0xd0 [ 132.837319][ T9685] key_create_or_update+0x42/0x60 [ 132.837348][ T9685] __se_sys_add_key+0x29b/0x350 [ 132.837460][ T9685] __x64_sys_add_key+0x67/0x80 [ 132.837570][ T9685] x64_sys_call+0x28c8/0x3000 [ 132.837591][ T9685] do_syscall_64+0xd2/0x200 [ 132.837608][ T9685] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.837736][ T9685] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.837767][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.837789][ T9685] RIP: 0033:0x7fa4e8cbefc9 [ 132.837804][ T9685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.837881][ T9685] RSP: 002b:00007fa4e7727038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 132.837900][ T9685] RAX: ffffffffffffffda RBX: 00007fa4e8f15fa0 RCX: 00007fa4e8cbefc9 [ 132.837912][ T9685] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 132.837925][ T9685] RBP: 00007fa4e7727090 R08: 000000001f693aaf R09: 0000000000000000 [ 132.837936][ T9685] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 132.838053][ T9685] R13: 00007fa4e8f16038 R14: 00007fa4e8f15fa0 R15: 00007ffd4ffd5a08 [ 132.838071][ T9685] [ 133.058544][ T9678] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.060499][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.086618][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.137680][ T9698] FAULT_INJECTION: forcing a failure. [ 133.137680][ T9698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.150870][ T9698] CPU: 1 UID: 0 PID: 9698 Comm: syz.4.2099 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.150929][ T9698] Tainted: [W]=WARN [ 133.150935][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.150947][ T9698] Call Trace: [ 133.150953][ T9698] [ 133.150960][ T9698] __dump_stack+0x1d/0x30 [ 133.150984][ T9698] dump_stack_lvl+0xe8/0x140 [ 133.151005][ T9698] dump_stack+0x15/0x1b [ 133.151072][ T9698] should_fail_ex+0x265/0x280 [ 133.151089][ T9698] should_fail+0xb/0x20 [ 133.151103][ T9698] should_fail_usercopy+0x1a/0x20 [ 133.151123][ T9698] _copy_from_user+0x1c/0xb0 [ 133.151154][ T9698] ucma_destroy_id+0x80/0x1d0 [ 133.151181][ T9698] ucma_write+0x1b3/0x250 [ 133.151203][ T9698] ? __pfx_ucma_write+0x10/0x10 [ 133.151227][ T9698] vfs_write+0x269/0x960 [ 133.151284][ T9698] ? __rcu_read_unlock+0x4f/0x70 [ 133.151385][ T9698] ? __fget_files+0x184/0x1c0 [ 133.151414][ T9698] ksys_write+0xda/0x1a0 [ 133.151585][ T9698] __x64_sys_write+0x40/0x50 [ 133.151608][ T9698] x64_sys_call+0x2802/0x3000 [ 133.151629][ T9698] do_syscall_64+0xd2/0x200 [ 133.151650][ T9698] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.151710][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.151733][ T9698] RIP: 0033:0x7fbe3286efc9 [ 133.151766][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.151856][ T9698] RSP: 002b:00007fbe312d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.151876][ T9698] RAX: ffffffffffffffda RBX: 00007fbe32ac5fa0 RCX: 00007fbe3286efc9 [ 133.151888][ T9698] RDX: 0000000000000018 RSI: 0000200000000f80 RDI: 0000000000000003 [ 133.151899][ T9698] RBP: 00007fbe312d7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.151910][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.151921][ T9698] R13: 00007fbe32ac6038 R14: 00007fbe32ac5fa0 R15: 00007ffd0e635908 [ 133.151938][ T9698] [ 133.158420][ T9678] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.198503][ T9703] netlink: 'syz.4.2102': attribute type 39 has an invalid length. [ 133.433371][ T9678] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.473335][ T36] hid_parser_main: 31 callbacks suppressed [ 133.473381][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.486712][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.494288][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.502173][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.509584][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.517127][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.524600][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.532214][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.539852][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.547300][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.555484][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 133.579435][ T5756] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.596153][ T5756] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.607961][ T5756] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.624198][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.810723][ T9739] lo speed is unknown, defaulting to 1000 [ 133.923175][ T9751] netlink: 'syz.8.2118': attribute type 39 has an invalid length. [ 133.970815][ T9757] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 133.978715][ T9757] batadv0: left promiscuous mode [ 133.983814][ T9757] batadv0: left allmulticast mode [ 133.991275][ T9757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.999461][ T9757] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 134.012167][ T9759] lo speed is unknown, defaulting to 1000 [ 134.013315][ T9757] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 134.025868][ T9757] batadv0: entered promiscuous mode [ 134.031103][ T9757] batadv0: entered allmulticast mode [ 134.037955][ T9757] bond0: (slave batadv0): Releasing backup interface [ 134.061954][ T9757] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 134.082923][ T9763] SELinux: Context Ü is not valid (left unmapped). [ 134.111892][ T9763] loop8: detected capacity change from 0 to 128 [ 134.119383][ T9763] FAT-fs (loop8): bogus sectors per cluster 0 [ 134.125651][ T9763] FAT-fs (loop8): Can't find a valid FAT filesystem [ 134.169606][ T9768] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 134.274997][ T9776] lo speed is unknown, defaulting to 1000 [ 134.354104][ T9782] netlink: 'syz.8.2133': attribute type 39 has an invalid length. [ 134.370695][ T9788] FAULT_INJECTION: forcing a failure. [ 134.370695][ T9788] name failslab, interval 1, probability 0, space 0, times 0 [ 134.372894][ T9782] __nla_validate_parse: 7 callbacks suppressed [ 134.372908][ T9782] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.2133'. [ 134.383470][ T9788] CPU: 0 UID: 0 PID: 9788 Comm: syz.1.2136 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.383504][ T9788] Tainted: [W]=WARN [ 134.383511][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.383550][ T9788] Call Trace: [ 134.383558][ T9788] [ 134.383565][ T9788] __dump_stack+0x1d/0x30 [ 134.383586][ T9788] dump_stack_lvl+0xe8/0x140 [ 134.383663][ T9788] dump_stack+0x15/0x1b [ 134.383681][ T9788] should_fail_ex+0x265/0x280 [ 134.383701][ T9788] should_failslab+0x8c/0xb0 [ 134.383752][ T9788] kmem_cache_alloc_noprof+0x50/0x480 [ 134.383781][ T9788] ? skb_clone+0x151/0x1f0 [ 134.383870][ T9788] skb_clone+0x151/0x1f0 [ 134.383888][ T9788] __netlink_deliver_tap+0x2c9/0x500 [ 134.383974][ T9788] ? netlink_attachskb+0x2cc/0x650 [ 134.384010][ T9788] netlink_sendskb+0x126/0x150 [ 134.384088][ T9788] netlink_unicast+0x2a2/0x690 [ 134.384120][ T9788] netlink_ack+0x4c8/0x500 [ 134.384153][ T9788] netlink_rcv_skb+0x192/0x220 [ 134.384183][ T9788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.384226][ T9788] rtnetlink_rcv+0x1c/0x30 [ 134.384247][ T9788] netlink_unicast+0x5c0/0x690 [ 134.384278][ T9788] netlink_sendmsg+0x58b/0x6b0 [ 134.384299][ T9788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.384363][ T9788] __sock_sendmsg+0x145/0x180 [ 134.384388][ T9788] ____sys_sendmsg+0x31e/0x4e0 [ 134.384423][ T9788] ___sys_sendmsg+0x17b/0x1d0 [ 134.384527][ T9788] __x64_sys_sendmsg+0xd4/0x160 [ 134.384563][ T9788] x64_sys_call+0x191e/0x3000 [ 134.384643][ T9788] do_syscall_64+0xd2/0x200 [ 134.384662][ T9788] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.384694][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.384785][ T9788] RIP: 0033:0x7fa4e8cbefc9 [ 134.384800][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.384818][ T9788] RSP: 002b:00007fa4e7727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.384837][ T9788] RAX: ffffffffffffffda RBX: 00007fa4e8f15fa0 RCX: 00007fa4e8cbefc9 [ 134.384850][ T9788] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c [ 134.384896][ T9788] RBP: 00007fa4e7727090 R08: 0000000000000000 R09: 0000000000000000 [ 134.384925][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.384938][ T9788] R13: 00007fa4e8f16038 R14: 00007fa4e8f15fa0 R15: 00007ffd4ffd5a08 [ 134.384958][ T9788] [ 134.493264][ T9794] FAULT_INJECTION: forcing a failure. [ 134.493264][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 134.649260][ T9794] CPU: 0 UID: 0 PID: 9794 Comm: syz.6.2137 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.649281][ T9794] Tainted: [W]=WARN [ 134.649285][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.649292][ T9794] Call Trace: [ 134.649297][ T9794] [ 134.649330][ T9794] __dump_stack+0x1d/0x30 [ 134.649344][ T9794] dump_stack_lvl+0xe8/0x140 [ 134.649356][ T9794] dump_stack+0x15/0x1b [ 134.649366][ T9794] should_fail_ex+0x265/0x280 [ 134.649377][ T9794] ? sctp_transport_new+0x69/0x3e0 [ 134.649443][ T9794] should_failslab+0x8c/0xb0 [ 134.649460][ T9794] __kmalloc_cache_noprof+0x4c/0x4a0 [ 134.649478][ T9794] sctp_transport_new+0x69/0x3e0 [ 134.649529][ T9794] sctp_assoc_add_peer+0x1a7/0xb20 [ 134.649555][ T9794] ? sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 134.649573][ T9794] sctp_connect_new_asoc+0x1eb/0x3a0 [ 134.649667][ T9794] sctp_sendmsg+0xf10/0x18d0 [ 134.649684][ T9794] ? selinux_socket_sendmsg+0x121/0x1b0 [ 134.649700][ T9794] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.649712][ T9794] inet_sendmsg+0xc5/0xd0 [ 134.649846][ T9794] __sock_sendmsg+0x102/0x180 [ 134.649861][ T9794] __sys_sendto+0x268/0x330 [ 134.649887][ T9794] __x64_sys_sendto+0x76/0x90 [ 134.649947][ T9794] x64_sys_call+0x2d14/0x3000 [ 134.649959][ T9794] do_syscall_64+0xd2/0x200 [ 134.649970][ T9794] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.650060][ T9794] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.650077][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.650089][ T9794] RIP: 0033:0x7f742dcfefc9 [ 134.650099][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.650154][ T9794] RSP: 002b:00007f742c75f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 134.650165][ T9794] RAX: ffffffffffffffda RBX: 00007f742df55fa0 RCX: 00007f742dcfefc9 [ 134.650173][ T9794] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 134.650180][ T9794] RBP: 00007f742c75f090 R08: 0000200000000200 R09: 000000000000001c [ 134.650187][ T9794] R10: 000000002004c841 R11: 0000000000000246 R12: 0000000000000001 [ 134.650194][ T9794] R13: 00007f742df56038 R14: 00007f742df55fa0 R15: 00007ffcae5eea58 [ 134.650205][ T9794] [ 134.999781][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 134.999795][ T29] audit: type=1326 audit(134.964:23231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.028938][ T29] audit: type=1326 audit(134.964:23232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.051905][ T29] audit: type=1326 audit(134.964:23233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.075094][ T29] audit: type=1326 audit(134.964:23234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.098317][ T29] audit: type=1326 audit(134.964:23235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.121230][ T29] audit: type=1326 audit(134.964:23236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.144306][ T29] audit: type=1326 audit(134.964:23237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.167341][ T29] audit: type=1326 audit(134.964:23238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.190136][ T29] audit: type=1326 audit(134.964:23239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.213039][ T29] audit: type=1326 audit(134.964:23240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.6.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742dcfefc9 code=0x7ffc0000 [ 135.357133][ T9830] lo speed is unknown, defaulting to 1000 [ 135.462861][ T9830] lo speed is unknown, defaulting to 1000 [ 135.707516][ T9834] loop6: detected capacity change from 0 to 4096 [ 135.737323][ T9834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.829899][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.855199][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2157'. [ 135.864777][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2157'. [ 135.894811][ T9845] veth1_macvtap: left promiscuous mode [ 135.930546][ T9851] netlink: 'syz.1.2160': attribute type 30 has an invalid length. [ 135.941771][ T9852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.004449][ T9854] FAULT_INJECTION: forcing a failure. [ 136.004449][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.017609][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.3.2161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.017640][ T9854] Tainted: [W]=WARN [ 136.017645][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.017656][ T9854] Call Trace: [ 136.017663][ T9854] [ 136.017671][ T9854] __dump_stack+0x1d/0x30 [ 136.017739][ T9854] dump_stack_lvl+0xe8/0x140 [ 136.017759][ T9854] dump_stack+0x15/0x1b [ 136.017777][ T9854] should_fail_ex+0x265/0x280 [ 136.017795][ T9854] should_fail+0xb/0x20 [ 136.017818][ T9854] should_fail_usercopy+0x1a/0x20 [ 136.017869][ T9854] strncpy_from_user+0x25/0x230 [ 136.017940][ T9854] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 136.017974][ T9854] __se_sys_memfd_create+0x1ff/0x590 [ 136.018002][ T9854] __x64_sys_memfd_create+0x31/0x40 [ 136.018154][ T9854] x64_sys_call+0x2ac2/0x3000 [ 136.018180][ T9854] do_syscall_64+0xd2/0x200 [ 136.018199][ T9854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.018262][ T9854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.018292][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.018313][ T9854] RIP: 0033:0x7fab8e2cefc9 [ 136.018329][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.018367][ T9854] RSP: 002b:00007fab8cd2ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 136.018387][ T9854] RAX: ffffffffffffffda RBX: 0000000000000617 RCX: 00007fab8e2cefc9 [ 136.018447][ T9854] RDX: 00007fab8cd2eef0 RSI: 0000000000000000 RDI: 00007fab8e352960 [ 136.018460][ T9854] RBP: 0000200000001080 R08: 00007fab8cd2ebb7 R09: 00007fab8cd2ee40 [ 136.018473][ T9854] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 136.018486][ T9854] R13: 00007fab8cd2eef0 R14: 00007fab8cd2eeb0 R15: 0000200000000540 [ 136.018503][ T9854] [ 136.455777][ T9884] netlink: 'syz.1.2168': attribute type 39 has an invalid length. [ 136.465634][ T9884] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2168'. [ 136.492545][ T9888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.600830][ T9904] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2171'. [ 136.700470][ T9910] loop4: detected capacity change from 0 to 1024 [ 136.707486][ T9910] EXT4-fs: Ignoring removed nobh option [ 136.713113][ T9910] EXT4-fs: Ignoring removed bh option [ 136.719295][ T9910] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 136.725916][ T9912] FAULT_INJECTION: forcing a failure. [ 136.725916][ T9912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.742110][ T9912] CPU: 0 UID: 0 PID: 9912 Comm: syz.6.2179 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.742177][ T9912] Tainted: [W]=WARN [ 136.742183][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.742195][ T9912] Call Trace: [ 136.742201][ T9912] [ 136.742210][ T9912] __dump_stack+0x1d/0x30 [ 136.742232][ T9912] dump_stack_lvl+0xe8/0x140 [ 136.742247][ T9912] dump_stack+0x15/0x1b [ 136.742268][ T9912] should_fail_ex+0x265/0x280 [ 136.742329][ T9912] should_fail+0xb/0x20 [ 136.742338][ T9912] should_fail_usercopy+0x1a/0x20 [ 136.742350][ T9912] _copy_from_user+0x1c/0xb0 [ 136.742388][ T9912] __copy_msghdr+0x244/0x300 [ 136.742407][ T9912] ___sys_sendmsg+0x109/0x1d0 [ 136.742482][ T9912] __x64_sys_sendmsg+0xd4/0x160 [ 136.742524][ T9912] x64_sys_call+0x191e/0x3000 [ 136.742537][ T9912] do_syscall_64+0xd2/0x200 [ 136.742548][ T9912] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.742631][ T9912] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.742705][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.742717][ T9912] RIP: 0033:0x7f742dcfefc9 [ 136.742758][ T9912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.742769][ T9912] RSP: 002b:00007f742c75f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.742780][ T9912] RAX: ffffffffffffffda RBX: 00007f742df55fa0 RCX: 00007f742dcfefc9 [ 136.742787][ T9912] RDX: 0000000000004080 RSI: 0000200000000340 RDI: 0000000000000005 [ 136.742795][ T9912] RBP: 00007f742c75f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.742801][ T9912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.742808][ T9912] R13: 00007f742df56038 R14: 00007f742df55fa0 R15: 00007ffcae5eea58 [ 136.742819][ T9912] [ 136.940927][ T9913] lo speed is unknown, defaulting to 1000 [ 136.992709][ T9910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.061429][ T9922] loop6: detected capacity change from 0 to 2048 [ 137.071275][ T9922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.137408][ T9926] ================================================================== [ 137.145527][ T9926] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 137.152752][ T9926] [ 137.155075][ T9926] read-write to 0xffff888119e8b220 of 8 bytes by task 9922 on cpu 0: [ 137.163135][ T9926] __xa_set_mark+0xd2/0x1a0 [ 137.167736][ T9926] __folio_mark_dirty+0x384/0x4a0 [ 137.172769][ T9926] mark_buffer_dirty+0x11e/0x210 [ 137.177718][ T9926] folio_zero_new_buffers+0x28c/0x2e0 [ 137.183103][ T9926] block_write_end+0x200/0x210 [ 137.187881][ T9926] ext4_da_write_end+0x1d3/0x800 [ 137.192829][ T9926] generic_perform_write+0x312/0x490 [ 137.198116][ T9926] ext4_buffered_write_iter+0x1ee/0x3c0 [ 137.203679][ T9926] ext4_file_write_iter+0x387/0xf60 [ 137.208882][ T9926] vfs_write+0x52a/0x960 [ 137.213127][ T9926] ksys_write+0xda/0x1a0 [ 137.217369][ T9926] __x64_sys_write+0x40/0x50 [ 137.221958][ T9926] x64_sys_call+0x2802/0x3000 [ 137.226634][ T9926] do_syscall_64+0xd2/0x200 [ 137.231131][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.237056][ T9926] [ 137.239372][ T9926] read to 0xffff888119e8b220 of 8 bytes by task 9926 on cpu 1: [ 137.246896][ T9926] xas_find_marked+0x218/0x620 [ 137.251651][ T9926] find_get_entry+0x5d/0x380 [ 137.256241][ T9926] filemap_get_folios_tag+0x13b/0x210 [ 137.261613][ T9926] mpage_prepare_extent_to_map+0x320/0xc00 [ 137.267411][ T9926] ext4_do_writepages+0xa05/0x2750 [ 137.272511][ T9926] ext4_writepages+0x176/0x300 [ 137.277265][ T9926] do_writepages+0x1c6/0x310 [ 137.281846][ T9926] __filemap_fdatawrite_range+0xfb/0x140 [ 137.287471][ T9926] generic_fadvise+0x312/0x430 [ 137.292240][ T9926] __x64_sys_fadvise64+0xcb/0x110 [ 137.297248][ T9926] x64_sys_call+0x29c5/0x3000 [ 137.301921][ T9926] do_syscall_64+0xd2/0x200 [ 137.306409][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.312296][ T9926] [ 137.314603][ T9926] value changed: 0x001fffffffffffff -> 0x007fffffffffffff [ 137.321688][ T9926] [ 137.323991][ T9926] Reported by Kernel Concurrency Sanitizer on: [ 137.330124][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.6.2182 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 137.341396][ T9926] Tainted: [W]=WARN [ 137.345178][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.355216][ T9926] ================================================================== [ 137.372960][ T9927] lo speed is unknown, defaulting to 1000 [ 137.408882][ T9926] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2182: bg 0: block 345: padding at end of block bitmap is not set [ 137.428685][ T9926] EXT4-fs (loop6): Remounting filesystem read-only [ 137.468006][ T31] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 137.577731][ T9929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.642669][ T5750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.682483][ T5750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.722385][ T5750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.781789][ T5750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.832568][ T5750] bridge0: port 3(batadv0) entered disabled state [ 137.840022][ T5750] bridge_slave_1: left allmulticast mode [ 137.845687][ T5750] bridge_slave_1: left promiscuous mode [ 137.851429][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.859942][ T5750] bridge_slave_0: left allmulticast mode [ 137.865568][ T5750] bridge_slave_0: left promiscuous mode [ 137.871484][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.908622][ T6584] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.211317][ T5750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.220889][ T5750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.230214][ T5750] bond0 (unregistering): Released all slaves [ 138.297507][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.304919][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.312592][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.320022][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.329164][ T5750] veth1_macvtap: left promiscuous mode [ 138.334693][ T5750] veth0_macvtap: left promiscuous mode [ 138.340354][ T5750] veth1_vlan: left promiscuous mode [ 138.345731][ T5750] veth0_vlan: left promiscuous mode [ 138.672248][ T5750] IPVS: stop unused estimator thread 0...