last executing test programs: 4m6.996023303s ago: executing program 2 (id=435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0xb, 0x0, 0x491, 0x0, 0x0, 0x0, 0x4, 0x2}}, {0x8, 0x1b, [0x4, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 4m6.914185604s ago: executing program 2 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x306, @local}, 0xa, {0x2, 0x4e24, @empty}, 'team_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='filemap_set_wb_err\x00', 0xffffffffffffffff, 0x0, 0xfffffefffffffffe}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x83be, 0x1046, 0x0, 0x264}) uname(&(0x7f0000000000)=""/174) socket(0x2, 0x3, 0xff) 4m6.700947837s ago: executing program 2 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x7, 0x2, 0xc3b, 0x44, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0xc, 0x2, 0x5, 0xfffffffffffffffc, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) getegid() socket$inet_tcp(0x2, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x40) 4m6.556318289s ago: executing program 2 (id=447): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='svcrdma_decode_short_err\x00', r2}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, r1, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x80000001, &(0x7f00000003c0)) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x0, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x80004}, 0x18) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r8, 0x4b45, 0x3) 4m6.357852743s ago: executing program 2 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @multicast1}, {0x306, @local}, 0xa, {0x2, 0x4e24, @empty}, 'team_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='filemap_set_wb_err\x00', 0xffffffffffffffff, 0x0, 0xfffffefffffffffe}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x83be, 0x1046, 0x0, 0x264}) uname(&(0x7f0000000000)=""/174) socket(0x2, 0x3, 0xff) 4m5.252394519s ago: executing program 2 (id=467): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000d00)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0xfffffffffffffffd, 0x81, 0x7fffffff, 0x100000000}, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m5.226598529s ago: executing program 32 (id=467): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000d00)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0xfffffffffffffffd, 0x81, 0x7fffffff, 0x100000000}, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2m18.537608465s ago: executing program 0 (id=2611): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x256) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x404001c}, 0x4000810) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$packet(r2, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x8, 0x6, @remote}, 0x14) 2m18.447756937s ago: executing program 0 (id=2612): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = syz_open_procfs(0x0, &(0x7f0000002600)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000080)=""/110, 0x6e, 0x36) lseek(r0, 0x2, 0x1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 2m18.359346648s ago: executing program 0 (id=2615): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffd3fff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f9}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f0000001080)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000200000dae20000000085000000ae00000095", @ANYRESDEC=r4], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x1000}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) 2m18.212022s ago: executing program 0 (id=2618): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2a) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='lock '], 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r4 = socket(0x2a, 0x2, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x58, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0xffffffff}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c040000000000200012800800010067747000140002800500050001000000080004000100000038af393c04b8a1550c44466fd6676b9526f9ea412fca8f4167"], 0x40}}, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) 2m18.107111332s ago: executing program 0 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setrlimit(0x4, &(0x7f00000005c0)={0x5, 0x1}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000045"], 0x58) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r6, @ANYRESDEC=r3, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r13 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r3, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r7, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYRES8=r8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES32=r13, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e23, 0xfffd, 0xa, 0x80, 0xa0, 0x3c, r2}, {0x2, 0x3, 0x9, 0x5c1, 0x1, 0xde, 0xfffffffffffffffb, 0x7}, {0x5, 0x1, 0x2, 0x3}, 0xffff16e6, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x5f}, 0x2, @in=@local, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xff800, 0x4}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") 2m17.308777174s ago: executing program 0 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x2, 0x0) mq_timedsend(r3, &(0x7f0000000600)="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", 0x2000, 0x6, 0x0) 2m17.189992155s ago: executing program 33 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x2, 0x0) mq_timedsend(r3, &(0x7f0000000600)="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", 0x2000, 0x6, 0x0) 4.779557218s ago: executing program 4 (id=5394): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ustat(0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000300), 0xc}, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x21000}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 4.707581459s ago: executing program 4 (id=5396): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xa, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0xd6503c93e8f44fb2) 4.66715452s ago: executing program 5 (id=5397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x30}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x1, 0x0, 0x34}}}}, 0x36) 3.177868122s ago: executing program 5 (id=5401): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x2, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 2.988786925s ago: executing program 5 (id=5403): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.933757176s ago: executing program 5 (id=5406): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r0}, 0x10) openat$random(0xffffffffffffff9c, 0x0, 0x40201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.933113246s ago: executing program 5 (id=5407): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="d7", 0x1}], 0x1}}], 0x1, 0x4000855) timer_create(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f0000000000)="c1", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x8}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/../file0\x00', 0x84800, 0x24) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) listen(r5, 0x3) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) recvfrom$inet6(r5, &(0x7f0000000140)=""/4, 0x4, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000003000000000000850000000c000000b70000000000b8709e02236a979fffff000000000000000018000000000000080000000000000000000000000095008000"/77], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000200094b4e7e088823e77b2bb6b3fd32000a20000000000a050000000000000000000100fffc0900010073797a120000000040000000030a01010000000000dc11890d31127fc90000008559d9ee34bc448b43ea6bdb010000000900030073797a300000000014000480080002400000000008000140030000000900010073797a3000000000140000001100010000000000"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.784745038s ago: executing program 3 (id=5410): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 2.736545749s ago: executing program 3 (id=5411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x63) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0xf28, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r10, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000001740)=""/4096}, 0x20) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)=0x8) 2.65030982s ago: executing program 3 (id=5414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x20000840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000021fd36ee7bad8c33c6873c4ec6400080000000000"], 0x10}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x18, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRES8, @ANYRES64=r5, @ANYRES16=r4, @ANYRES8=r3, @ANYRES8=r6, @ANYRES64=0x0, @ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x1, @broadcast}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 2.476644193s ago: executing program 6 (id=5415): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 2.460669433s ago: executing program 6 (id=5416): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.384637804s ago: executing program 6 (id=5417): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r0}, 0x10) openat$random(0xffffffffffffff9c, 0x0, 0x40201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.384224454s ago: executing program 6 (id=5418): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x10000000000) 2.256514746s ago: executing program 6 (id=5419): fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) unshare(0x68040200) 2.171369257s ago: executing program 6 (id=5420): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x10) listen(r0, 0x81) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) 2.080081899s ago: executing program 5 (id=5421): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xa, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xff000000, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0xd6503c93e8f44fb2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x64, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_CACHEINFO={0x3e}]}, 0x64}}, 0x0) 1.97655132s ago: executing program 1 (id=5422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4) 1.779682763s ago: executing program 3 (id=5423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') (fail_nth: 2) 1.35573176s ago: executing program 3 (id=5424): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) (fail_nth: 4) 1.306832581s ago: executing program 4 (id=5425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setrlimit(0x4, &(0x7f00000005c0)={0x5, 0x1}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000045"], 0x58) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x50, 0x24040094}, 0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r13 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r4, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES32=r13, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e23, 0xfffd, 0xa, 0x80, 0xa0, 0x3c, r3}, {0x2, 0x3, 0x9, 0x5c1, 0x1, 0xde, 0xfffffffffffffffb, 0x7}, {0x5, 0x1, 0x2, 0x3}, 0xffff16e6, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x5f}, 0x2, @in=@local, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xff800, 0x4}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 1.000021595s ago: executing program 1 (id=5426): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 901.133236ms ago: executing program 3 (id=5427): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xa, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) 895.288027ms ago: executing program 1 (id=5428): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='objagg_obj_destroy\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000000000000000010000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ab, 0x4}, 0x100000, 0x0, 0x200000, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x0) inotify_init1(0x80000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60568, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="2f0000000000000000000000580349389b55f2b06f8be4ffdd29ddfba5258839612e4d9a529b246eb08b4ba1dadb6ea7056256a00250bb9393c9ebdcd7769f2ba462c9bb8a7ddef15e58955ca962012b40ecff13c07b71a4de9243e7484720511107", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES8=r8, @ANYRES32=0x0, @ANYRES64=r6, @ANYRES64=r1, @ANYRESHEX=r4], 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000740)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x0, 0x8, 0x6, 0x3, 0x80000001}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000640)}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) 632.369951ms ago: executing program 1 (id=5429): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000c00) 580.073461ms ago: executing program 1 (id=5430): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) write$ppp(r4, &(0x7f0000001180)="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", 0x83a) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x3, @private0, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000080)=0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) 420.407024ms ago: executing program 1 (id=5431): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="d7", 0x1}], 0x1}}], 0x1, 0x4000855) timer_create(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f0000000000)="c1", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x8}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/../file0\x00', 0x84800, 0x24) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) listen(r5, 0x3) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) recvfrom$inet6(r5, &(0x7f0000000140)=""/4, 0x4, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000003000000000000850000000c000000b70000000000b8709e02236a979fffff000000000000000018000000000000080000000000000000000000000095008000"/77], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000200094b4e7e088823e77b2bb6b3fd32000a20000000000a050000000000000000000100fffc0900010073797a120000000040000000030a01010000000000dc11890d31127fc90000008559d9ee34bc448b43ea6bdb010000000900030073797a300000000014000480080002400000000008000140030000000900010073797a3000000000140000001100010000000000"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 150.864168ms ago: executing program 4 (id=5432): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='objagg_obj_destroy\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000000000000000010000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ab, 0x4}, 0x100000, 0x0, 0x200000, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x0) inotify_init1(0x80000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60568, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="2f0000000000000000000000580349389b55f2b06f8be4ffdd29ddfba5258839612e4d9a529b246eb08b4ba1dadb6ea7056256a00250bb9393c9ebdcd7769f2ba462c9bb8a7ddef15e58955ca962012b40ecff13c07b71a4de9243e7484720511107", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES8=r8, @ANYRES32=0x0, @ANYRES64=r6, @ANYRES64=r1, @ANYRESHEX=r4], 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000740)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x0, 0x8, 0x6, 0x3, 0x80000001}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000640)}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) 80.387309ms ago: executing program 4 (id=5433): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000020000950000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'veth0_to_bridge\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=5434): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): syzkaller1: entered promiscuous mode [ 275.317231][T17638] syzkaller1: entered allmulticast mode [ 275.399257][T17644] vlan2: entered allmulticast mode [ 275.610726][T17655] netlink: 'syz.5.4765': attribute type 10 has an invalid length. [ 275.619244][T17655] ipvlan0: entered allmulticast mode [ 275.624584][T17655] veth0_vlan: entered allmulticast mode [ 275.637075][T17655] team0: Device ipvlan0 failed to register rx_handler [ 275.662805][T17655] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 275.837493][T17674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.869638][T17677] netlink: 'syz.3.4773': attribute type 13 has an invalid length. [ 275.900528][T17677] gretap0: refused to change device tx_queue_len [ 275.907015][T17677] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 276.026689][T17693] loop3: detected capacity change from 0 to 1024 [ 276.046250][T17693] EXT4-fs: Ignoring removed orlov option [ 276.152789][T17703] loop5: detected capacity change from 0 to 512 [ 276.175881][T17703] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4786: bg 0: block 16: invalid block bitmap [ 276.210251][T17703] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 276.219310][T17703] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4786: attempt to clear invalid blocks 1669132790 len 1 [ 276.234282][T17703] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4786: invalid indirect mapped block 4294967295 (level 1) [ 276.248595][T17703] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4786: invalid indirect mapped block 4294967295 (level 2) [ 276.263942][T17703] EXT4-fs (loop5): 1 truncate cleaned up [ 276.530219][T17713] $Hÿ: renamed from bond0 (while UP) [ 276.550374][T17713] $Hÿ: entered promiscuous mode [ 276.555495][T17713] bond_slave_0: entered promiscuous mode [ 276.561689][T17713] bond_slave_1: entered promiscuous mode [ 276.567561][T17713] vxlan0: entered promiscuous mode [ 276.682370][T17716] veth0_macvtap: left promiscuous mode [ 277.288854][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 277.288872][ T29] audit: type=1326 audit(1751494539.479:24334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.318853][ T29] audit: type=1326 audit(1751494539.479:24335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.342700][ T29] audit: type=1326 audit(1751494539.479:24336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.373982][ T29] audit: type=1326 audit(1751494539.559:24337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.397866][ T29] audit: type=1326 audit(1751494539.559:24338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.421686][ T29] audit: type=1326 audit(1751494539.559:24339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.445331][ T29] audit: type=1326 audit(1751494539.569:24340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.469325][ T29] audit: type=1326 audit(1751494539.569:24341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.493008][ T29] audit: type=1326 audit(1751494539.569:24342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.516645][ T29] audit: type=1326 audit(1751494539.569:24343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17727 comm="syz.1.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7effba4ee929 code=0x7ffc0000 [ 277.546646][T17718] FAULT_INJECTION: forcing a failure. [ 277.546646][T17718] name failslab, interval 1, probability 0, space 0, times 0 [ 277.559403][T17718] CPU: 1 UID: 0 PID: 17718 Comm: syz.6.4790 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 277.559441][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.559497][T17718] Call Trace: [ 277.559505][T17718] [ 277.559513][T17718] __dump_stack+0x1d/0x30 [ 277.559535][T17718] dump_stack_lvl+0xe8/0x140 [ 277.559554][T17718] dump_stack+0x15/0x1b [ 277.559576][T17718] should_fail_ex+0x265/0x280 [ 277.559641][T17718] ? kobject_uevent_env+0x1c0/0x570 [ 277.559667][T17718] should_failslab+0x8c/0xb0 [ 277.559695][T17718] __kmalloc_cache_noprof+0x4c/0x320 [ 277.559799][T17718] kobject_uevent_env+0x1c0/0x570 [ 277.559832][T17718] ? sysfs_remove_groups+0x64/0x80 [ 277.559945][T17718] kobject_uevent+0x1d/0x30 [ 277.559978][T17718] device_del+0x710/0x790 [ 277.560070][T17718] ? __try_to_del_timer_sync+0x152/0x170 [ 277.560110][T17718] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 277.560134][T17718] device_unregister+0x15/0x40 [ 277.560156][T17718] wakeup_source_sysfs_remove+0x25/0x30 [ 277.560243][T17718] wakeup_source_unregister+0xf0/0x330 [ 277.560264][T17718] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 277.560350][T17718] ep_clear_and_put+0x26f/0x2c0 [ 277.560379][T17718] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 277.560410][T17718] ep_eventpoll_release+0x2c/0x40 [ 277.560483][T17718] __fput+0x298/0x650 [ 277.560517][T17718] ____fput+0x1c/0x30 [ 277.560548][T17718] task_work_run+0x131/0x1a0 [ 277.560676][T17718] get_signal+0xe13/0xf70 [ 277.560815][T17718] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 277.560844][T17718] arch_do_signal_or_restart+0x96/0x480 [ 277.560872][T17718] exit_to_user_mode_loop+0x7a/0x100 [ 277.560896][T17718] do_syscall_64+0x1d6/0x200 [ 277.560976][T17718] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.561002][T17718] ? clear_bhb_loop+0x40/0x90 [ 277.561028][T17718] ? clear_bhb_loop+0x40/0x90 [ 277.561050][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.561121][T17718] RIP: 0033:0x7fae40c8e929 [ 277.561140][T17718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.561164][T17718] RSP: 002b:00007fae3f2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 277.561189][T17718] RAX: fffffffffffffffc RBX: 00007fae40eb5fa0 RCX: 00007fae40c8e929 [ 277.561205][T17718] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 277.561219][T17718] RBP: 00007fae3f2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 277.561285][T17718] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.561326][T17718] R13: 0000000000000000 R14: 00007fae40eb5fa0 R15: 00007ffc7fa1db68 [ 277.561415][T17718] [ 277.953481][T17743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.052786][T17745] $Hÿ: left promiscuous mode [ 278.057640][T17745] bond_slave_0: left promiscuous mode [ 278.063509][T17745] bond_slave_1: left promiscuous mode [ 278.069112][T17745] vxlan0: left promiscuous mode [ 278.097940][T17745] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 278.125090][T17745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.197445][T17766] loop5: detected capacity change from 0 to 2048 [ 278.249042][T17766] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.4807: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 278.289142][T17771] loop3: detected capacity change from 0 to 512 [ 278.305162][T17766] EXT4-fs (loop5): Remounting filesystem read-only [ 278.331699][T17771] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.353056][T17771] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.4808: corrupted xattr block 33: e_value out of bounds [ 278.374578][T17771] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 278.393548][T17771] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.4808: corrupted xattr block 33: e_value out of bounds [ 278.411365][T17771] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 278.421946][T17775] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.4808: corrupted xattr block 33: e_value out of bounds [ 278.497843][T17775] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 278.728526][T17795] netlink: 'syz.4.4816': attribute type 13 has an invalid length. [ 278.793668][T17795] gretap0: refused to change device tx_queue_len [ 278.800750][T17795] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 278.818574][T17801] loop6: detected capacity change from 0 to 1024 [ 278.818720][ T3416] lo speed is unknown, defaulting to 1000 [ 278.831519][ T3416] syz0: Port: 1 Link DOWN [ 278.836947][T17801] EXT4-fs: Ignoring removed oldalloc option [ 278.861362][T17801] EXT4-fs: Ignoring removed orlov option [ 278.867537][T17801] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 278.948512][T17812] netlink: 'syz.1.4821': attribute type 13 has an invalid length. [ 278.967953][T17812] gretap0: refused to change device tx_queue_len [ 278.974369][T17812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 279.003072][T17814] loop6: detected capacity change from 0 to 1024 [ 279.018961][T17814] EXT4-fs: Ignoring removed orlov option [ 279.798468][T17849] SELinux: policydb version 0 does not match my version range 15-34 [ 279.817005][T17849] SELinux: failed to load policy [ 279.878271][T17858] netlink: 'syz.3.4839': attribute type 13 has an invalid length. [ 279.915453][T17858] gretap0: refused to change device tx_queue_len [ 279.921967][T17858] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 280.004003][T17864] vlan2: entered allmulticast mode [ 280.157772][T17879] loop3: detected capacity change from 0 to 1024 [ 280.181860][T17879] EXT4-fs: Ignoring removed orlov option [ 280.192875][T17883] __nla_validate_parse: 7 callbacks suppressed [ 280.192889][T17883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4850'. [ 280.345647][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4851'. [ 280.368620][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4851'. [ 280.734790][T17898] netlink: 'syz.5.4853': attribute type 13 has an invalid length. [ 280.754055][T17896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4852'. [ 280.810749][T17898] gretap0: refused to change device tx_queue_len [ 280.817208][T17898] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 280.866891][T17902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.047776][T17924] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4860'. [ 281.090913][T17936] netlink: 'syz.3.4858': attribute type 13 has an invalid length. [ 281.101147][T17931] vlan2: entered allmulticast mode [ 281.111881][T17936] gretap0: refused to change device tx_queue_len [ 281.118315][T17936] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.145426][T17943] netlink: 'syz.4.4862': attribute type 13 has an invalid length. [ 281.154872][T17943] gretap0: refused to change device tx_queue_len [ 281.161358][T17943] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.240231][T17956] vlan2: entered allmulticast mode [ 281.252091][T17957] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4864'. [ 281.293840][T17964] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4867'. [ 281.343747][T17969] loop6: detected capacity change from 0 to 1024 [ 281.351908][T17969] EXT4-fs: Ignoring removed orlov option [ 282.070568][T18024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4878'. [ 282.122955][T11194] EXT4-fs unmount: 31 callbacks suppressed [ 282.122971][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.217571][T18053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.272517][T18057] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4881'. [ 282.304307][ T29] kauditd_printk_skb: 2271 callbacks suppressed [ 282.304324][ T29] audit: type=1326 audit(1751494544.499:26615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0faa9858e7 code=0x7ffc0000 [ 282.365093][ T29] audit: type=1326 audit(1751494544.539:26616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0faa92ab19 code=0x7ffc0000 [ 282.388915][ T29] audit: type=1326 audit(1751494544.539:26617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0faa9858e7 code=0x7ffc0000 [ 282.412587][ T29] audit: type=1326 audit(1751494544.539:26618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0faa92ab19 code=0x7ffc0000 [ 282.436227][ T29] audit: type=1326 audit(1751494544.539:26619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 282.459869][ T29] audit: type=1326 audit(1751494544.539:26620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0faa9858e7 code=0x7ffc0000 [ 282.483959][ T29] audit: type=1326 audit(1751494544.539:26621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0faa92ab19 code=0x7ffc0000 [ 282.507598][ T29] audit: type=1326 audit(1751494544.539:26622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 282.531247][ T29] audit: type=1326 audit(1751494544.549:26623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0faa9858e7 code=0x7ffc0000 [ 282.554832][ T29] audit: type=1326 audit(1751494544.549:26624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18009 comm="syz.4.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0faa92ab19 code=0x7ffc0000 [ 282.622942][T18079] loop6: detected capacity change from 0 to 1024 [ 282.639002][T18079] EXT4-fs: Ignoring removed orlov option [ 282.661679][T18079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.679984][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4887'. [ 282.698342][T18087] veth0_macvtap: left promiscuous mode [ 282.858291][T18115] netlink: 'syz.4.4889': attribute type 13 has an invalid length. [ 282.878121][T18115] gretap0: refused to change device tx_queue_len [ 283.068548][T18128] FAULT_INJECTION: forcing a failure. [ 283.068548][T18128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.081889][T18128] CPU: 0 UID: 0 PID: 18128 Comm: syz.1.4891 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 283.081925][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.081975][T18128] Call Trace: [ 283.081983][T18128] [ 283.081994][T18128] __dump_stack+0x1d/0x30 [ 283.082021][T18128] dump_stack_lvl+0xe8/0x140 [ 283.082120][T18128] dump_stack+0x15/0x1b [ 283.082143][T18128] should_fail_ex+0x265/0x280 [ 283.082177][T18128] should_fail+0xb/0x20 [ 283.082205][T18128] should_fail_usercopy+0x1a/0x20 [ 283.082240][T18128] _copy_from_iter+0xcf/0xe40 [ 283.082351][T18128] ? __build_skb_around+0x1a0/0x200 [ 283.082391][T18128] ? __alloc_skb+0x223/0x320 [ 283.082472][T18128] netlink_sendmsg+0x471/0x6b0 [ 283.082496][T18128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.082554][T18128] __sock_sendmsg+0x145/0x180 [ 283.082588][T18128] ____sys_sendmsg+0x31e/0x4e0 [ 283.082636][T18128] ___sys_sendmsg+0x17b/0x1d0 [ 283.082757][T18128] __x64_sys_sendmsg+0xd4/0x160 [ 283.082824][T18128] x64_sys_call+0x2999/0x2fb0 [ 283.082853][T18128] do_syscall_64+0xd2/0x200 [ 283.082876][T18128] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 283.082956][T18128] ? clear_bhb_loop+0x40/0x90 [ 283.082984][T18128] ? clear_bhb_loop+0x40/0x90 [ 283.083006][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.083031][T18128] RIP: 0033:0x7effba4ee929 [ 283.083046][T18128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.083069][T18128] RSP: 002b:00007effb8b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.083093][T18128] RAX: ffffffffffffffda RBX: 00007effba715fa0 RCX: 00007effba4ee929 [ 283.083109][T18128] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 283.083125][T18128] RBP: 00007effb8b57090 R08: 0000000000000000 R09: 0000000000000000 [ 283.083141][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.083230][T18128] R13: 0000000000000000 R14: 00007effba715fa0 R15: 00007ffdb5658898 [ 283.083252][T18128] [ 283.324254][T18134] FAULT_INJECTION: forcing a failure. [ 283.324254][T18134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.337415][T18134] CPU: 1 UID: 0 PID: 18134 Comm: syz.1.4893 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 283.337451][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.337479][T18134] Call Trace: [ 283.337487][T18134] [ 283.337496][T18134] __dump_stack+0x1d/0x30 [ 283.337519][T18134] dump_stack_lvl+0xe8/0x140 [ 283.337608][T18134] dump_stack+0x15/0x1b [ 283.337677][T18134] should_fail_ex+0x265/0x280 [ 283.337774][T18134] should_fail+0xb/0x20 [ 283.337861][T18134] should_fail_usercopy+0x1a/0x20 [ 283.337896][T18134] strncpy_from_user+0x25/0x230 [ 283.337926][T18134] strncpy_from_user_nofault+0x68/0xf0 [ 283.337949][T18134] bpf_probe_read_user_str+0x2a/0x70 [ 283.338061][T18134] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 283.338086][T18134] bpf_trace_run2+0x107/0x1c0 [ 283.338113][T18134] ? bpf_uprobe_multi_link_attach+0x23d/0x8f0 [ 283.338198][T18134] ? kmem_cache_free+0xdf/0x300 [ 283.338226][T18134] ? bpf_uprobe_multi_link_attach+0x23d/0x8f0 [ 283.338256][T18134] kfree+0x27b/0x320 [ 283.338286][T18134] bpf_uprobe_multi_link_attach+0x23d/0x8f0 [ 283.338316][T18134] ? kstrtouint+0x76/0xc0 [ 283.338344][T18134] ? __rcu_read_unlock+0x4f/0x70 [ 283.338481][T18134] ? __fget_files+0x184/0x1c0 [ 283.338505][T18134] link_create+0x666/0x6c0 [ 283.338526][T18134] __sys_bpf+0x4c7/0x790 [ 283.338703][T18134] __x64_sys_bpf+0x41/0x50 [ 283.338793][T18134] x64_sys_call+0x2478/0x2fb0 [ 283.338834][T18134] do_syscall_64+0xd2/0x200 [ 283.338910][T18134] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 283.338981][T18134] ? clear_bhb_loop+0x40/0x90 [ 283.339004][T18134] ? clear_bhb_loop+0x40/0x90 [ 283.339027][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.339051][T18134] RIP: 0033:0x7effba4ee929 [ 283.339067][T18134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.339137][T18134] RSP: 002b:00007effb8b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.339158][T18134] RAX: ffffffffffffffda RBX: 00007effba715fa0 RCX: 00007effba4ee929 [ 283.339172][T18134] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 283.339249][T18134] RBP: 00007effb8b57090 R08: 0000000000000000 R09: 0000000000000000 [ 283.339262][T18134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.339275][T18134] R13: 0000000000000000 R14: 00007effba715fa0 R15: 00007ffdb5658898 [ 283.339295][T18134] [ 283.669429][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.811204][T18154] netlink: 'syz.3.4899': attribute type 13 has an invalid length. [ 283.824662][T18154] gretap0: refused to change device tx_queue_len [ 283.831245][T18154] net_ratelimit: 1 callbacks suppressed [ 283.831262][T18154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 283.907694][T18161] vlan2: entered allmulticast mode [ 283.949199][T18163] veth0_macvtap: left promiscuous mode [ 283.963443][T18165] loop3: detected capacity change from 0 to 1024 [ 283.970410][T18165] EXT4-fs: Ignoring removed orlov option [ 283.978068][T18165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.511953][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.668474][T18203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.678187][T18203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.758003][T18206] lo speed is unknown, defaulting to 1000 [ 284.765534][T18207] lo speed is unknown, defaulting to 1000 [ 284.879474][T18214] loop6: detected capacity change from 0 to 512 [ 284.912742][T18214] journal_path: Non-blockdev passed as './bus' [ 284.920689][T18214] EXT4-fs: error: could not find journal device path [ 285.262618][T18233] netlink: 'syz.5.4930': attribute type 13 has an invalid length. [ 285.290012][T18233] gretap0: refused to change device tx_queue_len [ 285.296418][T18233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.389297][T18238] FAULT_INJECTION: forcing a failure. [ 285.389297][T18238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.402470][T18238] CPU: 1 UID: 0 PID: 18238 Comm: syz.1.4932 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 285.402617][T18238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.402632][T18238] Call Trace: [ 285.402638][T18238] [ 285.402646][T18238] __dump_stack+0x1d/0x30 [ 285.402668][T18238] dump_stack_lvl+0xe8/0x140 [ 285.402755][T18238] dump_stack+0x15/0x1b [ 285.402777][T18238] should_fail_ex+0x265/0x280 [ 285.402833][T18238] should_fail+0xb/0x20 [ 285.402870][T18238] should_fail_usercopy+0x1a/0x20 [ 285.402913][T18238] _copy_from_user+0x1c/0xb0 [ 285.402939][T18238] ___sys_sendmsg+0xc1/0x1d0 [ 285.403026][T18238] __x64_sys_sendmsg+0xd4/0x160 [ 285.403075][T18238] x64_sys_call+0x2999/0x2fb0 [ 285.403104][T18238] do_syscall_64+0xd2/0x200 [ 285.403160][T18238] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 285.403195][T18238] ? clear_bhb_loop+0x40/0x90 [ 285.403224][T18238] ? clear_bhb_loop+0x40/0x90 [ 285.403254][T18238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.403333][T18238] RIP: 0033:0x7effba4ee929 [ 285.403353][T18238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.403378][T18238] RSP: 002b:00007effb8b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.403402][T18238] RAX: ffffffffffffffda RBX: 00007effba715fa0 RCX: 00007effba4ee929 [ 285.403479][T18238] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 285.403495][T18238] RBP: 00007effb8b57090 R08: 0000000000000000 R09: 0000000000000000 [ 285.403511][T18238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.403527][T18238] R13: 0000000000000000 R14: 00007effba715fa0 R15: 00007ffdb5658898 [ 285.403552][T18238] [ 285.497988][T18243] siw: device registration error -23 [ 285.634220][T18245] loop6: detected capacity change from 0 to 512 [ 285.664814][T18242] loop5: detected capacity change from 0 to 512 [ 285.686444][T18242] EXT4-fs: Ignoring removed orlov option [ 285.704065][T18242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.735335][T18245] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4935: bg 0: block 16: invalid block bitmap [ 285.748187][T18242] EXT4-fs (loop5): orphan cleanup on readonly fs [ 285.772843][T18242] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4934: bg 0: block 248: padding at end of block bitmap is not set [ 285.804207][T18245] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 285.824061][T18242] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4934: Failed to acquire dquot type 1 [ 285.835744][T18245] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.4935: attempt to clear invalid blocks 1669132790 len 1 [ 285.869285][T18242] EXT4-fs (loop5): 1 truncate cleaned up [ 285.879329][T18245] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4935: invalid indirect mapped block 4294967295 (level 1) [ 285.896623][T18242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.927874][T18245] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4935: invalid indirect mapped block 4294967295 (level 2) [ 285.946933][T18245] EXT4-fs (loop6): 1 truncate cleaned up [ 285.955273][T18245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.024317][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.065085][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.094624][T18266] __nla_validate_parse: 4 callbacks suppressed [ 286.094644][T18266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4942'. [ 286.327897][T18275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.414449][T18281] FAULT_INJECTION: forcing a failure. [ 286.414449][T18281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.427724][T18281] CPU: 1 UID: 0 PID: 18281 Comm: +}[@ Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 286.427786][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.427800][T18281] Call Trace: [ 286.427809][T18281] [ 286.427820][T18281] __dump_stack+0x1d/0x30 [ 286.427874][T18281] dump_stack_lvl+0xe8/0x140 [ 286.427973][T18281] dump_stack+0x15/0x1b [ 286.427993][T18281] should_fail_ex+0x265/0x280 [ 286.428029][T18281] should_fail+0xb/0x20 [ 286.428066][T18281] should_fail_usercopy+0x1a/0x20 [ 286.428146][T18281] _copy_from_user+0x1c/0xb0 [ 286.428167][T18281] __sys_bpf+0x178/0x790 [ 286.428260][T18281] __x64_sys_bpf+0x41/0x50 [ 286.428298][T18281] x64_sys_call+0x2478/0x2fb0 [ 286.428326][T18281] do_syscall_64+0xd2/0x200 [ 286.428353][T18281] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.428386][T18281] ? clear_bhb_loop+0x40/0x90 [ 286.428507][T18281] ? clear_bhb_loop+0x40/0x90 [ 286.428537][T18281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.428565][T18281] RIP: 0033:0x7effba4ee929 [ 286.428662][T18281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.428687][T18281] RSP: 002b:00007effb8b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.428711][T18281] RAX: ffffffffffffffda RBX: 00007effba715fa0 RCX: 00007effba4ee929 [ 286.428728][T18281] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 286.428755][T18281] RBP: 00007effb8b57090 R08: 0000000000000000 R09: 0000000000000000 [ 286.428781][T18281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.428795][T18281] R13: 0000000000000000 R14: 00007effba715fa0 R15: 00007ffdb5658898 [ 286.428843][T18281] [ 286.665864][T18287] vlan2: entered allmulticast mode [ 286.706274][T18293] siw: device registration error -23 [ 286.712080][T18295] loop5: detected capacity change from 0 to 512 [ 286.720926][T18295] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4954: bg 0: block 16: invalid block bitmap [ 286.734468][T18295] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 286.744593][T18295] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4954: attempt to clear invalid blocks 1669132790 len 1 [ 286.758691][T18295] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4954: invalid indirect mapped block 4294967295 (level 1) [ 286.774080][T18295] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4954: invalid indirect mapped block 4294967295 (level 2) [ 286.788421][T18295] EXT4-fs (loop5): 1 truncate cleaned up [ 286.795428][T18295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.875309][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.917581][T18313] vlan2: entered allmulticast mode [ 287.067296][T18340] siw: device registration error -23 [ 287.129451][T18352] loop5: detected capacity change from 0 to 512 [ 287.136543][T18352] EXT4-fs: Ignoring removed orlov option [ 287.144323][T18352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.154055][T18352] EXT4-fs (loop5): orphan cleanup on readonly fs [ 287.162542][T18352] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4966: bg 0: block 248: padding at end of block bitmap is not set [ 287.180128][T18352] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4966: Failed to acquire dquot type 1 [ 287.193327][T18352] EXT4-fs (loop5): 1 truncate cleaned up [ 287.199913][T18352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.518064][ T29] kauditd_printk_skb: 1437 callbacks suppressed [ 287.518085][ T29] audit: type=1326 audit(1751494549.709:28056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 287.559220][ T29] audit: type=1326 audit(1751494549.709:28057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 287.583075][ T29] audit: type=1326 audit(1751494549.709:28058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 287.618536][ T29] audit: type=1326 audit(1751494549.809:28059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 287.642301][ T29] audit: type=1326 audit(1751494549.809:28060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 287.666040][ T29] audit: type=1326 audit(1751494549.809:28061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0faa98d290 code=0x7ffc0000 [ 287.689669][ T29] audit: type=1326 audit(1751494549.809:28062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0faa990157 code=0x7ffc0000 [ 287.713528][ T29] audit: type=1326 audit(1751494549.809:28063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 287.737190][ T29] audit: type=1326 audit(1751494549.809:28064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0faa990157 code=0x7ffc0000 [ 287.760982][ T29] audit: type=1326 audit(1751494549.809:28065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.4.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0faa98d58a code=0x7ffc0000 [ 287.843224][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4972'. [ 287.863593][T18436] loop3: detected capacity change from 0 to 128 [ 287.879662][T18436] FAT-fs (loop3): bogus number of reserved sectors [ 287.886284][T18436] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 287.895667][T18436] FAT-fs (loop3): Can't find a valid FAT filesystem [ 288.045911][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.054935][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.073059][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.103991][T18461] loop3: detected capacity change from 0 to 764 [ 288.111023][T18461] iso9660: Unknown parameter './file0' [ 288.127043][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.136233][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.146226][T18461] loop9: detected capacity change from 0 to 7 [ 288.152660][T18461] buffer_io_error: 471 callbacks suppressed [ 288.152674][T18461] Buffer I/O error on dev loop9, logical block 0, async page read [ 288.157110][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.158972][T18461] Buffer I/O error on dev loop9, logical block 0, async page read [ 288.183649][T18461] loop9: unable to read partition table [ 288.223314][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.232339][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 288.243216][T18461] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 288.243216][T18461] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 288.324512][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.385518][T18495] loop5: detected capacity change from 0 to 1024 [ 288.392750][T18495] EXT4-fs: Ignoring removed orlov option [ 288.402827][T18495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.845335][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.010333][T18531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.075456][T18534] loop5: detected capacity change from 0 to 2048 [ 289.111145][T18534] loop5: p1 < > p4 [ 289.116777][T18534] loop5: p4 size 8388608 extends beyond EOD, truncated [ 289.189789][T18541] loop5: detected capacity change from 0 to 512 [ 289.201647][T18541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.214744][T18541] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.236176][T18541] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5002: corrupted xattr block 33: e_value out of bounds [ 289.270286][T18541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 289.290306][T18541] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5002: corrupted xattr block 33: e_value out of bounds [ 289.304657][T18550] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5002: corrupted xattr block 33: e_value out of bounds [ 289.321876][T18541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 289.349869][T18550] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 289.364245][T18559] loop3: detected capacity change from 0 to 512 [ 289.399770][T18563] veth0_macvtap: left promiscuous mode [ 289.406554][T18559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.428912][T18559] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.451373][T18559] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5009: corrupted xattr block 33: e_value out of bounds [ 289.472309][T18559] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 289.484267][T18559] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5009: corrupted xattr block 33: e_value out of bounds [ 289.514917][T18570] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5009: corrupted xattr block 33: e_value out of bounds [ 289.540602][T18559] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 289.562086][T18570] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 289.576336][T18572] FAULT_INJECTION: forcing a failure. [ 289.576336][T18572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.589509][T18572] CPU: 1 UID: 0 PID: 18572 Comm: Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 289.589551][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.589567][T18572] Call Trace: [ 289.589576][T18572] [ 289.589650][T18572] __dump_stack+0x1d/0x30 [ 289.589678][T18572] dump_stack_lvl+0xe8/0x140 [ 289.589703][T18572] dump_stack+0x15/0x1b [ 289.589725][T18572] should_fail_ex+0x265/0x280 [ 289.589802][T18572] should_fail+0xb/0x20 [ 289.589831][T18572] should_fail_usercopy+0x1a/0x20 [ 289.589941][T18572] _copy_from_user+0x1c/0xb0 [ 289.589968][T18572] memdup_user+0x5e/0xd0 [ 289.589999][T18572] strndup_user+0x68/0xb0 [ 289.590101][T18572] __se_sys_mount+0x4d/0x2e0 [ 289.590121][T18572] ? fput+0x8f/0xc0 [ 289.590145][T18572] ? ksys_write+0x192/0x1a0 [ 289.590178][T18572] __x64_sys_mount+0x67/0x80 [ 289.590260][T18572] x64_sys_call+0xd36/0x2fb0 [ 289.590282][T18572] do_syscall_64+0xd2/0x200 [ 289.590304][T18572] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.590340][T18572] ? clear_bhb_loop+0x40/0x90 [ 289.590433][T18572] ? clear_bhb_loop+0x40/0x90 [ 289.590462][T18572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.590490][T18572] RIP: 0033:0x7f0faa98e929 [ 289.590510][T18572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.590608][T18572] RSP: 002b:00007f0fa8ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.590631][T18572] RAX: ffffffffffffffda RBX: 00007f0faabb5fa0 RCX: 00007f0faa98e929 [ 289.590708][T18572] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0 [ 289.590724][T18572] RBP: 00007f0fa8ff7090 R08: 0000200000000040 R09: 0000000000000000 [ 289.590745][T18572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.590761][T18572] R13: 0000000000000000 R14: 00007f0faabb5fa0 R15: 00007ffc9734ebf8 [ 289.590785][T18572] [ 290.359687][T18595] netlink: 'syz.6.5019': attribute type 13 has an invalid length. [ 290.387478][T18595] gretap0: refused to change device tx_queue_len [ 290.393920][T18595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 290.500643][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.633577][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.850705][T18656] loop3: detected capacity change from 0 to 1024 [ 290.858091][T18656] EXT4-fs: Ignoring removed oldalloc option [ 290.865440][T18656] EXT4-fs: Ignoring removed orlov option [ 290.872123][T18656] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 290.891715][T18656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.933395][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.005441][T18685] netlink: 'syz.4.5032': attribute type 13 has an invalid length. [ 291.013900][T18685] gretap0: refused to change device tx_queue_len [ 291.020347][T18685] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.226641][T18722] __nla_validate_parse: 7 callbacks suppressed [ 291.226657][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5043'. [ 291.501412][T18777] netlink: 'syz.3.5049': attribute type 13 has an invalid length. [ 291.512151][T18777] gretap0: refused to change device tx_queue_len [ 291.518546][T18777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.538176][T18775] vlan2: entered allmulticast mode [ 291.707232][T18810] loop5: detected capacity change from 0 to 256 [ 291.752636][T18815] loop5: detected capacity change from 0 to 512 [ 291.760676][T18815] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5059: bg 0: block 16: invalid block bitmap [ 291.773568][T18815] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 291.784666][T18815] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.5059: attempt to clear invalid blocks 1669132790 len 1 [ 291.801098][T18815] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5059: invalid indirect mapped block 4294967295 (level 1) [ 291.816650][T18815] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5059: invalid indirect mapped block 4294967295 (level 2) [ 291.832901][T18815] EXT4-fs (loop5): 1 truncate cleaned up [ 291.839915][T18815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.935232][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.088579][T18830] 9pnet_fd: Insufficient options for proto=fd [ 292.385576][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5071'. [ 292.529841][ T29] kauditd_printk_skb: 1435 callbacks suppressed [ 292.529857][ T29] audit: type=1326 audit(1751494554.729:29501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf0bee58e7 code=0x7ffc0000 [ 292.559693][ T29] audit: type=1326 audit(1751494554.729:29502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf0be8ab19 code=0x7ffc0000 [ 292.583299][ T29] audit: type=1326 audit(1751494554.729:29503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 292.609677][ T29] audit: type=1326 audit(1751494554.809:29504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf0bee58e7 code=0x7ffc0000 [ 292.633262][ T29] audit: type=1326 audit(1751494554.809:29505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf0be8ab19 code=0x7ffc0000 [ 292.657029][ T29] audit: type=1326 audit(1751494554.809:29506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 292.729747][ T29] audit: type=1326 audit(1751494554.809:29507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf0bee58e7 code=0x7ffc0000 [ 292.753602][ T29] audit: type=1326 audit(1751494554.809:29508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf0be8ab19 code=0x7ffc0000 [ 292.777179][ T29] audit: type=1326 audit(1751494554.809:29509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 292.800801][ T29] audit: type=1326 audit(1751494554.809:29510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18807 comm="syz.3.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf0bee58e7 code=0x7ffc0000 [ 292.875087][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5075'. [ 293.059908][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'. [ 293.230713][T18898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5083'. [ 293.276787][T18903] loop3: detected capacity change from 0 to 1024 [ 293.280094][T18906] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5086'. [ 293.298649][T18903] EXT4-fs: Ignoring removed orlov option [ 293.321308][T18903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.376448][T18920] FAULT_INJECTION: forcing a failure. [ 293.376448][T18920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.389814][T18920] CPU: 0 UID: 0 PID: 18920 Comm: syz.1.5089 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 293.389926][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.389944][T18920] Call Trace: [ 293.389950][T18920] [ 293.389958][T18920] __dump_stack+0x1d/0x30 [ 293.389980][T18920] dump_stack_lvl+0xe8/0x140 [ 293.390011][T18920] dump_stack+0x15/0x1b [ 293.390034][T18920] should_fail_ex+0x265/0x280 [ 293.390075][T18920] should_fail+0xb/0x20 [ 293.390111][T18920] should_fail_usercopy+0x1a/0x20 [ 293.390208][T18920] _copy_from_user+0x1c/0xb0 [ 293.390235][T18920] memdup_user+0x5e/0xd0 [ 293.390266][T18920] strndup_user+0x68/0xb0 [ 293.390297][T18920] __se_sys_mount+0x4d/0x2e0 [ 293.390316][T18920] ? fput+0x8f/0xc0 [ 293.390384][T18920] ? ksys_write+0x192/0x1a0 [ 293.390427][T18920] __x64_sys_mount+0x67/0x80 [ 293.390450][T18920] x64_sys_call+0xd36/0x2fb0 [ 293.390529][T18920] do_syscall_64+0xd2/0x200 [ 293.390553][T18920] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.390588][T18920] ? clear_bhb_loop+0x40/0x90 [ 293.390617][T18920] ? clear_bhb_loop+0x40/0x90 [ 293.390679][T18920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.390708][T18920] RIP: 0033:0x7effba4ee929 [ 293.390759][T18920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.390783][T18920] RSP: 002b:00007effb8b57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.390808][T18920] RAX: ffffffffffffffda RBX: 00007effba715fa0 RCX: 00007effba4ee929 [ 293.390824][T18920] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 293.390885][T18920] RBP: 00007effb8b57090 R08: 0000200000000340 R09: 0000000000000000 [ 293.390944][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.390959][T18920] R13: 0000000000000000 R14: 00007effba715fa0 R15: 00007ffdb5658898 [ 293.390983][T18920] [ 293.595966][T18925] netlink: 'syz.6.5090': attribute type 13 has an invalid length. [ 293.604281][T18917] netlink: 'syz.4.5088': attribute type 39 has an invalid length. [ 293.604788][T18925] gretap0: refused to change device tx_queue_len [ 293.618606][T18925] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.636254][T18917] FAULT_INJECTION: forcing a failure. [ 293.636254][T18917] name failslab, interval 1, probability 0, space 0, times 0 [ 293.649073][T18917] CPU: 0 UID: 0 PID: 18917 Comm: syz.4.5088 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 293.649116][T18917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.649133][T18917] Call Trace: [ 293.649141][T18917] [ 293.649151][T18917] __dump_stack+0x1d/0x30 [ 293.649225][T18917] dump_stack_lvl+0xe8/0x140 [ 293.649252][T18917] dump_stack+0x15/0x1b [ 293.649326][T18917] should_fail_ex+0x265/0x280 [ 293.649365][T18917] should_failslab+0x8c/0xb0 [ 293.649391][T18917] kmem_cache_alloc_node_noprof+0x57/0x320 [ 293.649427][T18917] ? __alloc_skb+0x101/0x320 [ 293.649493][T18917] __alloc_skb+0x101/0x320 [ 293.649529][T18917] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 293.649629][T18917] rtmsg_ifinfo+0x6d/0x110 [ 293.649665][T18917] dev_close_many+0x14d/0x240 [ 293.649694][T18917] unregister_netdevice_many_notify+0x441/0x1690 [ 293.649800][T18917] ? unregister_netdevice_queue+0x12b/0x220 [ 293.649893][T18917] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 293.649929][T18917] rtnl_dellink+0x3cb/0x550 [ 293.649987][T18917] ? security_capable+0x83/0x90 [ 293.650021][T18917] ? ns_capable+0x7d/0xb0 [ 293.650115][T18917] ? __pfx_rtnl_dellink+0x10/0x10 [ 293.650137][T18917] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 293.650163][T18917] netlink_rcv_skb+0x123/0x220 [ 293.650263][T18917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.650298][T18917] rtnetlink_rcv+0x1c/0x30 [ 293.650324][T18917] netlink_unicast+0x59e/0x670 [ 293.650411][T18917] netlink_sendmsg+0x58b/0x6b0 [ 293.650442][T18917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.650469][T18917] __sock_sendmsg+0x145/0x180 [ 293.650503][T18917] ____sys_sendmsg+0x31e/0x4e0 [ 293.650553][T18917] ___sys_sendmsg+0x17b/0x1d0 [ 293.650617][T18917] __x64_sys_sendmsg+0xd4/0x160 [ 293.650680][T18917] x64_sys_call+0x2999/0x2fb0 [ 293.650710][T18917] do_syscall_64+0xd2/0x200 [ 293.650734][T18917] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.650769][T18917] ? clear_bhb_loop+0x40/0x90 [ 293.650794][T18917] ? clear_bhb_loop+0x40/0x90 [ 293.650854][T18917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.650888][T18917] RIP: 0033:0x7f0faa98e929 [ 293.650904][T18917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.650953][T18917] RSP: 002b:00007f0fa8ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.650993][T18917] RAX: ffffffffffffffda RBX: 00007f0faabb5fa0 RCX: 00007f0faa98e929 [ 293.651009][T18917] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 293.651026][T18917] RBP: 00007f0fa8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.651044][T18917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.651061][T18917] R13: 0000000000000000 R14: 00007f0faabb5fa0 R15: 00007ffc9734ebf8 [ 293.651083][T18917] [ 294.077584][T18950] loop6: detected capacity change from 0 to 1024 [ 294.085496][T18959] 9pnet: Unknown protocol version  [ 294.101662][T18950] EXT4-fs: Ignoring removed oldalloc option [ 294.107822][T18950] EXT4-fs: Ignoring removed orlov option [ 294.120997][T18950] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 294.146084][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5097'. [ 294.162911][T18950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.163271][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.214197][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.247827][T18979] loop6: detected capacity change from 0 to 1024 [ 294.258411][T18979] EXT4-fs: Ignoring removed orlov option [ 294.270976][T18979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.515215][T18999] lo speed is unknown, defaulting to 1000 [ 294.619930][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5102'. [ 294.772401][T19003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5098'. [ 294.892931][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.257331][T19023] loop3: detected capacity change from 0 to 1024 [ 295.272596][T19023] EXT4-fs: Ignoring removed orlov option [ 295.285452][T19023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.531940][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.613286][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5120'. [ 295.976338][T19114] netlink: 'syz.3.5123': attribute type 1 has an invalid length. [ 295.984238][T19114] netlink: 'syz.3.5123': attribute type 4 has an invalid length. [ 296.269132][T19133] loop6: detected capacity change from 0 to 1024 [ 296.276013][T19133] EXT4-fs: Ignoring removed orlov option [ 296.284215][T19133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.425968][T19138] __nla_validate_parse: 2 callbacks suppressed [ 296.425983][T19138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5131'. [ 296.470266][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.483323][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5132'. [ 296.602591][T19161] vlan2: entered allmulticast mode [ 296.983660][T19215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5147'. [ 297.081466][T19230] netlink: 'syz.3.5151': attribute type 13 has an invalid length. [ 297.096822][T19230] gretap0: refused to change device tx_queue_len [ 297.103450][T19230] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.202024][T19232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5142'. [ 297.490962][T19291] loop5: detected capacity change from 0 to 512 [ 297.530149][T19291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.545416][T19291] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.556210][ T29] kauditd_printk_skb: 1370 callbacks suppressed [ 297.556229][ T29] audit: type=1326 audit(1751494559.739:30881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae40c858e7 code=0x7ffc0000 [ 297.586117][ T29] audit: type=1326 audit(1751494559.739:30882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae40c2ab19 code=0x7ffc0000 [ 297.609914][ T29] audit: type=1326 audit(1751494559.739:30883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 297.636434][ T29] audit: type=1326 audit(1751494559.759:30884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae40c858e7 code=0x7ffc0000 [ 297.645586][T19291] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5153: corrupted xattr block 33: e_value out of bounds [ 297.660162][ T29] audit: type=1326 audit(1751494559.759:30885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae40c2ab19 code=0x7ffc0000 [ 297.697512][ T29] audit: type=1326 audit(1751494559.759:30886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 297.721171][ T29] audit: type=1326 audit(1751494559.769:30887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae40c858e7 code=0x7ffc0000 [ 297.744756][ T29] audit: type=1326 audit(1751494559.769:30888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae40c2ab19 code=0x7ffc0000 [ 297.768540][ T29] audit: type=1326 audit(1751494559.769:30889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 297.792285][ T29] audit: type=1326 audit(1751494559.769:30890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae40c858e7 code=0x7ffc0000 [ 297.801742][T19291] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 297.820487][T19257] loop3: detected capacity change from 0 to 512 [ 297.831164][T19310] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5153: corrupted xattr block 33: e_value out of bounds [ 297.846624][T19310] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 297.856124][T19291] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5153: corrupted xattr block 33: e_value out of bounds [ 297.896087][T19257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.922278][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5154'. [ 297.940938][T19291] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 297.953399][T19257] EXT4-fs (loop3): 1 truncate cleaned up [ 297.961621][T19257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.974740][T19257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.021361][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5156'. [ 298.030337][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5156'. [ 298.185968][T19331] SELinux: Context Ü is not valid (left unmapped). [ 298.296862][T19340] syzkaller1: entered promiscuous mode [ 298.302420][T19340] syzkaller1: entered allmulticast mode [ 298.410677][T19348] vlan2: entered allmulticast mode [ 298.469104][T19351] loop6: detected capacity change from 0 to 1024 [ 298.484956][T19351] EXT4-fs: Ignoring removed orlov option [ 298.504868][T19351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.536237][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5169'. [ 298.725194][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5173'. [ 298.766988][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.826458][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5175'. [ 299.094060][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.235169][T19400] netlink: 'syz.6.5183': attribute type 13 has an invalid length. [ 299.245780][T19400] gretap0: refused to change device tx_queue_len [ 299.252286][T19400] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 299.387989][T19415] netlink: 'syz.6.5189': attribute type 13 has an invalid length. [ 299.396455][T19415] gretap0: refused to change device tx_queue_len [ 299.402943][T19415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 299.525662][T19428] FAULT_INJECTION: forcing a failure. [ 299.525662][T19428] name failslab, interval 1, probability 0, space 0, times 0 [ 299.538537][T19428] CPU: 1 UID: 0 PID: 19428 Comm: syz.6.5195 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 299.538575][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.538592][T19428] Call Trace: [ 299.538600][T19428] [ 299.538609][T19428] __dump_stack+0x1d/0x30 [ 299.538637][T19428] dump_stack_lvl+0xe8/0x140 [ 299.538656][T19428] dump_stack+0x15/0x1b [ 299.538731][T19428] should_fail_ex+0x265/0x280 [ 299.538836][T19428] should_failslab+0x8c/0xb0 [ 299.538861][T19428] kmem_cache_alloc_noprof+0x50/0x310 [ 299.538888][T19428] ? security_file_alloc+0x32/0x100 [ 299.538913][T19428] security_file_alloc+0x32/0x100 [ 299.538990][T19428] init_file+0x5c/0x1d0 [ 299.539023][T19428] alloc_empty_file+0x8b/0x200 [ 299.539052][T19428] path_openat+0x68/0x2170 [ 299.539143][T19428] ? try_charge_memcg+0x200/0x9e0 [ 299.539162][T19428] ? css_rstat_updated+0xcd/0x5b0 [ 299.539195][T19428] ? css_rstat_updated+0xcd/0x5b0 [ 299.539233][T19428] ? css_rstat_updated+0xcd/0x5b0 [ 299.539352][T19428] ? __rcu_read_unlock+0x34/0x70 [ 299.539383][T19428] do_filp_open+0x109/0x230 [ 299.539470][T19428] do_sys_openat2+0xa6/0x110 [ 299.539577][T19428] __x64_sys_openat+0xf2/0x120 [ 299.539617][T19428] x64_sys_call+0x1af/0x2fb0 [ 299.539677][T19428] do_syscall_64+0xd2/0x200 [ 299.539697][T19428] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.539723][T19428] ? clear_bhb_loop+0x40/0x90 [ 299.539745][T19428] ? clear_bhb_loop+0x40/0x90 [ 299.539774][T19428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.539872][T19428] RIP: 0033:0x7fae40c8d290 [ 299.539889][T19428] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 299.539910][T19428] RSP: 002b:00007fae3f2f4ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 299.539929][T19428] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fae40c8d290 [ 299.540006][T19428] RDX: 0000000000000002 RSI: 00007fae40d10814 RDI: 00000000ffffff9c [ 299.540022][T19428] RBP: 00007fae40d10814 R08: 0000000000000000 R09: 0000000000000000 [ 299.540034][T19428] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 299.540046][T19428] R13: 0000000000000024 R14: 0000200000000940 R15: 00007ffc7fa1db68 [ 299.540070][T19428] [ 299.969654][T19438] sctp: [Deprecated]: syz.1.5198 (pid 19438) Use of int in maxseg socket option. [ 299.969654][T19438] Use struct sctp_assoc_value instead [ 300.058457][T19449] netlink: 'syz.1.5201': attribute type 13 has an invalid length. [ 300.080172][T19449] gretap0: refused to change device tx_queue_len [ 300.086556][T19449] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.151390][T19452] random: crng reseeded on system resumption [ 300.253311][T19457] vlan2: entered allmulticast mode [ 300.663203][T19473] loop6: detected capacity change from 0 to 512 [ 300.671556][T19473] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.678119][T19473] EXT4-fs: Ignoring removed orlov option [ 300.685522][T19473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.744945][T19473] netlink: 'syz.6.5211': attribute type 12 has an invalid length. [ 300.936643][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.033598][T19505] netlink: 'syz.5.5222': attribute type 13 has an invalid length. [ 301.078466][T19505] gretap0: refused to change device tx_queue_len [ 301.085058][T19505] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.273612][T19512] loop5: detected capacity change from 0 to 1024 [ 301.296163][T19512] EXT4-fs: Ignoring removed orlov option [ 301.319495][T19512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.506093][T19523] __nla_validate_parse: 6 callbacks suppressed [ 301.506110][T19523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5228'. [ 301.911213][T19527] loop6: detected capacity change from 0 to 512 [ 301.933408][T19527] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.085037][T19535] lo speed is unknown, defaulting to 1000 [ 302.197005][T19535] loop3: detected capacity change from 0 to 512 [ 302.203847][T19535] EXT4-fs: Ignoring removed bh option [ 302.230555][T19535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 302.244281][T19535] EXT4-fs (loop3): 1 truncate cleaned up [ 302.251096][T19535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.837247][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.844387][T19527] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 302.915644][T19542] loop3: detected capacity change from 0 to 128 [ 302.935601][T19544] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 302.935661][T19542] IPVS: stopping master sync thread 19544 ... [ 302.997298][T19542] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 303.004861][T19542] FAT-fs (loop3): Filesystem has been set read-only [ 303.037056][T19548] loop1: detected capacity change from 0 to 512 [ 303.045971][T19542] FAT-fs (loop3): error, clusters badly computed (3 != 2) [ 303.058461][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.070262][T19542] FAT-fs (loop3): error, clusters badly computed (4 != 3) [ 303.071025][T19548] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5234: bg 0: block 16: invalid block bitmap [ 303.077546][T19542] FAT-fs (loop3): error, clusters badly computed (5 != 4) [ 303.097229][T19542] FAT-fs (loop3): error, clusters badly computed (6 != 5) [ 303.104551][T19542] FAT-fs (loop3): error, clusters badly computed (7 != 6) [ 303.115837][ T29] kauditd_printk_skb: 1033 callbacks suppressed [ 303.115855][ T29] audit: type=1400 audit(1751494565.309:31924): avc: denied { connect } for pid=19541 comm="syz.3.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 303.142385][T19542] FAT-fs (loop3): error, clusters badly computed (8 != 7) [ 303.153803][T19542] : attempt to access beyond end of device [ 303.153803][T19542] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 303.165851][T19548] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 303.166541][T19542] : attempt to access beyond end of device [ 303.166541][T19542] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 303.197415][T19548] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.5234: attempt to clear invalid blocks 1669132790 len 1 [ 303.211615][T19542] : attempt to access beyond end of device [ 303.211615][T19542] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 303.224897][T19542] : attempt to access beyond end of device [ 303.224897][T19542] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 303.227527][ T29] audit: type=1326 audit(1751494565.429:31925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.237693][T19542] : attempt to access beyond end of device [ 303.237693][T19542] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 303.273857][T19542] : attempt to access beyond end of device [ 303.273857][T19542] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 303.289715][T19555] netlink: 'syz.5.5235': attribute type 13 has an invalid length. [ 303.290259][T19548] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5234: invalid indirect mapped block 4294967295 (level 1) [ 303.299588][T19555] gretap0: refused to change device tx_queue_len [ 303.318013][T19555] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 303.318157][ T29] audit: type=1326 audit(1751494565.469:31926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.357219][ T29] audit: type=1326 audit(1751494565.469:31927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.380889][ T29] audit: type=1326 audit(1751494565.469:31928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.388913][T19542] : attempt to access beyond end of device [ 303.388913][T19542] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 303.404583][ T29] audit: type=1326 audit(1751494565.489:31929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.440915][ T29] audit: type=1326 audit(1751494565.489:31930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.464559][ T29] audit: type=1326 audit(1751494565.489:31931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.465815][T19548] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5234: invalid indirect mapped block 4294967295 (level 2) [ 303.488197][ T29] audit: type=1326 audit(1751494565.489:31932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.520099][T19542] : attempt to access beyond end of device [ 303.520099][T19542] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 303.525659][ T29] audit: type=1326 audit(1751494565.489:31933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19552 comm="syz.6.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae40c8e929 code=0x7ffc0000 [ 303.562941][T19548] EXT4-fs (loop1): 1 truncate cleaned up [ 303.564740][T19542] : attempt to access beyond end of device [ 303.564740][T19542] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 303.582504][T19542] : attempt to access beyond end of device [ 303.582504][T19542] loop3: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 303.595878][T19548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.691859][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5239'. [ 303.704320][T19562] vlan2: entered allmulticast mode [ 303.714058][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5238'. [ 303.739801][T12476] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.978428][T19584] loop3: detected capacity change from 0 to 1024 [ 303.985308][T19584] EXT4-fs: Ignoring removed orlov option [ 303.993134][T19584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.175527][T19596] loop6: detected capacity change from 0 to 512 [ 304.202342][T19596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.215244][T19596] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.228678][T19596] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.5250: corrupted xattr block 33: e_value out of bounds [ 304.244383][T19596] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 304.253909][T19596] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.5250: corrupted xattr block 33: e_value out of bounds [ 304.268216][T19596] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 304.284260][T19596] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.5250: corrupted xattr block 33: e_value out of bounds [ 304.298738][T19596] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 304.472174][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.507727][T19601] loop3: detected capacity change from 0 to 512 [ 304.518130][T19601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5251: bg 0: block 16: invalid block bitmap [ 304.531587][T19601] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 304.540584][T19601] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.5251: attempt to clear invalid blocks 1669132790 len 1 [ 304.554555][T19601] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5251: invalid indirect mapped block 4294967295 (level 1) [ 304.568944][T19601] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5251: invalid indirect mapped block 4294967295 (level 2) [ 304.583210][T19601] EXT4-fs (loop3): 1 truncate cleaned up [ 304.589318][T19601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.628951][T19605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5252'. [ 304.673467][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.755784][T19613] loop3: detected capacity change from 0 to 2048 [ 304.787922][T19622] batadv_slave_1: entered promiscuous mode [ 304.800356][T19613] loop3: p1 < > p4 [ 304.805450][T19613] loop3: p4 size 8388608 extends beyond EOD, truncated [ 304.805543][T19624] netlink: 'syz.5.5257': attribute type 13 has an invalid length. [ 304.836209][T19624] gretap0: refused to change device tx_queue_len [ 304.842700][T19624] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.896809][T19630] batadv_slave_1: left promiscuous mode [ 304.973827][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'. [ 305.270869][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5264'. [ 305.400459][T19646] netlink: 'syz.4.5266': attribute type 21 has an invalid length. [ 305.408914][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 305.462959][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.565970][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5271'. [ 305.579242][T19657] vlan2: entered allmulticast mode [ 305.602433][T19659] siw: device registration error -23 [ 305.616090][T19659] loop6: detected capacity change from 0 to 512 [ 305.625030][T19659] EXT4-fs: Ignoring removed orlov option [ 305.633049][T19659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.642888][T19659] EXT4-fs (loop6): orphan cleanup on readonly fs [ 305.650003][T19659] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5272: bg 0: block 248: padding at end of block bitmap is not set [ 305.653565][T19667] netlink: 'syz.1.5273': attribute type 13 has an invalid length. [ 305.665450][T19659] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5272: Failed to acquire dquot type 1 [ 305.672517][T19667] gretap0: refused to change device tx_queue_len [ 305.686013][T19659] EXT4-fs (loop6): 1 truncate cleaned up [ 305.689884][T19667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.712214][T19659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.739145][T19669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5275'. [ 305.843401][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.904389][T19679] loop6: detected capacity change from 0 to 512 [ 305.932916][T19679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.969889][T19679] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.009616][T19689] lo speed is unknown, defaulting to 1000 [ 306.142170][T19679] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.5277: corrupted xattr block 33: e_value out of bounds [ 306.260391][T19679] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 306.327525][T19698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5286'. [ 306.349231][T19679] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.5277: corrupted xattr block 33: e_value out of bounds [ 306.372057][T19690] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.5277: corrupted xattr block 33: e_value out of bounds [ 306.402654][T19679] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 306.413856][T19690] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 306.505321][T19711] netlink: 'syz.1.5288': attribute type 13 has an invalid length. [ 306.546579][T19710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.562644][ T3416] lo speed is unknown, defaulting to 1000 [ 306.563014][T19711] gretap0: refused to change device tx_queue_len [ 306.568435][ T3416] syz0: Port: 1 Link ACTIVE [ 306.579467][T19711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.706252][T19716] netlink: 'syz.3.5292': attribute type 13 has an invalid length. [ 306.730359][T19716] gretap0: refused to change device tx_queue_len [ 306.736767][T19716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.771619][T19722] loop1: detected capacity change from 0 to 128 [ 306.822989][T19722] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 306.832204][T19722] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 306.847492][T19730] __nla_validate_parse: 1 callbacks suppressed [ 306.847514][T19730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5295'. [ 306.865502][T19722] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 306.875091][T19722] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 306.885633][T19730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5295'. [ 306.895066][T19722] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 306.905713][T19722] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 306.914967][T19722] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 306.915729][T19724] infiniband syz!: set active [ 306.924001][T19722] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 306.928253][T19724] infiniband syz!: added team_slave_0 [ 306.946084][T19722] Buffer I/O error on dev loop1, logical block 150, lost async page write [ 306.960088][T19722] Buffer I/O error on dev loop1, logical block 151, lost async page write [ 307.005758][T19724] RDS/IB: syz!: added [ 307.014282][T19736] loop1: detected capacity change from 0 to 1024 [ 307.021207][T19724] smc: adding ib device syz! with port count 1 [ 307.027776][T19736] EXT4-fs: Ignoring removed orlov option [ 307.034228][T19724] smc: ib device syz! port 1 has pnetid [ 307.046185][T19736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.349768][T19744] loop5: detected capacity change from 0 to 128 [ 307.386803][T19746] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 307.388937][T19744] IPVS: stopping master sync thread 19746 ... [ 307.409870][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.514632][T19752] FAULT_INJECTION: forcing a failure. [ 307.514632][T19752] name failslab, interval 1, probability 0, space 0, times 0 [ 307.527426][T19752] CPU: 1 UID: 0 PID: 19752 Comm: syz.5.5303 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 307.527480][T19752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.527496][T19752] Call Trace: [ 307.527504][T19752] [ 307.527513][T19752] __dump_stack+0x1d/0x30 [ 307.527541][T19752] dump_stack_lvl+0xe8/0x140 [ 307.527597][T19752] dump_stack+0x15/0x1b [ 307.527619][T19752] should_fail_ex+0x265/0x280 [ 307.527659][T19752] should_failslab+0x8c/0xb0 [ 307.527755][T19752] kmem_cache_alloc_node_noprof+0x57/0x320 [ 307.527785][T19752] ? __alloc_skb+0x101/0x320 [ 307.527819][T19752] __alloc_skb+0x101/0x320 [ 307.527866][T19752] netlink_alloc_large_skb+0xba/0xf0 [ 307.527907][T19752] netlink_sendmsg+0x3cf/0x6b0 [ 307.527945][T19752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.528034][T19752] __sock_sendmsg+0x145/0x180 [ 307.528094][T19752] ____sys_sendmsg+0x31e/0x4e0 [ 307.528133][T19752] ___sys_sendmsg+0x17b/0x1d0 [ 307.528245][T19752] __x64_sys_sendmsg+0xd4/0x160 [ 307.528360][T19752] x64_sys_call+0x2999/0x2fb0 [ 307.528382][T19752] do_syscall_64+0xd2/0x200 [ 307.528399][T19752] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 307.528518][T19752] ? clear_bhb_loop+0x40/0x90 [ 307.528544][T19752] ? clear_bhb_loop+0x40/0x90 [ 307.528573][T19752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.528595][T19752] RIP: 0033:0x7f3c12aee929 [ 307.528614][T19752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.528702][T19752] RSP: 002b:00007f3c11157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.528729][T19752] RAX: ffffffffffffffda RBX: 00007f3c12d15fa0 RCX: 00007f3c12aee929 [ 307.528750][T19752] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 307.528765][T19752] RBP: 00007f3c11157090 R08: 0000000000000000 R09: 0000000000000000 [ 307.528781][T19752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.528841][T19752] R13: 0000000000000000 R14: 00007f3c12d15fa0 R15: 00007ffea46ef588 [ 307.528870][T19752] [ 307.755117][T12476] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.818991][T19756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.906035][T19771] netlink: 'syz.6.5307': attribute type 13 has an invalid length. [ 307.914195][T19774] loop5: detected capacity change from 0 to 512 [ 307.921936][T19771] gretap0: refused to change device tx_queue_len [ 307.928384][T19771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.963978][T19774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.976881][T19774] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.991323][T19774] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5312: corrupted xattr block 33: e_value out of bounds [ 308.008181][T19774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 308.017692][T19774] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5312: corrupted xattr block 33: e_value out of bounds [ 308.035772][T19774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 308.045874][T19789] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5312: corrupted xattr block 33: e_value out of bounds [ 308.062473][T19789] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 308.745184][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5315'. [ 308.910735][ T29] kauditd_printk_skb: 1189 callbacks suppressed [ 308.910755][ T29] audit: type=1326 audit(1751494571.109:33121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 308.970574][ T29] audit: type=1326 audit(1751494571.109:33122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 308.994385][ T29] audit: type=1326 audit(1751494571.139:33123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.018117][ T29] audit: type=1326 audit(1751494571.139:33124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.041849][ T29] audit: type=1326 audit(1751494571.139:33125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.065525][ T29] audit: type=1326 audit(1751494571.139:33126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.089286][ T29] audit: type=1326 audit(1751494571.139:33127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.112919][ T29] audit: type=1326 audit(1751494571.139:33128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.136561][ T29] audit: type=1326 audit(1751494571.139:33129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.160293][ T29] audit: type=1326 audit(1751494571.149:33130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19889 comm="syz.4.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faa98e929 code=0x7ffc0000 [ 309.519567][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.569391][T19933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.703187][T19941] IPv6: Can't replace route, no match found [ 309.748065][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5328'. [ 309.798308][T19947] loop6: detected capacity change from 0 to 1024 [ 309.812334][T19947] EXT4-fs: Ignoring removed orlov option [ 309.820730][T19949] loop1: detected capacity change from 0 to 128 [ 309.828932][T19947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.868345][T19955] loop5: detected capacity change from 0 to 128 [ 309.878099][T19955] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 309.885490][T19955] FAT-fs (loop5): Filesystem has been set read-only [ 309.892805][T19955] FAT-fs (loop5): error, clusters badly computed (3 != 2) [ 309.900209][T19955] FAT-fs (loop5): error, clusters badly computed (4 != 3) [ 309.901256][T19956] FAULT_INJECTION: forcing a failure. [ 309.901256][T19956] name failslab, interval 1, probability 0, space 0, times 0 [ 309.907601][T19955] FAT-fs (loop5): error, clusters badly computed (5 != 4) [ 309.920016][T19956] CPU: 0 UID: 0 PID: 19956 Comm: syz.1.5330 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 309.920047][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.920060][T19956] Call Trace: [ 309.920117][T19956] [ 309.920130][T19956] __dump_stack+0x1d/0x30 [ 309.920161][T19956] dump_stack_lvl+0xe8/0x140 [ 309.920264][T19956] dump_stack+0x15/0x1b [ 309.920289][T19956] should_fail_ex+0x265/0x280 [ 309.920347][T19956] should_failslab+0x8c/0xb0 [ 309.920382][T19956] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 309.920425][T19956] ? sidtab_sid2str_get+0xa0/0x130 [ 309.920531][T19956] kmemdup_noprof+0x2b/0x70 [ 309.920573][T19956] sidtab_sid2str_get+0xa0/0x130 [ 309.920608][T19956] security_sid_to_context_core+0x1eb/0x2e0 [ 309.920644][T19956] security_sid_to_context+0x27/0x40 [ 309.920686][T19956] selinux_lsmprop_to_secctx+0x67/0xf0 [ 309.920722][T19956] security_lsmprop_to_secctx+0x43/0x80 [ 309.920829][T19956] audit_log_task_context+0x77/0x190 [ 309.920951][T19956] audit_log_task+0xf4/0x250 [ 309.921039][T19956] audit_seccomp+0x61/0x100 [ 309.921080][T19956] ? __seccomp_filter+0x68c/0x10d0 [ 309.921114][T19956] __seccomp_filter+0x69d/0x10d0 [ 309.921150][T19956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 309.921200][T19956] ? vfs_write+0x75e/0x8e0 [ 309.921301][T19956] ? __rcu_read_unlock+0x4f/0x70 [ 309.921347][T19956] ? __fget_files+0x184/0x1c0 [ 309.921379][T19956] __secure_computing+0x82/0x150 [ 309.921415][T19956] syscall_trace_enter+0xcf/0x1e0 [ 309.921524][T19956] do_syscall_64+0xac/0x200 [ 309.921558][T19956] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.921659][T19956] ? clear_bhb_loop+0x40/0x90 [ 309.921729][T19956] ? clear_bhb_loop+0x40/0x90 [ 309.921837][T19956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.921867][T19956] RIP: 0033:0x7effba4ee929 [ 309.921892][T19956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.921918][T19956] RSP: 002b:00007effb8b36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 309.921945][T19956] RAX: ffffffffffffffda RBX: 00007effba716080 RCX: 00007effba4ee929 [ 309.921964][T19956] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 309.922000][T19956] RBP: 00007effb8b36090 R08: 0000000000000000 R09: 0000000000000000 [ 309.922018][T19956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.922036][T19956] R13: 0000000000000000 R14: 00007effba716080 R15: 00007ffdb5658898 [ 309.922063][T19956] [ 310.184615][T19961] loop3: detected capacity change from 0 to 512 [ 310.205018][T19955] FAT-fs (loop5): error, clusters badly computed (6 != 5) [ 310.221528][T19955] FAT-fs (loop5): error, clusters badly computed (7 != 6) [ 310.233956][T19961] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.250393][T19955] bio_check_eod: 19 callbacks suppressed [ 310.250414][T19955] syz.5.5332: attempt to access beyond end of device [ 310.250414][T19955] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 310.271927][T19961] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5333: corrupted xattr block 33: e_value out of bounds [ 310.272023][T19955] syz.5.5332: attempt to access beyond end of device [ 310.272023][T19955] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 310.312778][T19961] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 310.322006][T19961] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5333: corrupted xattr block 33: e_value out of bounds [ 310.323263][T19969] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5333: corrupted xattr block 33: e_value out of bounds [ 310.354427][T19955] syz.5.5332: attempt to access beyond end of device [ 310.354427][T19955] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 310.373933][T19955] syz.5.5332: attempt to access beyond end of device [ 310.373933][T19955] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 310.388714][T19961] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 310.398445][T19969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 310.401224][T19955] syz.5.5332: attempt to access beyond end of device [ 310.401224][T19955] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 310.420925][T19968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.421420][T19955] syz.5.5332: attempt to access beyond end of device [ 310.421420][T19955] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 310.450321][T19955] syz.5.5332: attempt to access beyond end of device [ 310.450321][T19955] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 310.464589][T19955] syz.5.5332: attempt to access beyond end of device [ 310.464589][T19955] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 310.478175][T19955] syz.5.5332: attempt to access beyond end of device [ 310.478175][T19955] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 310.491777][T19955] syz.5.5332: attempt to access beyond end of device [ 310.491777][T19955] loop5: rw=2049, sector=305, nr_sectors = 9 limit=128 [ 310.692216][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5340'. [ 310.718053][T19989] loop1: detected capacity change from 0 to 1024 [ 310.725276][T19989] EXT4-fs: Ignoring removed orlov option [ 310.802642][T19993] loop6: detected capacity change from 0 to 128 [ 310.836330][T19993] IPVS: Error connecting to the multicast addr [ 310.901419][T19993] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 310.908703][T19993] FAT-fs (loop6): Filesystem has been set read-only [ 310.928027][T19993] FAT-fs (loop6): error, clusters badly computed (3 != 2) [ 310.946223][T19993] FAT-fs (loop6): error, clusters badly computed (4 != 3) [ 310.962106][T19993] FAT-fs (loop6): error, clusters badly computed (5 != 4) [ 310.982676][T19993] FAT-fs (loop6): error, clusters badly computed (6 != 5) [ 311.023622][T19993] FAT-fs (loop6): error, clusters badly computed (7 != 6) [ 311.119890][T20003] lo speed is unknown, defaulting to 1000 [ 311.576244][T20005] loop5: detected capacity change from 0 to 164 [ 311.925432][T20015] netlink: 'syz.4.5347': attribute type 13 has an invalid length. [ 311.992533][T20024] loop3: detected capacity change from 0 to 128 [ 312.003169][T20024] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 312.010510][T20024] FAT-fs (loop3): Filesystem has been set read-only [ 312.027116][T20024] FAT-fs (loop3): error, clusters badly computed (3 != 2) [ 312.035977][T20024] FAT-fs (loop3): error, clusters badly computed (4 != 3) [ 312.036343][T20015] gretap0: refused to change device tx_queue_len [ 312.049676][T20015] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.053098][T20024] FAT-fs (loop3): error, clusters badly computed (5 != 4) [ 312.072564][ T36] lo speed is unknown, defaulting to 1000 [ 312.072581][ T36] syz0: Port: 1 Link DOWN [ 312.096142][T20031] netlink: 'syz.5.5353': attribute type 13 has an invalid length. [ 312.099991][T20028] syzkaller1: entered promiscuous mode [ 312.109780][T20028] syzkaller1: entered allmulticast mode [ 312.117217][T20024] FAT-fs (loop3): error, clusters badly computed (6 != 5) [ 312.127871][T20024] FAT-fs (loop3): error, clusters badly computed (7 != 6) [ 312.189750][T20031] gretap0: refused to change device tx_queue_len [ 312.196197][T20031] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.254416][T20036] loop4: detected capacity change from 0 to 2048 [ 312.297897][T20043] batadv_slave_1: entered promiscuous mode [ 312.338443][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5360'. [ 312.348603][T20036] loop4: p1 < > p4 [ 312.375735][T20036] loop4: p4 size 8388608 extends beyond EOD, truncated [ 312.409936][T20054] batadv_slave_1: left promiscuous mode [ 312.438100][T20058] netlink: 'syz.4.5364': attribute type 13 has an invalid length. [ 312.442304][T20059] loop5: detected capacity change from 0 to 512 [ 312.446357][T20058] gretap0: refused to change device tx_queue_len [ 312.458927][T20058] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.503921][T20060] lo speed is unknown, defaulting to 1000 [ 312.671226][T20059] EXT4-fs mount: 5 callbacks suppressed [ 312.671272][T20059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.691319][T20059] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.712506][T20059] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5363: corrupted xattr block 33: e_value out of bounds [ 312.729483][T20066] netlink: 'syz.4.5365': attribute type 13 has an invalid length. [ 312.738157][T20059] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 312.750931][T20066] gretap0: refused to change device tx_queue_len [ 312.757334][T20066] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.775483][T20059] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5363: corrupted xattr block 33: e_value out of bounds [ 312.791925][T20067] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5363: corrupted xattr block 33: e_value out of bounds [ 312.807390][T20059] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 312.825717][T20067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 312.882631][T20072] netlink: 'syz.4.5367': attribute type 13 has an invalid length. [ 312.892354][T20072] gretap0: refused to change device tx_queue_len [ 312.898777][T20072] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.010575][T20074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.026125][ T36] lo speed is unknown, defaulting to 1000 [ 313.031905][ T36] syz0: Port: 1 Link ACTIVE [ 313.073841][T20077] syzkaller1: entered promiscuous mode [ 313.079507][T20077] syzkaller1: entered allmulticast mode [ 313.319204][T20084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5371'. [ 313.906472][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.981513][T20099] netlink: 'syz.5.5376': attribute type 13 has an invalid length. [ 313.989723][T20099] gretap0: refused to change device tx_queue_len [ 313.996149][T20099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 314.063543][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 314.063574][ T29] audit: type=1326 audit(1751494576.259:33333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 314.093721][ T29] audit: type=1326 audit(1751494576.259:33334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 314.117544][ T29] audit: type=1326 audit(1751494576.259:33335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 314.121325][T20103] loop3: detected capacity change from 0 to 512 [ 314.141304][ T29] audit: type=1326 audit(1751494576.259:33336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 314.141345][ T29] audit: type=1326 audit(1751494576.259:33337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 314.194838][ T29] audit: type=1326 audit(1751494576.259:33338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz.3.5377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 314.222239][T20103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.235012][T20103] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.245570][T20105] loop5: detected capacity change from 0 to 2048 [ 314.253438][ T29] audit: type=1400 audit(1751494576.459:33339): avc: denied { read } for pid=20102 comm="syz.3.5378" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.276167][ T29] audit: type=1400 audit(1751494576.459:33340): avc: denied { open } for pid=20102 comm="syz.3.5378" path="/481/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.278652][T20103] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.5378: corrupted inode contents [ 314.299301][ T29] audit: type=1400 audit(1751494576.459:33341): avc: denied { setattr } for pid=20102 comm="syz.3.5378" path="/481/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.314838][T20103] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.5378: mark_inode_dirty error [ 314.335196][ T29] audit: type=1400 audit(1751494576.469:33342): avc: denied { ioctl } for pid=20102 comm="syz.3.5378" path="/481/bus/file1" dev="loop3" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.348278][T20103] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.5378: corrupted inode contents [ 314.373348][T20105] loop5: p1 < > p4 [ 314.385716][T20103] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.5378: mark_inode_dirty error [ 314.387326][T20105] loop5: p4 size 8388608 extends beyond EOD, truncated [ 314.399376][T20103] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.5378: mark inode dirty (error -117) [ 314.421753][T20103] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 314.452218][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.490453][T20113] loop5: detected capacity change from 0 to 512 [ 314.498359][T20113] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5382: bg 0: block 16: invalid block bitmap [ 314.511339][T20113] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 314.520325][T20113] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.5382: attempt to clear invalid blocks 1669132790 len 1 [ 314.534199][T20113] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5382: invalid indirect mapped block 4294967295 (level 1) [ 314.551056][T20113] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5382: invalid indirect mapped block 4294967295 (level 2) [ 314.565482][T20113] EXT4-fs (loop5): 1 truncate cleaned up [ 314.572611][T20113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.653051][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.699132][T20120] loop5: detected capacity change from 0 to 1024 [ 314.705907][T20120] EXT4-fs: Ignoring removed orlov option [ 314.714458][T20120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.791085][T20122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5381'. [ 314.907301][T20131] siw: device registration error -23 [ 314.925165][T20131] loop6: detected capacity change from 0 to 512 [ 314.941700][T20131] EXT4-fs: Ignoring removed orlov option [ 314.952951][T20131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.965867][T20133] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 314.978796][T20131] EXT4-fs (loop6): orphan cleanup on readonly fs [ 314.987565][T20131] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5386: bg 0: block 248: padding at end of block bitmap is not set [ 315.007067][T20131] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5386: Failed to acquire dquot type 1 [ 315.040715][T20131] EXT4-fs (loop6): 1 truncate cleaned up [ 315.048858][T20131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.105768][T20140] netlink: 'syz.4.5389': attribute type 13 has an invalid length. [ 315.114748][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.168381][T20140] gretap0: refused to change device tx_queue_len [ 315.175288][T20140] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 315.192683][ T8762] lo speed is unknown, defaulting to 1000 [ 315.198487][ T8762] syz0: Port: 1 Link DOWN [ 315.320167][T20157] loop4: detected capacity change from 0 to 512 [ 315.342772][T13958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.355566][T20157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.368522][T20157] ext4 filesystem being mounted at /554/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.384058][T20157] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.5392: corrupted inode contents [ 315.400288][T20157] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.5392: mark_inode_dirty error [ 315.411946][T20157] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.5392: corrupted inode contents [ 315.425139][T20157] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.5392: mark_inode_dirty error [ 315.447764][T20157] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.5392: mark inode dirty (error -117) [ 315.463432][T20157] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 315.490741][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.500641][T20168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.607935][T20189] syzkaller1: entered promiscuous mode [ 315.613671][T20189] syzkaller1: entered allmulticast mode [ 315.871153][T20208] lo speed is unknown, defaulting to 1000 [ 316.533871][T20238] loop1: detected capacity change from 0 to 128 [ 316.548465][T20241] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 316.559491][T20238] IPVS: stopping master sync thread 20241 ... [ 316.597608][T20238] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 316.604896][T20238] FAT-fs (loop1): Filesystem has been set read-only [ 316.612042][T20238] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 316.619337][T20238] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 316.626629][T20238] FAT-fs (loop1): error, clusters badly computed (5 != 4) [ 316.634094][T20238] FAT-fs (loop1): error, clusters badly computed (6 != 5) [ 316.643728][T20238] FAT-fs (loop1): error, clusters badly computed (7 != 6) [ 316.652478][T20238] FAT-fs (loop1): error, clusters badly computed (8 != 7) [ 316.663893][T20238] bio_check_eod: 13 callbacks suppressed [ 316.663913][T20238] : attempt to access beyond end of device [ 316.663913][T20238] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 316.684765][T20238] : attempt to access beyond end of device [ 316.684765][T20238] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 316.697531][T20238] : attempt to access beyond end of device [ 316.697531][T20238] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 316.711081][T20238] : attempt to access beyond end of device [ 316.711081][T20238] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 316.723917][T20238] : attempt to access beyond end of device [ 316.723917][T20238] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 316.737466][T20238] : attempt to access beyond end of device [ 316.737466][T20238] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 316.750292][T20238] : attempt to access beyond end of device [ 316.750292][T20238] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 316.763623][T20238] : attempt to access beyond end of device [ 316.763623][T20238] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 316.777452][T20238] : attempt to access beyond end of device [ 316.777452][T20238] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 316.791981][T20238] : attempt to access beyond end of device [ 316.791981][T20238] loop1: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 316.836577][T20271] loop1: detected capacity change from 0 to 1024 [ 316.844804][T20271] EXT4-fs: Ignoring removed orlov option [ 316.853371][T20271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.155407][T20306] netlink: 'syz.5.5401': attribute type 13 has an invalid length. [ 317.191362][T20306] gretap0: refused to change device tx_queue_len [ 317.197755][T20306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 317.250209][T12476] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.494707][T20329] vlan2: entered allmulticast mode [ 317.579235][T20331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.631236][T20339] batadv_slave_1: entered promiscuous mode [ 317.677557][T20340] netlink: 'syz.6.5413': attribute type 13 has an invalid length. [ 317.685858][T20340] gretap0: refused to change device tx_queue_len [ 317.692279][T20340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 317.892406][T20348] loop6: detected capacity change from 0 to 512 [ 317.911718][T20348] EXT4-fs (loop6): 1 orphan inode deleted [ 317.917935][T20348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.930731][T20348] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.931839][T15726] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1 [ 317.953887][T20348] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 317.972460][T11194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.034440][T20353] lo speed is unknown, defaulting to 1000 [ 318.459415][T20337] batadv_slave_1: left promiscuous mode [ 318.507708][T20398] FAULT_INJECTION: forcing a failure. [ 318.507708][T20398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.520943][T20398] CPU: 1 UID: 0 PID: 20398 Comm: syz.3.5423 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 318.520973][T20398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.520999][T20398] Call Trace: [ 318.521008][T20398] [ 318.521017][T20398] __dump_stack+0x1d/0x30 [ 318.521038][T20398] dump_stack_lvl+0xe8/0x140 [ 318.521058][T20398] dump_stack+0x15/0x1b [ 318.521074][T20398] should_fail_ex+0x265/0x280 [ 318.521193][T20398] should_fail+0xb/0x20 [ 318.521229][T20398] should_fail_usercopy+0x1a/0x20 [ 318.521272][T20398] _copy_from_user+0x1c/0xb0 [ 318.521296][T20398] memdup_user+0x5e/0xd0 [ 318.521332][T20398] strndup_user+0x68/0xb0 [ 318.521357][T20398] __se_sys_mount+0x4d/0x2e0 [ 318.521381][T20398] ? fput+0x8f/0xc0 [ 318.521476][T20398] ? ksys_write+0x192/0x1a0 [ 318.521510][T20398] __x64_sys_mount+0x67/0x80 [ 318.521535][T20398] x64_sys_call+0xd36/0x2fb0 [ 318.521566][T20398] do_syscall_64+0xd2/0x200 [ 318.521585][T20398] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.521692][T20398] ? clear_bhb_loop+0x40/0x90 [ 318.521778][T20398] ? clear_bhb_loop+0x40/0x90 [ 318.521801][T20398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.521937][T20398] RIP: 0033:0x7fdf0beee929 [ 318.521958][T20398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.521983][T20398] RSP: 002b:00007fdf0a557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.522007][T20398] RAX: ffffffffffffffda RBX: 00007fdf0c115fa0 RCX: 00007fdf0beee929 [ 318.522020][T20398] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0 [ 318.522048][T20398] RBP: 00007fdf0a557090 R08: 0000200000000040 R09: 0000000000000000 [ 318.522060][T20398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.522073][T20398] R13: 0000000000000000 R14: 00007fdf0c115fa0 R15: 00007ffc552090e8 [ 318.522097][T20398] [ 318.728726][T20399] lo speed is unknown, defaulting to 1000 [ 318.880399][T20401] loop3: detected capacity change from 0 to 512 [ 318.893477][T20401] EXT4-fs (loop3): 1 orphan inode deleted [ 318.900590][T20401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.916398][T20401] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.979606][T20406] FAULT_INJECTION: forcing a failure. [ 318.979606][T20406] name failslab, interval 1, probability 0, space 0, times 0 [ 318.992412][T20406] CPU: 1 UID: 0 PID: 20406 Comm: syz.3.5424 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 318.992445][T20406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.992462][T20406] Call Trace: [ 318.992472][T20406] [ 318.992545][T20406] __dump_stack+0x1d/0x30 [ 318.992567][T20406] dump_stack_lvl+0xe8/0x140 [ 318.992593][T20406] dump_stack+0x15/0x1b [ 318.992616][T20406] should_fail_ex+0x265/0x280 [ 318.992655][T20406] should_failslab+0x8c/0xb0 [ 318.992694][T20406] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 318.992728][T20406] ? __d_alloc+0x3d/0x350 [ 318.992781][T20406] __d_alloc+0x3d/0x350 [ 318.992807][T20406] __d_obtain_alias+0xba/0x580 [ 318.992844][T20406] d_obtain_alias+0x1a/0x30 [ 318.992873][T20406] ? __pfx_ext4_nfs_get_inode+0x10/0x10 [ 318.992905][T20406] generic_fh_to_dentry+0x8b/0xa0 [ 318.992937][T20406] ext4_fh_to_dentry+0x2f/0x40 [ 318.993032][T20406] exportfs_decode_fh_raw+0xbc/0x520 [ 318.993066][T20406] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 318.993114][T20406] ? kstrtouint+0x76/0xc0 [ 318.993156][T20406] do_handle_to_path+0x6c/0xe0 [ 318.993182][T20406] do_handle_open+0x51d/0x650 [ 318.993203][T20406] __x64_sys_open_by_handle_at+0x44/0x50 [ 318.993248][T20406] x64_sys_call+0xaa0/0x2fb0 [ 318.993337][T20406] do_syscall_64+0xd2/0x200 [ 318.993361][T20406] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.993391][T20406] ? clear_bhb_loop+0x40/0x90 [ 318.993470][T20406] ? clear_bhb_loop+0x40/0x90 [ 318.993523][T20406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.993570][T20406] RIP: 0033:0x7fdf0beee929 [ 318.993590][T20406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.993614][T20406] RSP: 002b:00007fdf0a536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 318.993639][T20406] RAX: ffffffffffffffda RBX: 00007fdf0c116080 RCX: 00007fdf0beee929 [ 318.993696][T20406] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 318.993711][T20406] RBP: 00007fdf0a536090 R08: 0000000000000000 R09: 0000000000000000 [ 318.993759][T20406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.993773][T20406] R13: 0000000000000001 R14: 00007fdf0c116080 R15: 00007ffc552090e8 [ 318.993792][T20406] [ 319.024607][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5421'. [ 319.026533][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 319.175439][T20414] loop4: detected capacity change from 0 to 512 [ 319.198646][T20401] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 319.262433][T20414] EXT4-fs: Ignoring removed orlov option [ 319.269304][T20414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.289085][T20414] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.296299][T20414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5425: bg 0: block 248: padding at end of block bitmap is not set [ 319.322583][T20414] __quota_error: 103 callbacks suppressed [ 319.322637][T20414] Quota error (device loop4): write_blk: dquota write failed [ 319.335986][T20414] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 319.345979][T20414] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5425: Failed to acquire dquot type 1 [ 319.358501][T11848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.363576][T20414] EXT4-fs (loop4): 1 truncate cleaned up [ 319.410253][ T29] audit: type=1326 audit(1751494581.609:33442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.434006][ T29] audit: type=1326 audit(1751494581.609:33443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.460636][ T29] audit: type=1326 audit(1751494581.659:33444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.484356][ T29] audit: type=1326 audit(1751494581.659:33445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.508046][ T29] audit: type=1326 audit(1751494581.659:33446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.532564][ T29] audit: type=1326 audit(1751494581.739:33447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.556427][ T29] audit: type=1326 audit(1751494581.739:33448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.564263][T20414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.580256][ T29] audit: type=1326 audit(1751494581.739:33449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20432 comm="syz.3.5427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0beee929 code=0x7ffc0000 [ 319.645875][T20440] netlink: 'syz.1.5429': attribute type 13 has an invalid length. [ 319.654294][T20440] gretap0: refused to change device tx_queue_len [ 319.660715][T20440] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 319.702380][T20446] netlink: 'syz.1.5430': attribute type 21 has an invalid length. [ 319.710381][T20446] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5430'. [ 319.719598][T20446] netlink: 'syz.1.5430': attribute type 6 has an invalid length. [ 319.727457][T20446] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5430'. [ 320.117930][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.213456][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5433'. [ 320.278301][T20519] loop4: detected capacity change from 0 to 1024 [ 320.285038][T20519] EXT4-fs: Ignoring removed orlov option [ 320.292912][T20519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.572087][T20522] ================================================================== [ 320.580220][T20522] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 320.588659][T20522] [ 320.591000][T20522] read-write to 0xffff88812d534ea8 of 4 bytes by task 20519 on cpu 1: [ 320.599154][T20522] __writeback_single_inode+0x1e3/0x7c0 [ 320.604712][T20522] writeback_single_inode+0x167/0x3e0 [ 320.610100][T20522] sync_inode_metadata+0x5b/0x90 [ 320.615048][T20522] generic_buffers_fsync_noflush+0xd9/0x120 [ 320.620974][T20522] ext4_sync_file+0x1ab/0x690 [ 320.625682][T20522] vfs_fsync_range+0x10a/0x130 [ 320.630468][T20522] ext4_buffered_write_iter+0x34f/0x3c0 [ 320.636025][T20522] ext4_file_write_iter+0x383/0xf00 [ 320.641264][T20522] iter_file_splice_write+0x5ef/0x970 [ 320.646686][T20522] direct_splice_actor+0x153/0x2a0 [ 320.651839][T20522] splice_direct_to_actor+0x30f/0x680 [ 320.657252][T20522] do_splice_direct+0xda/0x150 [ 320.662042][T20522] do_sendfile+0x380/0x650 [ 320.666476][T20522] __x64_sys_sendfile64+0x105/0x150 [ 320.671694][T20522] x64_sys_call+0xb39/0x2fb0 [ 320.676302][T20522] do_syscall_64+0xd2/0x200 [ 320.680820][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.686734][T20522] [ 320.689072][T20522] read to 0xffff88812d534ea8 of 4 bytes by task 20522 on cpu 0: [ 320.696720][T20522] __mark_inode_dirty+0x18e/0x760 [ 320.701768][T20522] ext4_write_inline_data_end+0x3e5/0x5f0 [ 320.707534][T20522] ext4_write_end+0x4cd/0x730 [ 320.712247][T20522] generic_perform_write+0x312/0x490 [ 320.717555][T20522] ext4_buffered_write_iter+0x1ee/0x3c0 [ 320.723126][T20522] ext4_file_write_iter+0x383/0xf00 [ 320.729123][T20522] iter_file_splice_write+0x5ef/0x970 [ 320.734522][T20522] direct_splice_actor+0x153/0x2a0 [ 320.739695][T20522] splice_direct_to_actor+0x30f/0x680 [ 320.745179][T20522] do_splice_direct+0xda/0x150 [ 320.749967][T20522] do_sendfile+0x380/0x650 [ 320.754405][T20522] __x64_sys_sendfile64+0x105/0x150 [ 320.759624][T20522] x64_sys_call+0xb39/0x2fb0 [ 320.764242][T20522] do_syscall_64+0xd2/0x200 [ 320.768764][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.774681][T20522] [ 320.777015][T20522] value changed: 0x0000003a -> 0x00000002 [ 320.782745][T20522] [ 320.785080][T20522] Reported by Kernel Concurrency Sanitizer on: [ 320.791243][T20522] CPU: 0 UID: 0 PID: 20522 Comm: syz.4.5434 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 320.803762][T20522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.813834][T20522] ================================================================== [ 321.020201][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.