last executing test programs: 1m21.861185094s ago: executing program 3 (id=1330): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f0000000240)=""/158) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000040)=""/39) 1m20.921951239s ago: executing program 3 (id=1347): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000001c0)={r6}, &(0x7f0000000100)=0x8) 1m19.773625103s ago: executing program 3 (id=1379): socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x44, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0, 0x2}, {0x6, 0xd}, {0x1, 0x10}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m19.68141181s ago: executing program 3 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_deladdr={0x34, 0x15, 0x20, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x0, 0xfd}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010100}, @IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000340), &(0x7f0000000540)=r1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xd}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000880)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @tail_call, @call={0x85, 0x0, 0x0, 0x20}], &(0x7f0000000900)='GPL\x00', 0x10000, 0x21, &(0x7f0000000940)=""/33, 0x40f00, 0x6a7df2e72c6974e3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000a00)=[{0x5, 0x2, 0x10}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x5, 0xa, 0xc}, {0x4, 0x4, 0x0, 0x6}, {0x5, 0x1, 0xd, 0x1}, {0x5, 0x2, 0x2, 0x3}, {0x2, 0x5, 0x6, 0x4}, {0x4, 0x1, 0x2, 0x2}, {0x4, 0x3, 0x10, 0xc}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x7}, 0x94) 1m19.577587338s ago: executing program 3 (id=1382): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) (rerun: 32) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)='+', 0x1}], 0x1, 0x5405, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) (async) write(r0, &(0x7f00000001c0)="240000001a005f0400f9f407000904018000200000000010000000000800010000000000", 0x24) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0x6, @multicast2, 0x4e22, 0x1, 'lblc\x00', 0x2, 0x9, 0x15}, {@remote, 0x4e24, 0x2004, 0xa71, 0x80, 0x4}}, 0x44) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (rerun: 64) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x2e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48054}, 0x8800) (async, rerun: 64) r7 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) (rerun: 64) fcntl$notify(r7, 0x402, 0x8000003d) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x2000008) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x1fe) r9 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$UHID_INPUT(r9, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) (async) splice(r9, 0x0, r8, 0x0, 0x20000000000007, 0xa) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r10}, &(0x7f0000000800), &(0x7f0000000840)=r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r12}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m19.501303524s ago: executing program 3 (id=1387): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000240)=""/158) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000040)=""/39) 1m4.487474798s ago: executing program 32 (id=1387): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000240)=""/158) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000040)=""/39) 40.350275598s ago: executing program 4 (id=1932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x0, 0x1fc, 0x0, 0xfffffc80, 0xffffff38, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x8, 0x80007, 0x4, 0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4a74ccc9, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) unshare(0x2000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESOCT=r5], &(0x7f0000000200)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getresuid(&(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10001, &(0x7f00000003c0)={[{@nogrpid}, {@min_batch_time}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}, {@barrier}, {@nodiscard}, {@quota}], [{@fowner_lt}, {@dont_measure}, {@dont_appraise}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, 'nodiscard\xa3\x0f\'\xd1Rm'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname}, {@hash}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000090000003800038014000200626174616476300000000000000000000800010002000000080003000000000006000400"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000191c0)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000019180)={&(0x7f00000190c0)={0xa8, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) 40.193579061s ago: executing program 5 (id=1935): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000100)=0x8) 39.403241955s ago: executing program 4 (id=1943): socket$unix(0x1, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x48, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4d811}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf67}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r9, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 39.402472255s ago: executing program 0 (id=1944): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000002100000000000000aab7712e5e118439a1f807ae3ca4836f9031f3da88e0d1f01d7fab973688bf687f5d795654eac3cdd18ccf8680ec5938bd6fb350487145446b29be8da0cd4bd845c67f930216000e78c60721a8a88b958d3d6de8fe093b6c4442125b3b09257832f7a4b90eba615d986bee31e099a22fc61278b188703010f46040c74bf7d9b30574a5615a29c97e0e060008003fcf50bb23059e4a60106622be554f8d96aefc36b46b987103b915760ba900"/214, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xe6d7f000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(0xffffffffffffffff, 0x7ff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 39.204357151s ago: executing program 4 (id=1946): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde2, 0x0, 0x0}, &(0x7f0000001380)=0x40) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000080)=0x8d70, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0xfffffffd, 0x0, 0x2}, {0x0, 0x2, 0x4, 0xa}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000101050000000000000000100200000106001240000100002c00018014000180084000010600cf50000200000c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0x81, @private2, 0x7828}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x48}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000005c0)={0x4, 0x1}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c42ffff9078fffff4e65d89debd63dc772d68383b16733b3f6febed3627d55bb542098ddb43d6471a0efbe87e5c845981f993551edd549590b4c90930830f8fee4df527f8c2c28748e0d4edb57b1579716155cbb4b428a0bb854262b33a1473cee6d661da771217fd36c054cb58ad9fec426cf4e7e9102eb09dfcc2579cbd3f1376c3566b1f47720297a30da55079c37100"/157], 0x0) 39.126238907s ago: executing program 5 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5ac, &(0x7f00000005c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 39.006157747s ago: executing program 4 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000003c0)={r6}, &(0x7f0000000180)=0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x2, 0x4, 0x9, 0x2, 0xfffffffffffffff4, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r8, 0x0, 0x95) dup3(0xffffffffffffffff, r8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x108, r12, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x17}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab39af171c21140111024512e0aa79596e83a4a388169c24"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17ed52acba86cedb31080abea4e06a4b83845cc1798af85c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c70abd7c93569ff38ccaafd659c95509fdd9a17f0e7f33d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x20080010}, 0xd0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) 38.987575159s ago: executing program 5 (id=1949): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 38.904049045s ago: executing program 0 (id=1950): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 38.831354601s ago: executing program 0 (id=1953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_deladdr={0x34, 0x15, 0x20, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x0, 0xfd}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010100}, @IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000340), &(0x7f0000000540)=r1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xd}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000880)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @tail_call, @call={0x85, 0x0, 0x0, 0x20}], &(0x7f0000000900)='GPL\x00', 0x10000, 0x21, &(0x7f0000000940)=""/33, 0x40f00, 0x6a7df2e72c6974e3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000a00)=[{0x5, 0x2, 0x10}, {0x4, 0x4, 0x2, 0x9}, {0x1, 0x5, 0xa, 0xc}, {0x4, 0x4, 0x0, 0x6}, {0x5, 0x1, 0xd, 0x1}, {0x5, 0x2, 0x2, 0x3}, {0x2, 0x5, 0x6, 0x4}, {0x4, 0x1, 0x2, 0x2}, {0x4, 0x3, 0x10, 0xc}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x7}, 0x94) 38.758929877s ago: executing program 5 (id=1954): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0xa, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x8682, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext, 0x10400, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1002, 0x0, 0x6, 0x0, 0x71ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x1, 0x80, 0x8000000, 0x8000021e}, &(0x7f0000000940)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x2000, r0, &(0x7f0000000500)="0f1fc6b316c055f47a45170ef52273723ed6c2cfcb391784117dc8787281e64cadb83b2c1957a5de9150131b52c43471ed534b38569a4c3479a6f733eccabec13ac5d0a2ec5a868cd82d455ceffd5101e333015456ad72980ec1cfbf92552a2776d5b6de1a72b41f897b09e85b94814f7d6ee705159576e149384ec6744336c85db0b4ae9f3e7f115193644eee44b0e01fd563fc61bf72bd05f342ffd0cbdf41e15ce0519e9af2d1ea972309c893d8f71e0a223c8a74d310ea5d06eee7b88ff4c23aaf", 0xc3, 0x5, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf, 0x54c, r1, &(0x7f00000003c0)="38d79906019c8ef08e9b061c15b4692c1f90e42ff2d058bea5193c0770cc053dd7769d4706bcfae8b6f7f06ca1e44df97da543b537bc26cdbc631dacc778ef7f493e7da4224ebf2523996b62f912ea010e15ef25cf06e5e80b49f3d8dc49e5eb16b5ce5826c63c27ac05da777af90e8740e3", 0x72, 0x2000000000000, 0x0, 0x2, r6}]) vmsplice(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) read(r9, &(0x7f00000019c0)=""/4097, 0x1001) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x31, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x1}) 38.680156233s ago: executing program 0 (id=1955): bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5}) keyctl$session_to_parent(0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 38.552598824s ago: executing program 2 (id=1957): socket$unix(0x1, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x48, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4d811}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf67}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r9, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 38.271291597s ago: executing program 2 (id=1960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) unshare(0x20040400) creat(0x0, 0x0) tee(r1, r0, 0x2, 0x2) 38.239511519s ago: executing program 2 (id=1961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xacc, 0x4000, 0xffffffff, 0x54}, 0x0, 0x0) 38.238821799s ago: executing program 2 (id=1962): close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) (fail_nth: 5) 37.989457109s ago: executing program 2 (id=1964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095", @ANYRESHEX=0x0], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001002bbd70000000020002002004e7ffffffffffffff080002"], 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000300)) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffff}, {0x0, 0xf}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r9, &(0x7f00000002c0)='0\x00', 0x2) 37.988471079s ago: executing program 4 (id=1965): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x10057) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001) unshare(0x2040400) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2d, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb, 0x40000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000500)="7c15b6", 0x3}], 0x1, 0x0) eventfd(0x1000) 37.868008429s ago: executing program 2 (id=1966): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 37.867734329s ago: executing program 33 (id=1966): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 37.867449369s ago: executing program 5 (id=1968): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ustat(0xf000000000000000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x5}}, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={r1, 0x0, 0x0}, &(0x7f0000000980)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() mbind(&(0x7f000018f000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB], 0x48) madvise(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x12) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001b40)=""/4096, 0x5, 0x0, 0x52, 0xd7, &(0x7f0000000440)="7b0092b89481673ae6131dda00ed822f3197a46a4e0790ac83a8f3970f2ea5688f54b9aab2ac8ac17b3166ac23ae5fd015f9566e0fcb1d3215cf66c33163b819c0d6859b038004271d1ea03b00c021cbecdf", &(0x7f0000000680)="ef8f9800ff30f30efd22a8536ed70452d5a59c64e9730ae204252c7864a16e8dcd74705582f80f3648ae26d66ced98cd89286deb710ccc13da965e49a5fc91c32b684556aa972e666fc0ce0763d511abd0caff4abd00392c588edc70ecef5e120e7b41e5d71361ec378ff39ea97e7b4183b1f5755cc31a9ea219606cc203b4328dd40cf19669a1fb33c34364a09d2984a730a0448d8c9262ed23c0e7e6041adca551dec8a4fb47f2fa04727cd23d1b00d2a15267396a3e95892440d7dd4f26e8e07ef5d728de4acc7f783475e6245023b18012ecdf7af6", 0x6, 0x0, 0x9}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="51000000000b01010000000000000000030000080800034000000001050001000000000008000100292e2900080002"], 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) 37.823283792s ago: executing program 4 (id=1969): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0602000004000000a80f00000278771891b3b269c66efaa0d22bc8f2958f94fa48737d35b9b642bc5ff7818a29affa1c4f91b8adb1d98685369a"], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @private}, &(0x7f0000000180)=0xfffffffffffffeff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', r0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x18) setitimer(0x0, 0x0, 0x0) 37.823021213s ago: executing program 34 (id=1969): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0602000004000000a80f00000278771891b3b269c66efaa0d22bc8f2958f94fa48737d35b9b642bc5ff7818a29affa1c4f91b8adb1d98685369a"], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @private}, &(0x7f0000000180)=0xfffffffffffffeff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', r0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x18) setitimer(0x0, 0x0, 0x0) 37.813351314s ago: executing program 0 (id=1970): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000100)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 37.521503367s ago: executing program 5 (id=1971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) unshare(0x20040400) creat(0x0, 0x0) tee(r1, r0, 0x2, 0x2) 37.521205057s ago: executing program 35 (id=1971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) unshare(0x20040400) creat(0x0, 0x0) tee(r1, r0, 0x2, 0x2) 37.520732337s ago: executing program 0 (id=1972): r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x48, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4d811}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf67}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r9, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 37.520289157s ago: executing program 36 (id=1972): r0 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x48, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4d811}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf67}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r9, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) 2.212958231s ago: executing program 6 (id=2458): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r1 = syz_open_pts(r0, 0x62080) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) r4 = dup3(r1, r0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', r3, 0x8000, 0x8, 0x5, 0x0, {{0x3f, 0x4, 0x0, 0x8, 0xfc, 0x68, 0x0, 0xe, 0x2, 0x0, @multicast2, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0x2c, 0xbf, 0x1, 0x6, [{@multicast1, 0xffff}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xffffffff}, {@empty, 0x1}, {@loopback, 0x7}]}, @timestamp={0x44, 0x8, 0x45, 0x0, 0x3, [0x9]}, @rr={0x7, 0x23, 0xbe, [@local, @empty, @loopback, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}, @lsrr={0x83, 0x1f, 0xef, [@multicast2, @local, @local, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x2b, 0xa5, [@rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @multicast1, @remote, @private=0xa010101, @multicast2, @empty, @multicast2, @multicast1]}, @noop, @cipso={0x86, 0x1a, 0x2, [{0x7, 0x7, "401f2aebf6"}, {0x1, 0x4, "9797"}, {0x7, 0x4, "a109"}, {0x7, 0x5, "3890e2"}]}, @lsrr={0x83, 0x2b, 0xde, [@private=0xa010102, @loopback, @multicast1, @broadcast, @remote, @multicast2, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000dc0)={0x1c0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3aadb539}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$TIOCSBRK(r0, 0x5427) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x17) 2.193780502s ago: executing program 1 (id=2459): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000540)=""/145) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x2) 2.085716651s ago: executing program 8 (id=2460): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000002100000000000000aab7712e5e118439a1f807ae3ca4836f9031f3da88e0d1f01d7fab973688bf687f5d795654eac3cdd18ccf8680ec5938bd6fb350487145446b29be8da0cd4bd845c67f930216000e78c60721a8a88b958d3d6de8fe093b6c4442125b3b09257832f7a4b90eba615d986bee31e099a22fc61278b188703010f46040c74bf7d9b30574a5615a29c97e0e060008003fcf50bb23059e4a60106622be554f8d96aefc36b46b987103b915760ba900"/214, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xe6d7f000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x7ff, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.386135967s ago: executing program 8 (id=2466): syz_open_dev$vcsn(0x0, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x1, './file0/file1\x00'}}) 1.35394216s ago: executing program 6 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5ac, &(0x7f00000005c0)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.301721804s ago: executing program 8 (id=2470): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000002100000000000000aab7712e5e118439a1f807ae3ca4836f9031f3da88e0d1f01d7fab973688bf687f5d795654eac3cdd18ccf8680ec5938bd6fb350487145446b29be8da0cd4bd845c67f930216000e78c60721a8a88b958d3d6de8fe093b6c4442125b3b09257832f7a4b90eba615d986bee31e099a22fc61278b188703010f46040c74bf7d9b30574a5615a29c97e0e060008003fcf50bb23059e4a60106622be554f8d96aefc36b46b987103b915760ba900"/214, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xe6d7f000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(0xffffffffffffffff, 0x7ff, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.22679755s ago: executing program 9 (id=2471): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="bc0e0d7c00000000000000000094", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000"], 0xb0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x181000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2009, &(0x7f0000000740)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@abort}, {@nogrpid}, {@resgid, 0x32}], [{@dont_appraise}, {@euid_gt={'euid>', r4}}, {@obj_type={'obj_type', 0x3d, 'abort'}}, {@fowner_lt={'fowner<', r6}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1e, 0x4f8, &(0x7f00000009c0)="$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") syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) 1.214430211s ago: executing program 1 (id=2472): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4091, 0xffb}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.171248875s ago: executing program 6 (id=2473): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42042, 0x19e) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 951.952563ms ago: executing program 9 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x1) 931.889264ms ago: executing program 9 (id=2476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 905.063296ms ago: executing program 9 (id=2477): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000540)=""/145) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000f8ba466aabe98d6c437a570690771ffdd8564b60220d89f9d3de34fda", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001080)={0x6, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x2, 'lc\x00', 0x0, 0x0, 0x4000}, 0x2c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010102, 0x1fd, 0x0, 'lc\x00', 0x4c, 0x2, 0x3f}, 0x2c) 904.672876ms ago: executing program 6 (id=2478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x48}, 0x0) 788.242026ms ago: executing program 6 (id=2479): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="bc0e0d7c00000000000000000094", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000"], 0xb0}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x181000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r1, &(0x7f0000000400)) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000240)}], 0x2, 0x0, 0x0, 0x1f000801}, 0x840) 781.494706ms ago: executing program 8 (id=2480): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000e09bffffee000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x400c040) 736.1083ms ago: executing program 6 (id=2481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x0, 0xcb6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x28000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) 734.78763ms ago: executing program 8 (id=2482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x55) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) 686.751904ms ago: executing program 8 (id=2483): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) socket$igmp(0x2, 0x3, 0x2) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x97, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="0d0300000000000000"], 0x30}}, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x154}}, 0x4080) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4142, 0x1c2) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 349.403401ms ago: executing program 1 (id=2488): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000100)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 227.409011ms ago: executing program 7 (id=2490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x55) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) 208.169783ms ago: executing program 7 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000dc3388a4dce06c438c96d70729f7c1d04000000000000000004000000b46b2c24", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 193.106894ms ago: executing program 7 (id=2492): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000e09bffffee000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x400c040) 173.552496ms ago: executing program 7 (id=2493): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x55) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) 113.5042ms ago: executing program 7 (id=2494): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="bc0e0d7c00000000000000000094", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000"], 0xb0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x181000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2009, &(0x7f0000000740)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@abort}, {@nogrpid}, {@resgid, 0x32}], [{@dont_appraise}, {@euid_gt={'euid>', r4}}, {@obj_type={'obj_type', 0x3d, 'abort'}}, {@fowner_lt={'fowner<', r6}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1e, 0x4f8, &(0x7f00000009c0)="$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") socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000240)}], 0x2, 0x0, 0x0, 0x1f000801}, 0x840) 106.614271ms ago: executing program 1 (id=2495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x0, 0x0, 0x0) 70.905333ms ago: executing program 7 (id=2496): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000100)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 25.285767ms ago: executing program 9 (id=2497): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) setrlimit(0x9, &(0x7f0000000380)) 25.082877ms ago: executing program 1 (id=2498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x1) 591.019µs ago: executing program 9 (id=2499): r0 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 0s ago: executing program 1 (id=2500): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000100)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): 0.571100][ T8835] bridge0: port 3(batadv0) entered blocking state [ 120.577680][ T8835] bridge0: port 3(batadv0) entered disabled state [ 120.599955][ T8844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.616266][ T8854] smc: net device bond0 applied user defined pnetid SYZ0 [ 120.624317][ T8854] smc: net device bond0 erased user defined pnetid SYZ0 [ 120.650916][ T8857] loop8: detected capacity change from 0 to 1024 [ 120.657941][ T8857] EXT4-fs: Ignoring removed orlov option [ 120.663657][ T8857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.698392][ T8861] loop6: detected capacity change from 0 to 1024 [ 120.699863][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.709154][ T8861] EXT4-fs: Ignoring removed orlov option [ 120.719729][ T8861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.727281][ T8857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.728693][ T8853] random: crng reseeded on system resumption [ 120.773902][ T8861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.851312][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.873684][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.883278][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 120.892577][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 120.962039][ T8530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.966153][ T8872] loop6: detected capacity change from 0 to 1024 [ 121.015961][ T8872] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.065640][ T8872] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.2029: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.079964][ T8872] Quota error (device loop6): write_blk: dquota write failed [ 121.087416][ T8872] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 121.104931][ T8872] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2029: Failed to acquire dquot type 0 [ 121.117027][ T8872] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.2029: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.131526][ T8872] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2029: Invalid inode bitmap blk 0 in block_group 0 [ 121.166061][ T8880] lo speed is unknown, defaulting to 1000 [ 121.171973][ T8880] lo speed is unknown, defaulting to 1000 [ 121.172036][ T59] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.177961][ T8880] lo speed is unknown, defaulting to 1000 [ 121.198601][ T8880] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.210703][ T8880] lo speed is unknown, defaulting to 1000 [ 121.218249][ T8880] lo speed is unknown, defaulting to 1000 [ 121.224577][ T8880] lo speed is unknown, defaulting to 1000 [ 121.232829][ T8879] loop1: detected capacity change from 0 to 512 [ 121.233000][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2033'. [ 121.239942][ T8880] lo speed is unknown, defaulting to 1000 [ 121.254154][ T59] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 121.262763][ T59] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 121.281924][ T8872] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 121.291339][ T8872] EXT4-fs (loop6): 1 orphan inode deleted [ 121.297596][ T8880] lo speed is unknown, defaulting to 1000 [ 121.304057][ T8872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.318209][ T8879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.334380][ T8879] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.386443][ T8889] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2036'. [ 121.395554][ T8889] netem: unknown loss type 12 [ 121.400284][ T8889] netem: change failed [ 121.431542][ T8892] 9pnet_fd: Insufficient options for proto=fd [ 121.436730][ T8876] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2030: corrupted inode contents [ 121.455346][ T8876] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2030: mark_inode_dirty error [ 121.485846][ T8896] loop9: detected capacity change from 0 to 1024 [ 121.504861][ T8896] EXT4-fs: Ignoring removed orlov option [ 121.510587][ T8896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.523728][ T8872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.524341][ T8899] loop7: detected capacity change from 0 to 1024 [ 121.534586][ T8876] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2030: corrupted inode contents [ 121.551560][ T8899] EXT4-fs: Ignoring removed orlov option [ 121.557292][ T8899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.580938][ T8879] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2030: corrupted inode contents [ 121.584628][ T8896] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.604954][ T8879] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2030: mark_inode_dirty error [ 121.626720][ T8879] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2030: corrupted inode contents [ 121.639883][ T8899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.655706][ T8905] loop8: detected capacity change from 0 to 2048 [ 121.663430][ T8879] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2030: mark_inode_dirty error [ 121.681200][ T8879] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2030: corrupted inode contents [ 121.693898][ T8879] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2030: mark_inode_dirty error [ 121.712088][ T8908] netlink: 29 bytes leftover after parsing attributes in process `syz.9.2039'. [ 121.723513][ T8570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.750391][ T8914] netlink: 'syz.6.2042': attribute type 13 has an invalid length. [ 121.758370][ T8914] netlink: 'syz.6.2042': attribute type 17 has an invalid length. [ 121.777713][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.793518][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.800348][ T8911] random: crng reseeded on system resumption [ 121.832975][ T29] audit: type=1326 audit(1755907661.619:30317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 121.856507][ T29] audit: type=1326 audit(1755907661.619:30318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 121.880150][ T29] audit: type=1326 audit(1755907661.619:30319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 121.903727][ T29] audit: type=1326 audit(1755907661.619:30320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 121.927313][ T29] audit: type=1326 audit(1755907661.619:30321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 121.950828][ T29] audit: type=1326 audit(1755907661.619:30322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 121.974528][ T29] audit: type=1326 audit(1755907661.619:30323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 122.025548][ T8914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.094279][ T8922] siw: device registration error -23 [ 122.404961][ T8930] loop6: detected capacity change from 0 to 512 [ 122.471466][ T8929] siw: device registration error -23 [ 122.653988][ T8935] FAULT_INJECTION: forcing a failure. [ 122.653988][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 122.666714][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.8.2050 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.666741][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.666757][ T8935] Call Trace: [ 122.666762][ T8935] [ 122.666769][ T8935] __dump_stack+0x1d/0x30 [ 122.666794][ T8935] dump_stack_lvl+0xe8/0x140 [ 122.666814][ T8935] dump_stack+0x15/0x1b [ 122.666840][ T8935] should_fail_ex+0x265/0x280 [ 122.666859][ T8935] should_failslab+0x8c/0xb0 [ 122.666882][ T8935] kmem_cache_alloc_noprof+0x50/0x310 [ 122.667007][ T8935] ? alloc_empty_file+0x76/0x200 [ 122.667037][ T8935] alloc_empty_file+0x76/0x200 [ 122.667109][ T8935] alloc_file_pseudo+0xc6/0x160 [ 122.667134][ T8935] anon_inode_getfile+0xa0/0x120 [ 122.667242][ T8935] bpf_link_prime+0xfc/0x1d0 [ 122.667321][ T8935] bpf_raw_tp_link_attach+0x2ff/0x400 [ 122.667342][ T8935] bpf_raw_tracepoint_open+0x164/0x2c0 [ 122.667366][ T8935] ? security_bpf+0x2b/0x90 [ 122.667411][ T8935] __sys_bpf+0x6a3/0x7b0 [ 122.667443][ T8935] __x64_sys_bpf+0x41/0x50 [ 122.667469][ T8935] x64_sys_call+0x2aea/0x2ff0 [ 122.667488][ T8935] do_syscall_64+0xd2/0x200 [ 122.667509][ T8935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.667529][ T8935] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.667563][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.667585][ T8935] RIP: 0033:0x7facc439ebe9 [ 122.667682][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.667699][ T8935] RSP: 002b:00007facc2dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.667723][ T8935] RAX: ffffffffffffffda RBX: 00007facc45c5fa0 RCX: 00007facc439ebe9 [ 122.667736][ T8935] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 122.667749][ T8935] RBP: 00007facc2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 122.667838][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.667849][ T8935] R13: 00007facc45c6038 R14: 00007facc45c5fa0 R15: 00007ffc52661758 [ 122.667865][ T8935] [ 122.877083][ T8930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.924625][ T8939] loop9: detected capacity change from 0 to 512 [ 122.978348][ T8940] FAULT_INJECTION: forcing a failure. [ 122.978348][ T8940] name failslab, interval 1, probability 0, space 0, times 0 [ 122.991059][ T8940] CPU: 0 UID: 0 PID: 8940 Comm: syz.1.2049 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.991086][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.991162][ T8940] Call Trace: [ 122.991170][ T8940] [ 122.991224][ T8940] __dump_stack+0x1d/0x30 [ 122.991243][ T8940] dump_stack_lvl+0xe8/0x140 [ 122.991263][ T8940] dump_stack+0x15/0x1b [ 122.991281][ T8940] should_fail_ex+0x265/0x280 [ 122.991299][ T8940] should_failslab+0x8c/0xb0 [ 122.991332][ T8940] kmem_cache_alloc_noprof+0x50/0x310 [ 122.991358][ T8940] ? copy_utsname+0xee/0x310 [ 122.991378][ T8940] copy_utsname+0xee/0x310 [ 122.991394][ T8940] create_new_namespaces+0xde/0x3d0 [ 122.991463][ T8940] unshare_nsproxy_namespaces+0xe8/0x120 [ 122.991492][ T8940] ksys_unshare+0x3d0/0x6d0 [ 122.991518][ T8940] ? ksys_write+0x192/0x1a0 [ 122.991538][ T8940] __x64_sys_unshare+0x1f/0x30 [ 122.991633][ T8940] x64_sys_call+0x2911/0x2ff0 [ 122.991709][ T8940] do_syscall_64+0xd2/0x200 [ 122.991732][ T8940] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.991754][ T8940] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.991784][ T8940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.991807][ T8940] RIP: 0033:0x7fa5bbe0ebe9 [ 122.991903][ T8940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.991920][ T8940] RSP: 002b:00007fa5ba835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.991942][ T8940] RAX: ffffffffffffffda RBX: 00007fa5bc036180 RCX: 00007fa5bbe0ebe9 [ 122.991956][ T8940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 122.991970][ T8940] RBP: 00007fa5ba835090 R08: 0000000000000000 R09: 0000000000000000 [ 122.992071][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.992085][ T8940] R13: 00007fa5bc036218 R14: 00007fa5bc036180 R15: 00007ffc8126fde8 [ 122.992160][ T8940] [ 123.221726][ T8930] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.234109][ T8939] journal_path: Non-blockdev passed as './file0' [ 123.240496][ T8939] EXT4-fs: error: could not find journal device path [ 123.297551][ T8930] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2048: corrupted inode contents [ 123.302239][ T8939] netlink: 'syz.9.2051': attribute type 1 has an invalid length. [ 123.323168][ T8930] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2048: mark_inode_dirty error [ 123.339357][ T8930] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2048: corrupted inode contents [ 123.354120][ T8946] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2048: corrupted inode contents [ 123.373253][ T8946] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2048: mark_inode_dirty error [ 123.477130][ T8946] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2048: corrupted inode contents [ 123.479302][ T8957] loop7: detected capacity change from 0 to 1024 [ 123.503085][ T8958] loop1: detected capacity change from 0 to 512 [ 123.504671][ T8957] EXT4-fs: Ignoring removed orlov option [ 123.515169][ T8957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.558335][ T8957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.589651][ T8960] lo speed is unknown, defaulting to 1000 [ 123.604057][ T8946] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2048: mark_inode_dirty error [ 123.604479][ T8946] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2048: corrupted inode contents [ 123.604658][ T8946] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2048: mark_inode_dirty error [ 123.617123][ T8963] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 123.633297][ T8964] netlink: 29 bytes leftover after parsing attributes in process `syz.7.2056'. [ 123.682173][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.714016][ T8570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.714876][ T8958] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 123.731100][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2057'. [ 123.856436][ T8975] loop1: detected capacity change from 0 to 1024 [ 123.878122][ T8975] EXT4-fs: Ignoring removed orlov option [ 123.883858][ T8975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.068427][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2062'. [ 124.081866][ T8975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.203044][ T8994] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2064'. [ 124.212065][ T8994] netem: unknown loss type 12 [ 124.216955][ T8994] netem: change failed [ 124.231763][ T8996] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2065'. [ 124.240773][ T8996] netem: unknown loss type 12 [ 124.245525][ T8996] netem: change failed [ 124.265413][ T8996] program syz.9.2065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.287267][ T8996] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.317160][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.330928][ T9003] loop8: detected capacity change from 0 to 512 [ 124.340670][ T9003] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2069: bg 0: block 16: invalid block bitmap [ 124.372638][ T9003] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 124.384039][ T9008] netlink: 'syz.1.2070': attribute type 4 has an invalid length. [ 124.388678][ T9003] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2069: attempt to clear invalid blocks 1669132790 len 1 [ 124.391805][ T9008] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2070'. [ 124.406993][ T9003] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2069: invalid indirect mapped block 4294967295 (level 1) [ 124.429082][ T9003] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2069: invalid indirect mapped block 4294967295 (level 2) [ 124.443886][ T9003] EXT4-fs (loop8): 1 truncate cleaned up [ 124.450681][ T9003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.470248][ T9010] loop1: detected capacity change from 0 to 1024 [ 124.484033][ T9010] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.496446][ T9010] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.2071: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.511025][ T9010] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2071: Failed to acquire dquot type 0 [ 124.511832][ T8530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.522856][ T9010] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2071: Freeing blocks not in datazone - block = 0, count = 4096 [ 124.545132][ T9010] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2071: Invalid inode bitmap blk 0 in block_group 0 [ 124.558852][ T9010] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 124.560725][ T9013] netlink: 'syz.8.2072': attribute type 21 has an invalid length. [ 124.572288][ T9010] EXT4-fs (loop1): 1 orphan inode deleted [ 124.575456][ T9013] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2072'. [ 124.581431][ T59] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.609241][ T9010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.621983][ T9015] loop8: detected capacity change from 0 to 2048 [ 124.622167][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 124.687830][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2074'. [ 124.742337][ T9010] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.799778][ T9022] random: crng reseeded on system resumption [ 124.824006][ T9024] loop1: detected capacity change from 0 to 1024 [ 124.833317][ T9024] EXT4-fs: Ignoring removed orlov option [ 124.839047][ T9024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.863698][ T9024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.922298][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.021395][ T9036] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.2080'. [ 125.040961][ T9038] loop1: detected capacity change from 0 to 512 [ 125.056530][ T9038] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2082: bg 0: block 16: invalid block bitmap [ 125.070438][ T9040] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2083'. [ 125.088842][ T9035] random: crng reseeded on system resumption [ 125.110367][ T9049] FAULT_INJECTION: forcing a failure. [ 125.110367][ T9049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.123628][ T9049] CPU: 1 UID: 0 PID: 9049 Comm: syz.7.2086 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.123695][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.123705][ T9049] Call Trace: [ 125.123712][ T9049] [ 125.123719][ T9049] __dump_stack+0x1d/0x30 [ 125.123779][ T9049] dump_stack_lvl+0xe8/0x140 [ 125.123795][ T9049] dump_stack+0x15/0x1b [ 125.123809][ T9049] should_fail_ex+0x265/0x280 [ 125.123835][ T9049] should_fail+0xb/0x20 [ 125.123850][ T9049] should_fail_usercopy+0x1a/0x20 [ 125.123869][ T9049] _copy_from_iter+0xd2/0xe80 [ 125.123890][ T9049] ? __build_skb_around+0x1a0/0x200 [ 125.123943][ T9049] ? __alloc_skb+0x223/0x320 [ 125.124021][ T9049] netlink_sendmsg+0x471/0x6b0 [ 125.124052][ T9049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.124075][ T9049] __sock_sendmsg+0x145/0x180 [ 125.124100][ T9049] ____sys_sendmsg+0x31e/0x4e0 [ 125.124155][ T9049] ___sys_sendmsg+0x17b/0x1d0 [ 125.124218][ T9049] __x64_sys_sendmsg+0xd4/0x160 [ 125.124245][ T9049] x64_sys_call+0x191e/0x2ff0 [ 125.124270][ T9049] do_syscall_64+0xd2/0x200 [ 125.124292][ T9049] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.124314][ T9049] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.124367][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.124386][ T9049] RIP: 0033:0x7f9fcb60ebe9 [ 125.124401][ T9049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.124418][ T9049] RSP: 002b:00007f9fca06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.124436][ T9049] RAX: ffffffffffffffda RBX: 00007f9fcb835fa0 RCX: 00007f9fcb60ebe9 [ 125.124524][ T9049] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 125.124536][ T9049] RBP: 00007f9fca06f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.124546][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.124558][ T9049] R13: 00007f9fcb836038 R14: 00007f9fcb835fa0 R15: 00007ffec36c3858 [ 125.124577][ T9049] [ 125.369302][ T9055] veth0_vlan: entered allmulticast mode [ 125.381305][ T9055] veth0_vlan: left promiscuous mode [ 125.387834][ T9055] veth0_vlan: entered promiscuous mode [ 125.400530][ T9055] team0: Device veth0_vlan failed to register rx_handler [ 125.434857][ T9038] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 125.446213][ T9038] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2082: attempt to clear invalid blocks 1669132790 len 1 [ 125.461155][ T9038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2082: invalid indirect mapped block 4294967295 (level 1) [ 125.476361][ T9038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2082: invalid indirect mapped block 4294967295 (level 2) [ 125.491957][ T9038] EXT4-fs (loop1): 1 truncate cleaned up [ 125.497923][ T9038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.556666][ T9057] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 125.619720][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.666909][ T9064] netem: unknown loss type 12 [ 125.671651][ T9064] netem: change failed [ 125.679635][ T9064] program syz.7.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.698557][ T9064] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.712871][ T9065] netem: unknown loss type 12 [ 125.717579][ T9065] netem: change failed [ 125.929315][ T9070] loop6: detected capacity change from 0 to 512 [ 125.942578][ T9070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.956359][ T9070] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.974545][ T9070] FAULT_INJECTION: forcing a failure. [ 125.974545][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 125.987619][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.6.2093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.987716][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.987729][ T9070] Call Trace: [ 125.987737][ T9070] [ 125.987744][ T9070] __dump_stack+0x1d/0x30 [ 125.987766][ T9070] dump_stack_lvl+0xe8/0x140 [ 125.987786][ T9070] dump_stack+0x15/0x1b [ 125.987823][ T9070] should_fail_ex+0x265/0x280 [ 125.987842][ T9070] should_failslab+0x8c/0xb0 [ 125.987861][ T9070] __kvmalloc_node_noprof+0x123/0x4e0 [ 125.987887][ T9070] ? vmemdup_user+0x26/0xd0 [ 125.988008][ T9070] ? should_fail_usercopy+0x1a/0x20 [ 125.988103][ T9070] vmemdup_user+0x26/0xd0 [ 125.988123][ T9070] path_setxattrat+0x1b6/0x310 [ 125.988244][ T9070] __x64_sys_setxattr+0x6e/0x90 [ 125.988268][ T9070] x64_sys_call+0xad2/0x2ff0 [ 125.988333][ T9070] do_syscall_64+0xd2/0x200 [ 125.988401][ T9070] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.988426][ T9070] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.988451][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.988474][ T9070] RIP: 0033:0x7f6770a2ebe9 [ 125.988490][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.988579][ T9070] RSP: 002b:00007f676f497038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 125.988600][ T9070] RAX: ffffffffffffffda RBX: 00007f6770c55fa0 RCX: 00007f6770a2ebe9 [ 125.988614][ T9070] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00002000000000c0 [ 125.988627][ T9070] RBP: 00007f676f497090 R08: 0000000000000000 R09: 0000000000000000 [ 125.988641][ T9070] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 125.988659][ T9070] R13: 00007f6770c56038 R14: 00007f6770c55fa0 R15: 00007ffe425387d8 [ 125.988678][ T9070] [ 126.189425][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.275589][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 126.275677][ T29] audit: type=1400 audit(1755907666.079:30377): avc: denied { write } for pid=9074 comm="syz.6.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.461850][ T29] audit: type=1400 audit(1755907666.269:30378): avc: denied { getopt } for pid=9078 comm="syz.8.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.501480][ T9082] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.517003][ T9084] loop1: detected capacity change from 0 to 1024 [ 126.524030][ T9084] EXT4-fs: Ignoring removed orlov option [ 126.529915][ T9084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.551784][ T9084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.566783][ T9082] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.584192][ T29] audit: type=1326 audit(1755907666.389:30379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9088 comm="syz.8.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facc439ebe9 code=0x0 [ 126.633197][ T9082] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.683091][ T9082] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.704970][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.726117][ T9095] loop1: detected capacity change from 0 to 512 [ 126.738630][ T9095] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2100: bg 0: block 16: invalid block bitmap [ 126.751710][ T1961] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.757181][ T9095] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 126.788933][ T1961] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.807592][ T9095] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2100: attempt to clear invalid blocks 1669132790 len 1 [ 126.808034][ T29] audit: type=1326 audit(1755907666.609:30380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.7.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 126.822942][ T1961] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.844780][ T29] audit: type=1326 audit(1755907666.609:30381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.7.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 126.844807][ T29] audit: type=1326 audit(1755907666.609:30382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.7.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 126.877981][ T1961] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.913930][ T9100] loop6: detected capacity change from 0 to 1024 [ 126.919928][ T9095] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2100: invalid indirect mapped block 4294967295 (level 1) [ 126.934734][ T9100] EXT4-fs: Ignoring removed orlov option [ 126.940540][ T9100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.949804][ T9095] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2100: invalid indirect mapped block 4294967295 (level 2) [ 126.969833][ T9095] EXT4-fs (loop1): 1 truncate cleaned up [ 126.976212][ T9095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.977336][ T9100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.016586][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.026465][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.044940][ T9105] loop7: detected capacity change from 0 to 512 [ 127.080552][ T9105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.100505][ T9107] loop1: detected capacity change from 0 to 8192 [ 127.107670][ T9105] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.157706][ T9105] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2103: corrupted inode contents [ 127.186262][ T9112] lo speed is unknown, defaulting to 1000 [ 127.201513][ T9105] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2103: mark_inode_dirty error [ 127.220044][ T29] audit: type=1400 audit(1755907666.999:30383): avc: denied { ioctl } for pid=9106 comm="syz.1.2104" path="socket:[29315]" dev="sockfs" ino=29315 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.270004][ T9105] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2103: corrupted inode contents [ 127.319514][ T9118] loop9: detected capacity change from 0 to 1024 [ 127.327636][ T9116] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2103: corrupted inode contents [ 127.350299][ T9116] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2103: mark_inode_dirty error [ 127.362835][ T9118] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.381264][ T9116] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2103: corrupted inode contents [ 127.395123][ T9118] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.2106: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.410567][ T9116] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2103: mark_inode_dirty error [ 127.422684][ T9118] Quota error (device loop9): write_blk: dquota write failed [ 127.430109][ T9118] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 127.442118][ T9116] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2103: corrupted inode contents [ 127.455843][ T9118] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2106: Failed to acquire dquot type 0 [ 127.476325][ T29] audit: type=1326 audit(1755907667.259:30384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9121 comm="syz.8.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc439ebe9 code=0x7ffc0000 [ 127.529091][ T9116] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2103: mark_inode_dirty error [ 127.551525][ T9118] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.2106: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.571625][ T9125] netem: unknown loss type 12 [ 127.576328][ T9125] netem: change failed [ 127.618210][ T9118] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2106: Invalid inode bitmap blk 0 in block_group 0 [ 127.631188][ T2297] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.647293][ T2297] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 127.647345][ T9118] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 127.668178][ T9118] EXT4-fs (loop9): 1 orphan inode deleted [ 127.674433][ T9118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.832368][ T8570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.914429][ T9130] loop7: detected capacity change from 0 to 1024 [ 127.957036][ T9132] loop6: detected capacity change from 0 to 512 [ 127.964815][ T9130] EXT4-fs: Ignoring removed orlov option [ 127.970577][ T9130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.987983][ T9118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.015441][ T9132] validate_nla: 4 callbacks suppressed [ 128.015453][ T9132] netlink: 'syz.6.2111': attribute type 10 has an invalid length. [ 128.063937][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.087213][ T9137] netlink: 'syz.6.2111': attribute type 10 has an invalid length. [ 128.091807][ T9132] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 128.112302][ T9137] batadv0: entered promiscuous mode [ 128.117640][ T9137] batadv0: entered allmulticast mode [ 128.140314][ T9137] bond0: (slave batadv0): Releasing backup interface [ 128.153644][ T9137] bridge0: port 3(batadv0) entered blocking state [ 128.160143][ T9137] bridge0: port 3(batadv0) entered disabled state [ 128.199570][ T9143] loop9: detected capacity change from 0 to 1024 [ 128.208480][ T9145] loop1: detected capacity change from 0 to 512 [ 128.216887][ T9143] EXT4-fs: Ignoring removed orlov option [ 128.222603][ T9143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.232430][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.243421][ T9145] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2114: bg 0: block 16: invalid block bitmap [ 128.256219][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.261515][ T9145] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 128.278596][ T9145] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2114: attempt to clear invalid blocks 1669132790 len 1 [ 128.301770][ T9145] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2114: invalid indirect mapped block 4294967295 (level 1) [ 128.328907][ T9153] loop9: detected capacity change from 0 to 1024 [ 128.342584][ T9154] loop7: detected capacity change from 0 to 1024 [ 128.349134][ T9145] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2114: invalid indirect mapped block 4294967295 (level 2) [ 128.371533][ T9153] EXT4-fs: Ignoring removed orlov option [ 128.377330][ T9153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.392029][ T9154] EXT4-fs: Ignoring removed orlov option [ 128.397709][ T9154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.432109][ T9145] EXT4-fs (loop1): 1 truncate cleaned up [ 128.491158][ T1961] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 128.500522][ T1961] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 128.579372][ T9171] loop8: detected capacity change from 0 to 1024 [ 128.588586][ T9171] EXT4-fs: Ignoring removed orlov option [ 128.594413][ T9171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.604113][ T9175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.614560][ T9175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.663665][ T9175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.674077][ T9175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.689398][ T9184] smc: net device bond0 applied user defined pnetid SYZ0 [ 128.697026][ T9184] smc: net device bond0 erased user defined pnetid SYZ0 [ 128.698423][ T9171] __nla_validate_parse: 9 callbacks suppressed [ 128.698435][ T9171] netlink: 29 bytes leftover after parsing attributes in process `syz.8.2123'. [ 128.732637][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2126'. [ 128.741201][ T9188] loop9: detected capacity change from 0 to 2048 [ 128.756188][ T9175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.766578][ T9175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.819240][ T9194] FAULT_INJECTION: forcing a failure. [ 128.819240][ T9194] name failslab, interval 1, probability 0, space 0, times 0 [ 128.832147][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.9.2131 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.832163][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.832170][ T9194] Call Trace: [ 128.832175][ T9194] [ 128.832179][ T9194] __dump_stack+0x1d/0x30 [ 128.832193][ T9194] dump_stack_lvl+0xe8/0x140 [ 128.832284][ T9194] dump_stack+0x15/0x1b [ 128.832293][ T9194] should_fail_ex+0x265/0x280 [ 128.832305][ T9194] should_failslab+0x8c/0xb0 [ 128.832319][ T9194] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 128.832413][ T9194] ? debugfs_alloc_inode+0x34/0x40 [ 128.832428][ T9194] ? lookup_noperm+0xc9/0x180 [ 128.832445][ T9194] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 128.832536][ T9194] debugfs_alloc_inode+0x34/0x40 [ 128.832560][ T9194] alloc_inode+0x40/0x170 [ 128.832572][ T9194] new_inode+0x1d/0xe0 [ 128.832585][ T9194] __debugfs_create_file+0x109/0x330 [ 128.832641][ T9194] debugfs_create_file_full+0x3f/0x60 [ 128.832701][ T9194] ? __pfx_wg_setup+0x10/0x10 [ 128.832715][ T9194] ref_tracker_dir_debugfs+0x100/0x1e0 [ 128.832753][ T9194] alloc_netdev_mqs+0x1a2/0xa30 [ 128.832767][ T9194] rtnl_create_link+0x239/0x710 [ 128.832846][ T9194] rtnl_newlink_create+0x14c/0x620 [ 128.832863][ T9194] ? security_capable+0x83/0x90 [ 128.832942][ T9194] ? netlink_ns_capable+0x86/0xa0 [ 128.832960][ T9194] rtnl_newlink+0xf29/0x12d0 [ 128.832978][ T9194] ? __kfree_skb+0x109/0x150 [ 128.832989][ T9194] ? __rcu_read_unlock+0x4f/0x70 [ 128.833080][ T9194] ? __kfree_skb+0x109/0x150 [ 128.833090][ T9194] ? __rcu_read_unlock+0x4f/0x70 [ 128.833109][ T9194] ? avc_has_perm_noaudit+0x1b1/0x200 [ 128.833135][ T9194] ? cred_has_capability+0x210/0x280 [ 128.833193][ T9194] ? selinux_capable+0x31/0x40 [ 128.833208][ T9194] ? security_capable+0x83/0x90 [ 128.833220][ T9194] ? ns_capable+0x7d/0xb0 [ 128.833231][ T9194] ? __pfx_rtnl_newlink+0x10/0x10 [ 128.833303][ T9194] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 128.833319][ T9194] netlink_rcv_skb+0x123/0x220 [ 128.833330][ T9194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.833347][ T9194] rtnetlink_rcv+0x1c/0x30 [ 128.833360][ T9194] netlink_unicast+0x5bd/0x690 [ 128.833419][ T9194] netlink_sendmsg+0x58b/0x6b0 [ 128.833431][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.833443][ T9194] __sock_sendmsg+0x145/0x180 [ 128.833485][ T9194] ____sys_sendmsg+0x31e/0x4e0 [ 128.833498][ T9194] ___sys_sendmsg+0x17b/0x1d0 [ 128.833583][ T9194] __x64_sys_sendmsg+0xd4/0x160 [ 128.833597][ T9194] x64_sys_call+0x191e/0x2ff0 [ 128.833608][ T9194] do_syscall_64+0xd2/0x200 [ 128.833623][ T9194] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.833692][ T9194] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.833716][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.833737][ T9194] RIP: 0033:0x7f32979aebe9 [ 128.833761][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.833770][ T9194] RSP: 002b:00007f329640f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.833782][ T9194] RAX: ffffffffffffffda RBX: 00007f3297bd5fa0 RCX: 00007f32979aebe9 [ 128.833789][ T9194] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 128.833808][ T9194] RBP: 00007f329640f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.833815][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.833848][ T9194] R13: 00007f3297bd6038 R14: 00007f3297bd5fa0 R15: 00007ffc6bc7c668 [ 128.833882][ T9194] [ 128.833886][ T9194] debugfs: out of free dentries, can not create file 'netdev@ffff88810c176550' [ 129.072871][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2132'. [ 129.190597][ T9194] wireguard0: entered promiscuous mode [ 129.196144][ T9194] wireguard0: entered allmulticast mode [ 129.209118][ T9175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.219520][ T9175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.238504][ T9202] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2 [ 129.263564][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2134'. [ 129.310010][ T9209] loop6: detected capacity change from 0 to 1024 [ 129.323143][ T51] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.327978][ T9209] EXT4-fs: Ignoring removed orlov option [ 129.331429][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.337100][ T9209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.370822][ T9214] loop9: detected capacity change from 0 to 1024 [ 129.378064][ T9214] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.383919][ T1961] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.396647][ T1961] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.404263][ T9214] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.2137: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.420990][ T9214] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2137: Failed to acquire dquot type 0 [ 129.426323][ T1961] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.433297][ T9214] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.2137: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.440406][ T1961] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.456986][ T1961] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.470212][ T1961] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.479003][ T9214] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2137: Invalid inode bitmap blk 0 in block_group 0 [ 129.492232][ T1961] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.517083][ T9214] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 129.525759][ T1961] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 129.543945][ T9214] EXT4-fs (loop9): 1 orphan inode deleted [ 129.652266][ T9224] lo speed is unknown, defaulting to 1000 [ 129.680394][ T9228] syzkaller0: entered allmulticast mode [ 129.692376][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2142'. [ 129.705993][ T9228] syzkaller0 (unregistering): left allmulticast mode [ 129.761942][ T9236] loop6: detected capacity change from 0 to 1024 [ 129.768629][ T9236] EXT4-fs: Ignoring removed orlov option [ 129.774348][ T9236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.792279][ T9238] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 129.896171][ T9236] netlink: 29 bytes leftover after parsing attributes in process `syz.6.2143'. [ 129.897134][ T9252] random: crng reseeded on system resumption [ 129.942614][ T9258] loop6: detected capacity change from 0 to 1024 [ 129.950247][ T9258] EXT4-fs: Ignoring removed orlov option [ 129.955932][ T9258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.041327][ T9265] loop6: detected capacity change from 0 to 512 [ 130.059800][ T9265] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2152: iget: bad extended attribute block 1 [ 130.080528][ T9265] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2152: couldn't read orphan inode 15 (err -117) [ 130.321853][ T9265] netlink: 'syz.6.2152': attribute type 10 has an invalid length. [ 130.334852][ T9265] team0: Port device dummy0 added [ 130.403202][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2152'. [ 130.412701][ T9269] netlink: 'syz.6.2152': attribute type 10 has an invalid length. [ 130.443250][ T9269] team0: Port device dummy0 removed [ 130.451124][ T9269] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.489239][ T9272] loop6: detected capacity change from 0 to 1024 [ 130.498458][ T9272] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.513550][ T9272] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.2154: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.527957][ T9272] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2154: Failed to acquire dquot type 0 [ 130.540150][ T9272] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.2154: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.557303][ T9272] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2154: Invalid inode bitmap blk 0 in block_group 0 [ 130.591015][ T59] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.614703][ T59] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 130.629739][ T9272] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 130.650767][ T9272] EXT4-fs (loop6): 1 orphan inode deleted [ 130.684271][ T9274] random: crng reseeded on system resumption [ 131.065110][ T9282] loop6: detected capacity change from 0 to 512 [ 131.099617][ T9282] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2157: bg 0: block 16: invalid block bitmap [ 131.184839][ T9282] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 131.203297][ T9282] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2157: attempt to clear invalid blocks 1669132790 len 1 [ 131.243805][ T9282] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2157: invalid indirect mapped block 4294967295 (level 1) [ 131.262607][ T9284] random: crng reseeded on system resumption [ 131.301005][ T9282] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2157: invalid indirect mapped block 4294967295 (level 2) [ 131.336945][ T9282] EXT4-fs (loop6): 1 truncate cleaned up [ 131.406447][ T9292] loop1: detected capacity change from 0 to 1024 [ 131.441259][ T9292] EXT4-fs: Ignoring removed orlov option [ 131.446972][ T9292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.598639][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 131.598655][ T29] audit: type=1400 audit(1755907671.389:30533): avc: denied { mount } for pid=9296 comm="syz.6.2162" name="/" dev="ramfs" ino=30795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.627215][ T29] audit: type=1326 audit(1755907671.389:30534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.650826][ T29] audit: type=1326 audit(1755907671.389:30535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.674698][ T29] audit: type=1326 audit(1755907671.389:30536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.698277][ T29] audit: type=1326 audit(1755907671.389:30537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.721884][ T29] audit: type=1326 audit(1755907671.389:30538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.745438][ T29] audit: type=1326 audit(1755907671.389:30539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.769140][ T29] audit: type=1400 audit(1755907671.389:30540): avc: denied { create } for pid=9296 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.788804][ T29] audit: type=1326 audit(1755907671.389:30541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.812312][ T29] audit: type=1326 audit(1755907671.389:30542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.6.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6770a2ebe9 code=0x7ffc0000 [ 131.905028][ T9292] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2160'. [ 131.923572][ T9303] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.986059][ T9309] loop1: detected capacity change from 0 to 1024 [ 132.010784][ T9309] EXT4-fs: Ignoring removed orlov option [ 132.016537][ T9309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.039159][ T9308] lo speed is unknown, defaulting to 1000 [ 132.047192][ T9303] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.076789][ T9309] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2166'. [ 132.091203][ T9303] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.164648][ T9319] loop1: detected capacity change from 0 to 512 [ 132.174872][ T9311] random: crng reseeded on system resumption [ 132.184760][ T9303] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.196063][ T9319] netlink: 'syz.1.2168': attribute type 10 has an invalid length. [ 132.349257][ T41] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.363365][ T9319] netlink: 'syz.1.2168': attribute type 10 has an invalid length. [ 132.371221][ T9319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2168'. [ 132.430536][ T41] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.438906][ T41] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.634875][ T9325] loop6: detected capacity change from 0 to 1024 [ 132.664785][ T9325] EXT4-fs: Ignoring removed orlov option [ 132.670527][ T9325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.883511][ T41] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.063059][ T9338] vhci_hcd: invalid port number 96 [ 133.068214][ T9338] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 133.292272][ T9345] netlink: 'syz.6.2179': attribute type 21 has an invalid length. [ 133.300660][ T9345] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 133.361647][ T9349] loop7: detected capacity change from 0 to 1024 [ 133.395367][ T9349] EXT4-fs: Ignoring removed orlov option [ 133.401157][ T9349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.511271][ T9367] loop7: detected capacity change from 0 to 512 [ 133.522744][ T9367] netlink: 'syz.7.2184': attribute type 10 has an invalid length. [ 133.544863][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.555549][ T9367] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.568599][ T9367] netlink: 'syz.7.2184': attribute type 10 has an invalid length. [ 133.577188][ T9367] batadv0: entered promiscuous mode [ 133.582431][ T9367] batadv0: entered allmulticast mode [ 133.585416][ T9370] loop8: detected capacity change from 0 to 1024 [ 133.594997][ T9367] bond0: (slave batadv0): Releasing backup interface [ 133.604414][ T9367] bridge0: port 3(batadv0) entered blocking state [ 133.610141][ T9370] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.610951][ T9367] bridge0: port 3(batadv0) entered disabled state [ 133.627255][ T9370] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.2185: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.651036][ T9370] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2185: Failed to acquire dquot type 0 [ 133.681894][ T9370] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.2185: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.700851][ T9370] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2185: Invalid inode bitmap blk 0 in block_group 0 [ 133.714259][ T9370] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 133.723088][ T41] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.723448][ T9370] EXT4-fs (loop8): 1 orphan inode deleted [ 133.737451][ T41] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 133.757546][ T9379] __nla_validate_parse: 10 callbacks suppressed [ 133.757559][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2187'. [ 133.895790][ T9386] sctp: [Deprecated]: syz.1.2189 (pid 9386) Use of int in max_burst socket option. [ 133.895790][ T9386] Use struct sctp_assoc_value instead [ 133.915185][ T9388] loop8: detected capacity change from 0 to 512 [ 133.923605][ T9388] netlink: 'syz.8.2190': attribute type 10 has an invalid length. [ 133.930319][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 133.931965][ T9388] batadv0: left allmulticast mode [ 133.940641][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 133.945654][ T9388] batadv0: left promiscuous mode [ 133.959808][ T9388] bridge0: port 3(batadv0) entered disabled state [ 133.967933][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.977446][ T9388] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.987809][ T9391] netlink: 'syz.8.2190': attribute type 10 has an invalid length. [ 133.995675][ T9391] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2190'. [ 134.004970][ T9391] batadv0: entered promiscuous mode [ 134.010272][ T9391] batadv0: entered allmulticast mode [ 134.016463][ T9391] bond0: (slave batadv0): Releasing backup interface [ 134.026144][ T9391] bridge0: port 3(batadv0) entered blocking state [ 134.032838][ T9391] bridge0: port 3(batadv0) entered disabled state [ 134.045867][ T9397] random: crng reseeded on system resumption [ 134.109553][ T9404] loop8: detected capacity change from 0 to 512 [ 134.127911][ T9404] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2195: bg 0: block 16: invalid block bitmap [ 134.149761][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2196'. [ 134.158974][ T9404] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 134.168187][ T9404] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2195: attempt to clear invalid blocks 1669132790 len 1 [ 134.184209][ T9409] FAULT_INJECTION: forcing a failure. [ 134.184209][ T9409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.188460][ T9404] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2195: invalid indirect mapped block 4294967295 (level 1) [ 134.197282][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz.1.2197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.197305][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.197318][ T9409] Call Trace: [ 134.197325][ T9409] [ 134.197359][ T9409] __dump_stack+0x1d/0x30 [ 134.197381][ T9409] dump_stack_lvl+0xe8/0x140 [ 134.197400][ T9409] dump_stack+0x15/0x1b [ 134.197417][ T9409] should_fail_ex+0x265/0x280 [ 134.197524][ T9409] should_fail+0xb/0x20 [ 134.197542][ T9409] should_fail_usercopy+0x1a/0x20 [ 134.197601][ T9409] _copy_to_user+0x20/0xa0 [ 134.197629][ T9409] simple_read_from_buffer+0xb5/0x130 [ 134.197650][ T9409] proc_fail_nth_read+0x10e/0x150 [ 134.197677][ T9409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.197745][ T9409] vfs_read+0x1a5/0x770 [ 134.197765][ T9409] ? __rcu_read_unlock+0x4f/0x70 [ 134.197786][ T9409] ? __fget_files+0x184/0x1c0 [ 134.197812][ T9409] ksys_read+0xda/0x1a0 [ 134.197833][ T9409] __x64_sys_read+0x40/0x50 [ 134.197903][ T9409] x64_sys_call+0x27bc/0x2ff0 [ 134.197923][ T9409] do_syscall_64+0xd2/0x200 [ 134.197949][ T9409] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.197972][ T9409] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.198035][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.198117][ T9409] RIP: 0033:0x7fa5bbe0d5fc [ 134.198132][ T9409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 134.198146][ T9409] RSP: 002b:00007fa5ba877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.198165][ T9409] RAX: ffffffffffffffda RBX: 00007fa5bc035fa0 RCX: 00007fa5bbe0d5fc [ 134.198177][ T9409] RDX: 000000000000000f RSI: 00007fa5ba8770a0 RDI: 0000000000000004 [ 134.198188][ T9409] RBP: 00007fa5ba877090 R08: 0000000000000000 R09: 0000000000000000 [ 134.198208][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.198268][ T9409] R13: 00007fa5bc036038 R14: 00007fa5bc035fa0 R15: 00007ffc8126fde8 [ 134.198286][ T9409] [ 134.291975][ T9411] random: crng reseeded on system resumption [ 134.302976][ T9404] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2195: invalid indirect mapped block 4294967295 (level 2) [ 134.397966][ T9415] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2199'. [ 134.399185][ T9404] EXT4-fs (loop8): 1 truncate cleaned up [ 134.406676][ T9415] netem: unknown loss type 12 [ 134.449175][ T9415] netem: change failed [ 134.450398][ T9417] program syz.6.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.462666][ T9417] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.483131][ T9419] loop8: detected capacity change from 0 to 1024 [ 134.490177][ T9419] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.523892][ T9419] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.2200: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.538447][ T9419] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2200: Failed to acquire dquot type 0 [ 134.557895][ T9424] loop1: detected capacity change from 0 to 2048 [ 134.569037][ T9419] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.2200: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.587650][ T9419] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2200: Invalid inode bitmap blk 0 in block_group 0 [ 134.600770][ T9419] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 134.609481][ T9419] EXT4-fs (loop8): 1 orphan inode deleted [ 134.609493][ T1961] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.609645][ T1961] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 134.721531][ T9427] loop9: detected capacity change from 0 to 512 [ 134.731013][ T9427] netlink: 'syz.9.2204': attribute type 10 has an invalid length. [ 134.749211][ T9424] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.755428][ T9427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.768385][ T9427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 134.779870][ T9427] netlink: 'syz.9.2204': attribute type 10 has an invalid length. [ 134.787737][ T9427] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2204'. [ 134.797279][ T9427] batadv0: entered promiscuous mode [ 134.802596][ T9427] batadv0: entered allmulticast mode [ 134.808919][ T9427] bond0: (slave batadv0): Releasing backup interface [ 134.855467][ T23] IPVS: starting estimator thread 0... [ 134.863087][ T9427] bridge0: port 3(batadv0) entered blocking state [ 134.869558][ T9427] bridge0: port 3(batadv0) entered disabled state [ 134.918049][ T9440] siw: device registration error -23 [ 134.932033][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2202'. [ 134.950253][ T9435] IPVS: using max 2832 ests per chain, 141600 per kthread [ 134.953533][ T9444] loop8: detected capacity change from 0 to 1024 [ 134.971398][ T9442] random: crng reseeded on system resumption [ 134.976001][ T9444] EXT4-fs: Ignoring removed orlov option [ 134.983151][ T9444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.062277][ T9452] netlink: 29 bytes leftover after parsing attributes in process `syz.8.2208'. [ 135.062557][ T9451] loop9: detected capacity change from 0 to 512 [ 135.082704][ T9451] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2210: bg 0: block 16: invalid block bitmap [ 135.095572][ T9451] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 135.104823][ T9451] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2210: attempt to clear invalid blocks 1669132790 len 1 [ 135.118632][ T9451] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2210: invalid indirect mapped block 4294967295 (level 1) [ 135.133817][ T9451] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2210: invalid indirect mapped block 4294967295 (level 2) [ 135.148149][ T9451] EXT4-fs (loop9): 1 truncate cleaned up [ 135.153952][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 135.163192][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 135.176449][ T9457] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.202827][ T9457] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.248551][ T9464] netlink: 'syz.8.2214': attribute type 29 has an invalid length. [ 135.267610][ T9464] netlink: 'syz.8.2214': attribute type 29 has an invalid length. [ 135.303547][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.316186][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.346935][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.354233][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.397679][ T9464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.409621][ T9464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.468427][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.491141][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.500024][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.519850][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.545477][ T9479] syz_tun: entered allmulticast mode [ 135.561399][ T9478] loop7: detected capacity change from 0 to 2048 [ 135.582691][ T9479] dvmrp1: entered allmulticast mode [ 135.588535][ T9479] FAULT_INJECTION: forcing a failure. [ 135.588535][ T9479] name failslab, interval 1, probability 0, space 0, times 0 [ 135.601189][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.6.2220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.601211][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.601222][ T9479] Call Trace: [ 135.601307][ T9479] [ 135.601313][ T9479] __dump_stack+0x1d/0x30 [ 135.601332][ T9479] dump_stack_lvl+0xe8/0x140 [ 135.601350][ T9479] dump_stack+0x15/0x1b [ 135.601367][ T9479] should_fail_ex+0x265/0x280 [ 135.601388][ T9479] should_failslab+0x8c/0xb0 [ 135.601519][ T9479] kmem_cache_alloc_noprof+0x50/0x310 [ 135.601588][ T9479] ? ipmr_mfc_add+0x2f1/0x1530 [ 135.601609][ T9479] ipmr_mfc_add+0x2f1/0x1530 [ 135.601627][ T9479] ? should_fail_ex+0xdb/0x280 [ 135.601685][ T9479] ? _copy_from_user+0x89/0xb0 [ 135.601714][ T9479] ip_mroute_setsockopt+0x739/0x960 [ 135.601742][ T9479] do_ip_setsockopt+0xcea/0x2240 [ 135.601780][ T9479] ip_setsockopt+0x58/0x110 [ 135.601805][ T9479] raw_setsockopt+0xbd/0x150 [ 135.601822][ T9479] sock_common_setsockopt+0x69/0x80 [ 135.601849][ T9479] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 135.601927][ T9479] __sys_setsockopt+0x184/0x200 [ 135.601948][ T9479] __x64_sys_setsockopt+0x64/0x80 [ 135.601968][ T9479] x64_sys_call+0x20ec/0x2ff0 [ 135.601988][ T9479] do_syscall_64+0xd2/0x200 [ 135.602061][ T9479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.602108][ T9479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.602134][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.602155][ T9479] RIP: 0033:0x7f6770a2ebe9 [ 135.602170][ T9479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.602214][ T9479] RSP: 002b:00007f676f497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.602230][ T9479] RAX: ffffffffffffffda RBX: 00007f6770c55fa0 RCX: 00007f6770a2ebe9 [ 135.602269][ T9479] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000a [ 135.602338][ T9479] RBP: 00007f676f497090 R08: 000000000000003c R09: 0000000000000000 [ 135.602352][ T9479] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 135.602419][ T9479] R13: 00007f6770c56038 R14: 00007f6770c55fa0 R15: 00007ffe425387d8 [ 135.602437][ T9479] [ 135.605584][ T9477] syz_tun: left allmulticast mode [ 135.827881][ T9493] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 135.842112][ T9495] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.852061][ T9495] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.896964][ T9503] loop1: detected capacity change from 0 to 1024 [ 135.905906][ T9503] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.921301][ T9503] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.2229: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.935516][ T9503] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2229: Failed to acquire dquot type 0 [ 135.948155][ T9503] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2229: Freeing blocks not in datazone - block = 0, count = 4096 [ 135.965880][ T9503] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2229: Invalid inode bitmap blk 0 in block_group 0 [ 135.980165][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.994684][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 135.995430][ T9503] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 136.033849][ T9507] lo speed is unknown, defaulting to 1000 [ 136.036568][ T9509] loop8: detected capacity change from 0 to 2048 [ 136.082917][ T9503] EXT4-fs (loop1): 1 orphan inode deleted [ 136.086322][ T9514] loop7: detected capacity change from 0 to 1024 [ 136.099831][ T9514] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.120794][ T9514] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2234: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.135960][ T9514] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2234: Failed to acquire dquot type 0 [ 136.170489][ T9514] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2234: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.242516][ T9514] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2234: Invalid inode bitmap blk 0 in block_group 0 [ 136.271892][ T59] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.310232][ T9514] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 136.323096][ T9514] EXT4-fs (loop7): 1 orphan inode deleted [ 136.340779][ T59] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 136.356576][ T9527] FAULT_INJECTION: forcing a failure. [ 136.356576][ T9527] name failslab, interval 1, probability 0, space 0, times 0 [ 136.369260][ T9527] CPU: 0 UID: 0 PID: 9527 Comm: syz.9.2240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.369342][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.369354][ T9527] Call Trace: [ 136.369361][ T9527] [ 136.369367][ T9527] __dump_stack+0x1d/0x30 [ 136.369385][ T9527] dump_stack_lvl+0xe8/0x140 [ 136.369402][ T9527] dump_stack+0x15/0x1b [ 136.369490][ T9527] should_fail_ex+0x265/0x280 [ 136.369512][ T9527] ? __se_sys_mount+0xef/0x2e0 [ 136.369534][ T9527] should_failslab+0x8c/0xb0 [ 136.369559][ T9527] __kmalloc_cache_noprof+0x4c/0x320 [ 136.369601][ T9527] ? memdup_user+0x99/0xd0 [ 136.369625][ T9527] __se_sys_mount+0xef/0x2e0 [ 136.369643][ T9527] ? fput+0x8f/0xc0 [ 136.369686][ T9527] ? ksys_write+0x192/0x1a0 [ 136.369757][ T9527] __x64_sys_mount+0x67/0x80 [ 136.369779][ T9527] x64_sys_call+0x2b4d/0x2ff0 [ 136.369796][ T9527] do_syscall_64+0xd2/0x200 [ 136.369881][ T9527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.369905][ T9527] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.369930][ T9527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.369950][ T9527] RIP: 0033:0x7f32979aebe9 [ 136.369991][ T9527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.370006][ T9527] RSP: 002b:00007f329640f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.370023][ T9527] RAX: ffffffffffffffda RBX: 00007f3297bd5fa0 RCX: 00007f32979aebe9 [ 136.370036][ T9527] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 136.370049][ T9527] RBP: 00007f329640f090 R08: 0000200000000080 R09: 0000000000000000 [ 136.370065][ T9527] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 136.370078][ T9527] R13: 00007f3297bd6038 R14: 00007f3297bd5fa0 R15: 00007ffc6bc7c668 [ 136.370139][ T9527] [ 136.604638][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 136.604724][ T29] audit: type=1326 audit(1755907676.409:30665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.9.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32979aebe9 code=0x7ffc0000 [ 136.674233][ T29] audit: type=1326 audit(1755907676.409:30666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.9.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32979aebe9 code=0x7ffc0000 [ 136.698088][ T29] audit: type=1326 audit(1755907676.409:30667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.9.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f32979aebe9 code=0x7ffc0000 [ 136.698184][ T29] audit: type=1326 audit(1755907676.409:30668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.9.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32979aebe9 code=0x7ffc0000 [ 136.792253][ T29] audit: type=1326 audit(1755907676.599:30669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 136.794065][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 136.824731][ T9541] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2244'. [ 136.846520][ T29] audit: type=1326 audit(1755907676.599:30670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 136.846548][ T29] audit: type=1326 audit(1755907676.599:30671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 136.846571][ T29] audit: type=1326 audit(1755907676.599:30672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 136.846611][ T29] audit: type=1326 audit(1755907676.599:30673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 136.846635][ T29] audit: type=1326 audit(1755907676.599:30674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 136.853990][ T9544] 9pnet_fd: Insufficient options for proto=fd [ 136.854249][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 137.013382][ T9548] smc: net device bond0 applied user defined pnetid SYZ0 [ 137.013528][ T9548] smc: net device bond0 erased user defined pnetid SYZ0 [ 137.088375][ T9558] loop6: detected capacity change from 0 to 1024 [ 137.102655][ T9558] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.122374][ T9558] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.2250: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.137858][ T9559] loop7: detected capacity change from 0 to 512 [ 137.138856][ T9558] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 137.156439][ T9558] EXT4-fs (loop6): This should not happen!! Data will be lost [ 137.156439][ T9558] [ 137.181580][ T9559] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.218372][ T9559] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2248: corrupted inode contents [ 137.241936][ T9559] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2248: mark_inode_dirty error [ 137.254383][ T9559] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2248: corrupted inode contents [ 137.278545][ T9569] loop8: detected capacity change from 0 to 1024 [ 137.286899][ T9569] EXT4-fs: Ignoring removed orlov option [ 137.292864][ T9569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.303619][ T9559] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2248: corrupted inode contents [ 137.316558][ T9559] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2248: mark_inode_dirty error [ 137.330498][ T9559] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2248: corrupted inode contents [ 137.343832][ T9559] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2248: mark_inode_dirty error [ 137.364727][ T9559] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2248: corrupted inode contents [ 137.365586][ T9578] random: crng reseeded on system resumption [ 137.383637][ T9559] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2248: mark_inode_dirty error [ 137.417601][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.426599][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.569384][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.578043][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.034902][ T9621] FAULT_INJECTION: forcing a failure. [ 138.034902][ T9621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.048235][ T9621] CPU: 1 UID: 0 PID: 9621 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.048263][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.048338][ T9621] Call Trace: [ 138.048345][ T9621] [ 138.048351][ T9621] __dump_stack+0x1d/0x30 [ 138.048369][ T9621] dump_stack_lvl+0xe8/0x140 [ 138.048400][ T9621] dump_stack+0x15/0x1b [ 138.048418][ T9621] should_fail_ex+0x265/0x280 [ 138.048440][ T9621] should_fail+0xb/0x20 [ 138.048457][ T9621] should_fail_usercopy+0x1a/0x20 [ 138.048475][ T9621] _copy_from_user+0x1c/0xb0 [ 138.048562][ T9621] ___sys_sendmsg+0xc1/0x1d0 [ 138.048593][ T9621] __x64_sys_sendmsg+0xd4/0x160 [ 138.048619][ T9621] x64_sys_call+0x191e/0x2ff0 [ 138.048698][ T9621] do_syscall_64+0xd2/0x200 [ 138.048723][ T9621] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.048749][ T9621] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.048797][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.048873][ T9621] RIP: 0033:0x7fa5bbe0ebe9 [ 138.048889][ T9621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.048906][ T9621] RSP: 002b:00007fa5ba877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.048927][ T9621] RAX: ffffffffffffffda RBX: 00007fa5bc035fa0 RCX: 00007fa5bbe0ebe9 [ 138.048940][ T9621] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 138.049005][ T9621] RBP: 00007fa5ba877090 R08: 0000000000000000 R09: 0000000000000000 [ 138.049018][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.049029][ T9621] R13: 00007fa5bc036038 R14: 00007fa5bc035fa0 R15: 00007ffc8126fde8 [ 138.049099][ T9621] [ 138.271636][ T9623] random: crng reseeded on system resumption [ 138.440839][ T9636] netem: unknown loss type 12 [ 138.445546][ T9636] netem: change failed [ 138.450633][ T9636] program syz.6.2269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.460341][ T9636] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.574039][ T9640] loop9: detected capacity change from 0 to 512 [ 138.582949][ T9640] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2270: bg 0: block 16: invalid block bitmap [ 138.601217][ T9640] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 138.610541][ T9640] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2270: attempt to clear invalid blocks 1669132790 len 1 [ 138.624927][ T9640] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2270: invalid indirect mapped block 4294967295 (level 1) [ 138.639266][ T9640] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2270: invalid indirect mapped block 4294967295 (level 2) [ 138.653542][ T9640] EXT4-fs (loop9): 1 truncate cleaned up [ 138.687209][ T9643] bond_slave_1: entered promiscuous mode [ 138.696197][ T9643] bond0: (slave bond_slave_1): Releasing backup interface [ 138.704509][ T9643] bond_slave_1 (unregistering): left promiscuous mode [ 138.835354][ T9657] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 138.862946][ T9661] validate_nla: 1 callbacks suppressed [ 138.862960][ T9661] netlink: 'syz.9.2279': attribute type 21 has an invalid length. [ 138.876736][ T9661] netlink: 'syz.9.2279': attribute type 1 has an invalid length. [ 138.884561][ T9661] __nla_validate_parse: 6 callbacks suppressed [ 138.884646][ T9661] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2279'. [ 138.918904][ T9665] loop9: detected capacity change from 0 to 1024 [ 138.925788][ T9665] EXT4-fs: Ignoring removed orlov option [ 138.931521][ T9665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.040120][ T9672] FAULT_INJECTION: forcing a failure. [ 139.040120][ T9672] name failslab, interval 1, probability 0, space 0, times 0 [ 139.052805][ T9672] CPU: 1 UID: 0 PID: 9672 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.052903][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.052912][ T9672] Call Trace: [ 139.052915][ T9672] [ 139.052920][ T9672] __dump_stack+0x1d/0x30 [ 139.053012][ T9672] dump_stack_lvl+0xe8/0x140 [ 139.053023][ T9672] dump_stack+0x15/0x1b [ 139.053032][ T9672] should_fail_ex+0x265/0x280 [ 139.053044][ T9672] should_failslab+0x8c/0xb0 [ 139.053067][ T9672] kmem_cache_alloc_noprof+0x50/0x310 [ 139.053082][ T9672] ? alloc_vfsmnt+0x2d/0x300 [ 139.053099][ T9672] alloc_vfsmnt+0x2d/0x300 [ 139.053172][ T9672] clone_mnt+0x46/0x630 [ 139.053189][ T9672] copy_tree+0xb9/0x8c0 [ 139.053199][ T9672] ? proc_alloc_inum+0x4f/0x70 [ 139.053216][ T9672] copy_mnt_ns+0x120/0x5c0 [ 139.053242][ T9672] ? kmem_cache_alloc_noprof+0x220/0x310 [ 139.053257][ T9672] ? create_new_namespaces+0x3c/0x3d0 [ 139.053343][ T9672] create_new_namespaces+0x83/0x3d0 [ 139.053404][ T9672] unshare_nsproxy_namespaces+0xe8/0x120 [ 139.053421][ T9672] ksys_unshare+0x3d0/0x6d0 [ 139.053436][ T9672] ? ksys_write+0x192/0x1a0 [ 139.053571][ T9672] __x64_sys_unshare+0x1f/0x30 [ 139.053586][ T9672] x64_sys_call+0x2911/0x2ff0 [ 139.053659][ T9672] do_syscall_64+0xd2/0x200 [ 139.053693][ T9672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.053707][ T9672] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.053745][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.053760][ T9672] RIP: 0033:0x7f32979aebe9 [ 139.053775][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.053791][ T9672] RSP: 002b:00007f329640f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 139.053885][ T9672] RAX: ffffffffffffffda RBX: 00007f3297bd5fa0 RCX: 00007f32979aebe9 [ 139.053892][ T9672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 139.053899][ T9672] RBP: 00007f329640f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.053906][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.053935][ T9672] R13: 00007f3297bd6038 R14: 00007f3297bd5fa0 R15: 00007ffc6bc7c668 [ 139.053952][ T9672] [ 139.315077][ T9679] FAULT_INJECTION: forcing a failure. [ 139.315077][ T9679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.328484][ T9679] CPU: 0 UID: 0 PID: 9679 Comm: syz.8.2286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.328512][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.328524][ T9679] Call Trace: [ 139.328530][ T9679] [ 139.328536][ T9679] __dump_stack+0x1d/0x30 [ 139.328554][ T9679] dump_stack_lvl+0xe8/0x140 [ 139.328607][ T9679] dump_stack+0x15/0x1b [ 139.328624][ T9679] should_fail_ex+0x265/0x280 [ 139.328642][ T9679] should_fail_alloc_page+0xf2/0x100 [ 139.328722][ T9679] __alloc_frozen_pages_noprof+0xff/0x360 [ 139.328822][ T9679] alloc_pages_mpol+0xb3/0x250 [ 139.328874][ T9679] vma_alloc_folio_noprof+0x1aa/0x300 [ 139.328906][ T9679] handle_mm_fault+0xec2/0x2c20 [ 139.328931][ T9679] ? __rcu_read_lock+0x37/0x50 [ 139.328980][ T9679] ? __pte_offset_map_lock+0x1d4/0x230 [ 139.329014][ T9679] __get_user_pages+0x102e/0x1fa0 [ 139.329060][ T9679] __gup_longterm_locked+0x8f4/0xe60 [ 139.329088][ T9679] ? mntput+0x4b/0x80 [ 139.329121][ T9679] ? __rcu_read_lock+0x37/0x50 [ 139.329138][ T9679] ? ___pte_offset_map+0xea/0x150 [ 139.329163][ T9679] gup_fast_fallback+0x1f5/0x1420 [ 139.329270][ T9679] pin_user_pages_fast+0x5f/0x90 [ 139.329292][ T9679] rds_info_getsockopt+0x160/0x360 [ 139.329319][ T9679] rds_getsockopt+0x2ce/0x3e0 [ 139.329350][ T9679] ? __pfx_rds_getsockopt+0x10/0x10 [ 139.329428][ T9679] do_sock_getsockopt+0x1fd/0x240 [ 139.329451][ T9679] __x64_sys_getsockopt+0x11e/0x1a0 [ 139.329529][ T9679] x64_sys_call+0x2bc6/0x2ff0 [ 139.329547][ T9679] do_syscall_64+0xd2/0x200 [ 139.329573][ T9679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.329677][ T9679] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.329703][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.329731][ T9679] RIP: 0033:0x7facc439ebe9 [ 139.329746][ T9679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.329837][ T9679] RSP: 002b:00007facc2dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 139.329855][ T9679] RAX: ffffffffffffffda RBX: 00007facc45c5fa0 RCX: 00007facc439ebe9 [ 139.329866][ T9679] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 139.329876][ T9679] RBP: 00007facc2dff090 R08: 0000200000000040 R09: 0000000000000000 [ 139.329886][ T9679] R10: 0000200000005ec0 R11: 0000000000000246 R12: 0000000000000001 [ 139.329897][ T9679] R13: 00007facc45c6038 R14: 00007facc45c5fa0 R15: 00007ffc52661758 [ 139.329913][ T9679] [ 139.649738][ T9687] loop8: detected capacity change from 0 to 512 [ 139.658617][ T9687] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 139.682069][ T9691] loop1: detected capacity change from 0 to 1024 [ 139.694045][ T9687] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.707214][ T9691] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.718265][ T9687] EXT4-fs (loop8): 1 truncate cleaned up [ 139.725156][ T9691] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.2291: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.740008][ T9691] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2291: Failed to acquire dquot type 0 [ 139.768196][ T9691] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2291: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.782316][ T9691] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2291: Invalid inode bitmap blk 0 in block_group 0 [ 139.795712][ T1961] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.795952][ T9691] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 139.810371][ T9695] loop6: detected capacity change from 0 to 8192 [ 139.819528][ T9691] EXT4-fs (loop1): 1 orphan inode deleted [ 139.830556][ T1961] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 140.084544][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2298'. [ 140.189712][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.198652][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.273328][ T9729] loop9: detected capacity change from 0 to 512 [ 140.295113][ T9729] netlink: 'syz.9.2306': attribute type 10 has an invalid length. [ 140.320248][ T9729] batadv0: left allmulticast mode [ 140.325329][ T9729] batadv0: left promiscuous mode [ 140.330400][ T9729] bridge0: port 3(batadv0) entered disabled state [ 140.348960][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.361452][ T9729] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 140.373357][ T9733] loop7: detected capacity change from 0 to 512 [ 140.462412][ T9733] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.475868][ T9733] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2303: corrupted inode contents [ 140.489316][ T9733] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2303: mark_inode_dirty error [ 140.511510][ T9733] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2303: corrupted inode contents [ 140.525912][ T9733] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2303: corrupted inode contents [ 140.539183][ T9733] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2303: mark_inode_dirty error [ 140.551273][ T9733] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2303: corrupted inode contents [ 140.563143][ T9741] veth0_to_team: entered promiscuous mode [ 140.564428][ T9733] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2303: mark_inode_dirty error [ 140.581578][ T9733] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2303: corrupted inode contents [ 140.594333][ T9733] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2303: mark_inode_dirty error [ 140.611466][ T9744] loop6: detected capacity change from 0 to 256 [ 140.669172][ T9747] program syz.9.2311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.678603][ T9747] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.755947][ T9749] loop8: detected capacity change from 0 to 1024 [ 140.774281][ T9749] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.794335][ T9749] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.2312: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.808676][ T9749] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2312: Failed to acquire dquot type 0 [ 140.822076][ T9749] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.2312: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.835925][ T9749] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2312: Invalid inode bitmap blk 0 in block_group 0 [ 140.848604][ T1961] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.849507][ T9749] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 140.871782][ T1961] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 140.884012][ T9749] EXT4-fs (loop8): 1 orphan inode deleted [ 141.112484][ T9760] smc: net device bond0 applied user defined pnetid SYZ0 [ 141.120301][ T9760] smc: net device bond0 erased user defined pnetid SYZ0 [ 141.171375][ T9768] loop8: detected capacity change from 0 to 764 [ 141.216664][ T9772] loop7: detected capacity change from 0 to 1024 [ 141.241963][ T9772] EXT4-fs: Ignoring removed orlov option [ 141.247681][ T9772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.292477][ T9779] program syz.9.2323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.311016][ T9779] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 141.347685][ T9783] netlink: 29 bytes leftover after parsing attributes in process `syz.7.2321'. [ 141.403855][ T9787] loop7: detected capacity change from 0 to 1024 [ 141.414128][ T9787] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.431201][ T9787] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2326: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.468380][ T9787] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2326: Failed to acquire dquot type 0 [ 141.487247][ T9787] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2326: Freeing blocks not in datazone - block = 0, count = 4096 [ 141.502194][ T9787] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2326: Invalid inode bitmap blk 0 in block_group 0 [ 141.520321][ T51] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.534850][ T51] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 141.535628][ T9787] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 141.565261][ T9787] EXT4-fs (loop7): 1 orphan inode deleted [ 141.633024][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 141.633036][ T29] audit: type=1400 audit(1755907681.439:30915): avc: denied { read append } for pid=9796 comm="syz.9.2330" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.663001][ T29] audit: type=1400 audit(1755907681.439:30916): avc: denied { ioctl open } for pid=9796 comm="syz.9.2330" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.687293][ T9797] random: crng reseeded on system resumption [ 141.701999][ T29] audit: type=1400 audit(1755907681.509:30917): avc: denied { write } for pid=9804 comm="+}[@" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.789947][ T9814] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.810610][ T9818] loop6: detected capacity change from 0 to 1024 [ 141.817598][ T9818] EXT4-fs: Ignoring removed orlov option [ 141.823389][ T9818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.872023][ T9814] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.891552][ T9818] netlink: 29 bytes leftover after parsing attributes in process `syz.6.2336'. [ 141.942097][ T9814] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.976363][ T9835] loop6: detected capacity change from 0 to 1024 [ 141.993826][ T9814] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.007392][ T9835] EXT4-fs: Ignoring removed orlov option [ 142.013183][ T9835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.019983][ T29] audit: type=1326 audit(1755907681.809:30918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 142.043712][ T29] audit: type=1326 audit(1755907681.809:30919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 142.067243][ T29] audit: type=1400 audit(1755907681.809:30920): avc: denied { create } for pid=9837 comm="syz.1.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.086988][ T29] audit: type=1326 audit(1755907681.809:30921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 142.110487][ T29] audit: type=1326 audit(1755907681.819:30922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 142.124698][ T9836] random: crng reseeded on system resumption [ 142.134097][ T29] audit: type=1326 audit(1755907681.819:30923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 142.163512][ T29] audit: type=1326 audit(1755907681.819:30924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.1.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bbe0ebe9 code=0x7ffc0000 [ 142.237649][ T1961] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.261851][ T1961] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.303638][ T1961] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.317239][ T9845] loop8: detected capacity change from 0 to 512 [ 142.336520][ T1961] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.361154][ T9845] netlink: 'syz.8.2347': attribute type 10 has an invalid length. [ 142.392219][ T9845] batadv0: left allmulticast mode [ 142.397288][ T9845] batadv0: left promiscuous mode [ 142.402408][ T9845] bridge0: port 3(batadv0) entered disabled state [ 142.421402][ T9845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.429465][ T9845] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 142.532183][ T9861] loop1: detected capacity change from 0 to 1024 [ 142.558316][ T9861] EXT4-fs: Ignoring removed orlov option [ 142.564142][ T9861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.654795][ T9871] FAULT_INJECTION: forcing a failure. [ 142.654795][ T9871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.668054][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.668082][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.668094][ T9871] Call Trace: [ 142.668100][ T9871] [ 142.668182][ T9871] __dump_stack+0x1d/0x30 [ 142.668205][ T9871] dump_stack_lvl+0xe8/0x140 [ 142.668225][ T9871] dump_stack+0x15/0x1b [ 142.668239][ T9871] should_fail_ex+0x265/0x280 [ 142.668257][ T9871] should_fail+0xb/0x20 [ 142.668271][ T9871] should_fail_usercopy+0x1a/0x20 [ 142.668327][ T9871] _copy_from_iter+0xd2/0xe80 [ 142.668413][ T9871] ? __build_skb_around+0x1a0/0x200 [ 142.668445][ T9871] ? __alloc_skb+0x223/0x320 [ 142.668478][ T9871] netlink_sendmsg+0x471/0x6b0 [ 142.668502][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.668600][ T9871] __sock_sendmsg+0x145/0x180 [ 142.668628][ T9871] ____sys_sendmsg+0x31e/0x4e0 [ 142.668658][ T9871] ___sys_sendmsg+0x17b/0x1d0 [ 142.668698][ T9871] __x64_sys_sendmsg+0xd4/0x160 [ 142.668744][ T9871] x64_sys_call+0x191e/0x2ff0 [ 142.668766][ T9871] do_syscall_64+0xd2/0x200 [ 142.668793][ T9871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.668817][ T9871] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.668843][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.668904][ T9871] RIP: 0033:0x7facc439ebe9 [ 142.668917][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.669011][ T9871] RSP: 002b:00007facc2dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.669027][ T9871] RAX: ffffffffffffffda RBX: 00007facc45c5fa0 RCX: 00007facc439ebe9 [ 142.669038][ T9871] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 142.669054][ T9871] RBP: 00007facc2dff090 R08: 0000000000000000 R09: 0000000000000000 [ 142.669068][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.669081][ T9871] R13: 00007facc45c6038 R14: 00007facc45c5fa0 R15: 00007ffc52661758 [ 142.669101][ T9871] [ 142.921829][ T9876] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2352'. [ 143.046435][ T9882] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2357'. [ 143.160864][ T9885] random: crng reseeded on system resumption [ 143.581969][ T9901] smc: net device bond0 applied user defined pnetid SYZ0 [ 143.654769][ T9902] smc: net device bond0 erased user defined pnetid SYZ0 [ 143.800419][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 143.807869][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.815298][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.822796][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.830199][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.837643][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.986201][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.993624][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.001059][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 144.008433][ T3364] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.032674][ T9913] loop7: detected capacity change from 0 to 2048 [ 144.079529][ T9] IPVS: starting estimator thread 0... [ 144.170222][ T9915] IPVS: using max 2880 ests per chain, 144000 per kthread [ 144.318438][ T9925] lo speed is unknown, defaulting to 1000 [ 144.390907][ T3364] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.523534][ T9933] loop8: detected capacity change from 0 to 1024 [ 144.544089][ T9937] loop9: detected capacity change from 0 to 512 [ 144.553502][ T9930] fido_id[9930]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.577681][ T9933] EXT4-fs: Ignoring removed orlov option [ 144.583407][ T9933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.595614][ T9939] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2378'. [ 144.627389][ T9937] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2376: bg 0: block 16: invalid block bitmap [ 144.643517][ T9944] smc: net device bond0 applied user defined pnetid SYZ0 [ 144.660341][ T9944] smc: net device bond0 erased user defined pnetid SYZ0 [ 144.670551][ T9937] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 144.699756][ T9937] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2376: attempt to clear invalid blocks 1669132790 len 1 [ 144.713826][ T9946] loop1: detected capacity change from 0 to 512 [ 144.730659][ T9946] netlink: 'syz.1.2380': attribute type 10 has an invalid length. [ 144.738508][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2380'. [ 144.752685][ T9937] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2376: invalid indirect mapped block 4294967295 (level 1) [ 144.777726][ T9937] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2376: invalid indirect mapped block 4294967295 (level 2) [ 144.793094][ T9937] EXT4-fs (loop9): 1 truncate cleaned up [ 144.812651][ T9955] loop7: detected capacity change from 0 to 2048 [ 144.847170][ T9955] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.895116][ T9965] loop9: detected capacity change from 0 to 1024 [ 144.905277][ T9965] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.921195][ T9965] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.2385: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.936010][ T9965] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2385: Failed to acquire dquot type 0 [ 144.949060][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2383'. [ 144.958146][ T9965] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.2385: Freeing blocks not in datazone - block = 0, count = 4096 [ 144.972119][ T9965] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2385: Invalid inode bitmap blk 0 in block_group 0 [ 144.985323][ T9965] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 144.994040][ T59] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.009042][ T59] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 145.009361][ T9965] EXT4-fs (loop9): 1 orphan inode deleted [ 145.079234][ T9969] random: crng reseeded on system resumption [ 145.232581][ T9973] loop9: detected capacity change from 0 to 2048 [ 145.281884][ T9977] netlink: 'syz.7.2389': attribute type 21 has an invalid length. [ 145.293579][ T9977] netlink: 'syz.7.2389': attribute type 1 has an invalid length. [ 145.301428][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2389'. [ 145.362407][ T9979] random: crng reseeded on system resumption [ 145.394167][ T9987] loop8: detected capacity change from 0 to 512 [ 145.403524][ T9987] netlink: 'syz.8.2394': attribute type 10 has an invalid length. [ 145.411408][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2394'. [ 145.420934][ T9987] batadv0: entered promiscuous mode [ 145.426143][ T9987] batadv0: entered allmulticast mode [ 145.432554][ T9987] bond0: (slave batadv0): Releasing backup interface [ 145.440456][ T9987] bridge0: port 3(batadv0) entered blocking state [ 145.446921][ T9987] bridge0: port 3(batadv0) entered disabled state [ 145.478884][ T9993] loop9: detected capacity change from 0 to 512 [ 145.506386][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.513485][ T9995] loop7: detected capacity change from 0 to 1024 [ 145.515493][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.529999][ T9993] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2395: bg 0: block 16: invalid block bitmap [ 145.544240][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 145.546342][ T9993] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 145.553502][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 145.572687][ T9993] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2395: attempt to clear invalid blocks 1669132790 len 1 [ 145.586531][ T9993] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2395: invalid indirect mapped block 4294967295 (level 1) [ 145.601258][ T9993] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2395: invalid indirect mapped block 4294967295 (level 2) [ 145.616480][ T9993] EXT4-fs (loop9): 1 truncate cleaned up [ 145.746958][T10009] netlink: 'syz.6.2402': attribute type 21 has an invalid length. [ 145.755276][T10009] netlink: 'syz.6.2402': attribute type 1 has an invalid length. [ 145.763054][T10009] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2402'. [ 145.799926][T10017] loop6: detected capacity change from 0 to 1024 [ 145.811536][T10017] EXT4-fs: Ignoring removed orlov option [ 145.817224][T10017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.843727][T10019] loop7: detected capacity change from 0 to 2048 [ 145.894679][T10019] EXT4-fs mount: 90 callbacks suppressed [ 145.894694][T10019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.916657][T10019] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.917917][T10017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.027090][ T9] IPVS: starting estimator thread 0... [ 146.058682][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.072472][ T8570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.120270][T10032] IPVS: using max 2688 ests per chain, 134400 per kthread [ 146.154784][T10044] siw: device registration error -23 [ 146.157861][T10046] netlink: 'syz.7.2412': attribute type 10 has an invalid length. [ 146.168278][T10046] batadv0: left allmulticast mode [ 146.173360][T10046] batadv0: left promiscuous mode [ 146.178435][T10046] bridge0: port 3(batadv0) entered disabled state [ 146.187066][T10046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.198490][T10046] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.209224][T10048] smc: net device bond0 applied user defined pnetid SYZ0 [ 146.225837][T10048] smc: net device bond0 erased user defined pnetid SYZ0 [ 146.360823][T10063] loop6: detected capacity change from 0 to 2048 [ 146.371735][T10069] siw: device registration error -23 [ 146.395836][T10063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.410143][T10063] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.447314][T10076] netlink: 'syz.1.2428': attribute type 10 has an invalid length. [ 146.489680][T10081] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 146.490978][T10082] smc: net device bond0 applied user defined pnetid SYZ0 [ 146.523272][T10082] smc: net device bond0 erased user defined pnetid SYZ0 [ 146.551994][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.554918][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.572726][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.675081][T10103] siw: device registration error -23 [ 146.703073][T10106] netlink: 'syz.7.2441': attribute type 10 has an invalid length. [ 146.725575][T10108] lo speed is unknown, defaulting to 1000 [ 146.743180][ T3364] IPVS: starting estimator thread 0... [ 146.790054][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 146.796298][ T29] audit: type=1326 audit(1755907686.589:31177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 146.796401][T10112] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2442'. [ 146.851264][T10111] IPVS: using max 2688 ests per chain, 134400 per kthread [ 146.858638][ T29] audit: type=1326 audit(1755907686.599:31178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 146.882270][ T29] audit: type=1326 audit(1755907686.599:31179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 146.905881][ T29] audit: type=1326 audit(1755907686.599:31180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 146.929567][ T29] audit: type=1326 audit(1755907686.599:31181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 146.953214][ T29] audit: type=1326 audit(1755907686.599:31182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 146.976704][ T29] audit: type=1326 audit(1755907686.599:31183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 147.000381][ T29] audit: type=1326 audit(1755907686.629:31184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 147.013679][T10122] loop9: detected capacity change from 0 to 1024 [ 147.023881][ T29] audit: type=1326 audit(1755907686.629:31185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 147.031134][T10122] EXT4-fs: Ignoring removed orlov option [ 147.053772][ T29] audit: type=1326 audit(1755907686.639:31186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.7.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9fcb60ebe9 code=0x7ffc0000 [ 147.059416][T10122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.103940][T10122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.128494][T10127] smc: net device bond0 applied user defined pnetid SYZ0 [ 147.136126][T10127] smc: net device bond0 erased user defined pnetid SYZ0 [ 147.156648][T10134] netlink: 'syz.7.2448': attribute type 21 has an invalid length. [ 147.164586][T10134] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2448'. [ 147.227112][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.243479][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2449'. [ 147.276886][T10142] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.325919][T10149] siw: device registration error -23 [ 147.334827][T10142] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.383574][T10155] loop1: detected capacity change from 0 to 2048 [ 147.391720][T10142] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.412558][T10158] loop6: detected capacity change from 0 to 1024 [ 147.421034][T10158] EXT4-fs: Ignoring removed orlov option [ 147.426776][T10158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.442318][T10158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.446198][T10155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.466797][T10155] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.476378][T10158] netlink: 29 bytes leftover after parsing attributes in process `syz.6.2456'. [ 147.501547][T10142] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.513563][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.572646][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.593202][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.620463][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.663067][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.682011][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.704501][T10175] loop8: detected capacity change from 0 to 1024 [ 147.728047][T10175] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.748853][T10175] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.2460: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.763141][T10175] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2460: Failed to acquire dquot type 0 [ 147.774725][T10175] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.2460: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.788400][T10175] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2460: Invalid inode bitmap blk 0 in block_group 0 [ 147.801104][ T1961] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.801408][T10175] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 147.825447][T10175] EXT4-fs (loop8): 1 orphan inode deleted [ 147.832312][T10175] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.846782][ T1961] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 148.233843][T10186] loop9: detected capacity change from 0 to 512 [ 148.252874][T10175] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.255343][T10186] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2463: bg 0: block 16: invalid block bitmap [ 148.274903][T10186] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 148.283912][T10186] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2463: attempt to clear invalid blocks 1669132790 len 1 [ 148.297992][T10186] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2463: invalid indirect mapped block 4294967295 (level 1) [ 148.312270][T10186] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2463: invalid indirect mapped block 4294967295 (level 2) [ 148.326886][T10186] EXT4-fs (loop9): 1 truncate cleaned up [ 148.343613][T10186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.425925][ T8533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.435018][T10199] loop6: detected capacity change from 0 to 2048 [ 148.447571][T10196] loop7: detected capacity change from 0 to 1024 [ 148.469197][T10201] loop8: detected capacity change from 0 to 1024 [ 148.476316][T10201] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.532622][T10201] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.2470: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.546838][T10196] EXT4-fs: Ignoring removed orlov option [ 148.552800][T10196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.563408][T10201] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.2470: Failed to acquire dquot type 0 [ 148.575267][T10201] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.2470: Freeing blocks not in datazone - block = 0, count = 4096 [ 148.590760][T10201] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2470: Invalid inode bitmap blk 0 in block_group 0 [ 148.603964][ T51] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.618513][ T51] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 148.631634][T10207] loop9: detected capacity change from 0 to 512 [ 148.638034][T10201] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 148.648597][T10196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.663965][T10201] EXT4-fs (loop8): 1 orphan inode deleted [ 148.664436][T10201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.670537][T10213] loop6: detected capacity change from 0 to 2048 [ 148.691819][T10213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.691895][T10213] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.799664][ T8570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.835118][T10224] loop7: detected capacity change from 0 to 2048 [ 148.847164][T10201] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.876140][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.901968][T10224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.915030][T10224] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.077604][ T8570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.083962][T10246] loop8: detected capacity change from 0 to 512 [ 149.098076][T10246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.142040][T10250] loop6: detected capacity change from 0 to 512 [ 149.172431][T10250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.174175][T10252] random: crng reseeded on system resumption [ 149.192144][T10250] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.208193][T10250] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2481: corrupted inode contents [ 149.221209][T10250] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2481: mark_inode_dirty error [ 149.232987][T10250] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2481: corrupted inode contents [ 149.246156][T10250] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2481: corrupted inode contents [ 149.258514][T10250] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2481: mark_inode_dirty error [ 149.270170][T10250] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2481: corrupted inode contents [ 149.282186][T10250] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2481: mark_inode_dirty error [ 149.293612][T10250] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2481: corrupted inode contents [ 149.305557][T10250] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2481: mark_inode_dirty error [ 149.451643][T10263] random: crng reseeded on system resumption [ 149.612792][T10278] loop7: detected capacity change from 0 to 512 [ 149.625990][T10278] __nla_validate_parse: 2 callbacks suppressed [ 149.626004][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2494'. [ 149.642717][T10278] batadv0: entered promiscuous mode [ 149.648126][T10278] batadv0: entered allmulticast mode [ 149.655787][T10278] bond0: (slave batadv0): Releasing backup interface [ 149.663698][T10278] bridge0: port 3(batadv0) entered blocking state [ 149.670220][T10278] bridge0: port 3(batadv0) entered disabled state [ 149.723876][T10283] random: crng reseeded on system resumption [ 149.810281][ T3364] ================================================================== [ 149.818365][ T3364] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 149.825385][ T3364] [ 149.827716][ T3364] read-write to 0xffff888237d29d64 of 4 bytes by task 3411 on cpu 1: [ 149.835749][ T3364] wq_worker_running+0x95/0x120 [ 149.840572][ T3364] schedule_timeout+0xb7/0x170 [ 149.845314][ T3364] msleep+0x50/0x90 [ 149.849097][ T3364] nsim_fib_event_work+0x1ebc/0x21a0 [ 149.854360][ T3364] process_scheduled_works+0x4ce/0x9d0 [ 149.859797][ T3364] worker_thread+0x582/0x770 [ 149.864370][ T3364] kthread+0x486/0x510 [ 149.868422][ T3364] ret_from_fork+0xda/0x150 [ 149.872903][ T3364] ret_from_fork_asm+0x1a/0x30 [ 149.877650][ T3364] [ 149.879974][ T3364] read to 0xffff888237d29d64 of 4 bytes by task 3364 on cpu 0: [ 149.887516][ T3364] kick_pool+0x49/0x2d0 [ 149.891654][ T3364] __queue_work+0x8cb/0xb50 [ 149.896132][ T3364] queue_work_on+0xd1/0x160 [ 149.900612][ T3364] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 149.906489][ T3364] wg_packet_encrypt_worker+0x9e1/0xb80 [ 149.912012][ T3364] process_scheduled_works+0x4ce/0x9d0 [ 149.917448][ T3364] worker_thread+0x582/0x770 [ 149.922022][ T3364] kthread+0x486/0x510 [ 149.926092][ T3364] ret_from_fork+0xda/0x150 [ 149.930570][ T3364] ret_from_fork_asm+0x1a/0x30 [ 149.935309][ T3364] [ 149.937606][ T3364] value changed: 0x00000000 -> 0x00000001 [ 149.943291][ T3364] [ 149.945588][ T3364] Reported by Kernel Concurrency Sanitizer on: [ 149.951709][ T3364] CPU: 0 UID: 0 PID: 3364 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.961487][ T3364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.971610][ T3364] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 149.978113][ T3364] ================================================================== [ 150.041443][ T8528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.071593][T10246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.160313][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.169529][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled