last executing test programs: 7m19.688056782s ago: executing program 4 (id=174): ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x1) 7m19.489768676s ago: executing program 4 (id=179): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 7m18.541992079s ago: executing program 4 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000b00), &(0x7f0000000c80)=r2}, 0x20) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$uac1(0x5, 0xa1, &(0x7f0000000800)=ANY=[@ANYBLOB="1201a6509ce51b4947f6010140000102030109028f0003010900020201020624050204cb06240501c0e209040100000102e9ff0816010101010200000f246f2d0557660202030080000915fc87258f8907240105010210072401080504000905010940000600020725010301ff7f0904020000010200000904020101010200000724010408030009058209100001c8060725"], &(0x7f0000000a80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x41, 0x0, 0x2, 0x7, 0x8, 0xa6}, 0x12, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f120003071002929a060003100b02100be307a398f680ae9f93c48e79b245d267b90a4449a2cbdc7ec1930a203afb35e82e457997ecbbfb80ea7cb8d80bd1a67a6700b5d0148e8cd50c45603b5208962ed0c0e3757447031f9b825d3c33c2b3e652e990570d7c6dc5b41808b439d275bcc87f"], 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x414}}, {0x29, &(0x7f0000000980)=@string={0x29, 0x3, "6c52e5e7400cfa382264e862db35f00abe3d28dbf6fd987b4f9d5950627194f5704728ac71ddb7"}}, {0x43, &(0x7f00000009c0)=ANY=[@ANYBLOB="4303392a780a6bf7f7e3bbbca725a298c11233d0a09ecf494100e0294fcb60c892848e65691c5a3c1411f8882cc9ebb69e34a7de72c1750015ddaba1233e361e13698e"]}, {0x9, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x3801}}]}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) dup2(r6, r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2a00b9af", @ANYRES16, @ANYBLOB="000426bd7000fbdbdf25050000001000028008000200ff07000004000400a400028034000380080001000700000008000200feffffff080002000700000008000100ffff00000800020019ba0000080001000200000008000200050000005400038008000100bb070000080001000600000008000200c0ffffff08000100000000000800010008000000080001000100000008000100250e000008000100bd0000000800020029030000080001000600000004000400080002000700000004000400"], 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r8 = accept(r5, &(0x7f00000005c0)=@isdn, &(0x7f0000000640)=0x80) ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000700)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xf, 'pim6reg\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$kcm(0x10, 0x2, 0x10) clock_getres(0x2, &(0x7f0000000040)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000980)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x8050) 7m17.585388803s ago: executing program 4 (id=193): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18) ftruncate(r1, 0xc17a) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x7}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4718a05f20824a9e}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r6, 0x0, 0x4ab}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x801) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) setpgid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 7m16.857090414s ago: executing program 4 (id=200): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000001}, 0x18) socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x115) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 7m16.453203369s ago: executing program 4 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2f0, &(0x7f0000001fc0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f7, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x101}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 7m16.42298828s ago: executing program 32 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2f0, &(0x7f0000001fc0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f7, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x101}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 5m24.721376688s ago: executing program 3 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) 5m24.677363518s ago: executing program 3 (id=1552): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) 5m24.676851928s ago: executing program 3 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000b00), &(0x7f0000000c80)=r2}, 0x20) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$uac1(0x5, 0xa1, &(0x7f0000000800)=ANY=[@ANYBLOB="1201a6509ce51b4947f6010140000102030109028f0003010900020201020624050204cb06240501c0e209040100000102e9ff0816010101010200000f246f2d0557660202030080000915fc87258f8907240105010210072401080504000905010940000600020725010301ff7f0904020000010200000904020101010200000724010408030009058209100001c8060725"], &(0x7f0000000a80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x41, 0x0, 0x2, 0x7, 0x8, 0xa6}, 0x12, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f120003071002929a060003100b02100be307a398f680ae9f93c48e79b245d267b90a4449a2cbdc7ec1930a203afb35e82e457997ecbbfb80ea7cb8d80bd1a67a6700b5d0148e8cd50c45603b5208962ed0c0e3757447031f9b825d3c33c2b3e652e990570d7c6dc5b41808b439d275bcc87f"], 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x414}}, {0x29, &(0x7f0000000980)=@string={0x29, 0x3, "6c52e5e7400cfa382264e862db35f00abe3d28dbf6fd987b4f9d5950627194f5704728ac71ddb7"}}, {0x43, &(0x7f00000009c0)=ANY=[@ANYBLOB="4303392a780a6bf7f7e3bbbca725a298c11233d0a09ecf494100e0294fcb60c892848e65691c5a3c1411f8882cc9ebb69e34a7de72c1750015ddaba1233e361e13698e"]}, {0x9, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x3801}}]}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) dup2(r6, r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2a00b9af", @ANYRES16=r8, @ANYBLOB="000426bd7000fbdbdf25050000001000028008000200ff07000004000400a400028034000380080001000700000008000200feffffff080002000700000008000100ffff00000800020019ba0000080001000200000008000200050000005400038008000100bb070000080001000600000008000200c0ffffff08000100000000000800010008000000080001000100000008000100250e000008000100bd0000000800020029030000080001000600000004000400080002000700000004000400"], 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r9 = accept(r5, &(0x7f00000005c0)=@isdn, &(0x7f0000000640)=0x80) ioctl$sock_x25_SIOCADDRT(r9, 0x890b, &(0x7f0000000700)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xf, 'pim6reg\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$kcm(0x10, 0x2, 0x10) clock_getres(0x2, &(0x7f0000000040)) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000980)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x8050) 5m24.081422317s ago: executing program 3 (id=1561): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") syz_emit_ethernet(0x52, &(0x7f0000001880)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7001c2c0020010000000000000000000000000001ff0210000000000000000000000000013a000000000000008700907800000000000000000000000000000001"], 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265000c00028006000e"], 0x38}}, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x3, 0x0) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x8, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x8000000003e, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") msgctl$IPC_SET(r4, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5}, 0x0, 0x0, 0x800000000000000, 0x7, 0x3, 0x0, 0x3, 0xe8, 0x0, 0x0, r6, r6}) msgctl$IPC_INFO(r4, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = msgget$private(0x0, 0xd2) msgctl$MSG_INFO(r8, 0xc, &(0x7f0000000500)=""/204) 5m23.779947921s ago: executing program 3 (id=1570): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') pread64(r0, &(0x7f0000000000)=""/3, 0x3, 0x1) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001180)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001280)=@migrate={0xc8, 0x21, 0x4, 0x70bd26, 0x25dfdbff, {{@in=@broadcast, @in=@multicast2, 0x4e21, 0x6, 0x4e23, 0xff, 0xa, 0xa0, 0x553ada3e0b23a9d4, 0x21, r5, r6}, 0x6e6bb0, 0x2}, [@policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0xa}}, @lifetime_val={0x24, 0x9, {0x9, 0x4b, 0xa, 0x8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc8}}, 0x4840) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000540)="0be5e9e7d00d2edfcee82e17e782dd5f553a46a3e874ad4fb93bfe11229b468723993cda284020658be767a262573897735ecde7999ef5b9dcec465fcc72a00b177b83ad068fa311e3e66e9943a6a264c5fc2bee7c9f3c01ff3099d5480228eb183ea7aac1978e7b93dba064f414e257ef0b", 0x72}, {&(0x7f0000000740)="96eae1a224f180d9b3e1ba00affedf688e0b431c8a1fd3d0ce07d5fa464629145450d88e14edd01b3ac9294aeb606e9658227fdbde983cb50df0b9f09fe16dcbbdc5bcfd32a6c6", 0x47}, {&(0x7f0000000880)="272b21537b7eceb49fa499b455abe598d14c129bf2f38791621a127c79a2b8f59e4be600831b2c7f9a2f6b990b66c0d7303c91efff51027e1013af4139a5d62f18b4e740e0d8e996045e98ecaa8a54ed481bfd2fde7cf0e5301b2e85a08ab89dded996520e7f1273d57699944be046b0b4e35ce1030791d9d8653eb4316ff02dbe8c6dcad2f77d5d925480bd0f876aa0064bc63096473fdec6cf559ce21740a4ce747fbfac7204ccf797e648bb25d3b0f5e72dbb9fa4", 0xb6}, {&(0x7f0000000f40)="b9fdcce6ae30d08ff89fcb34cece082f0c05ef5bf3f1de23b5bd0c4ebeb04bcf4f0d5be261e066f4d715be3ca69b8547a91b06220655bf366c6472848c039ba9f71b4ee221d5d0704f31f6e18c4e71ad5aa599e40b7e89ce41afdeb3a5402229f9c8e4c7099bb56505880d89af73d234ff9b9174b84e556eaf541ef5c9369daa3e6b711bbc4879517d2bb95bbf479e759e10680424670da3dc93116ef4e940e6278b1ccd23e17d9f1fc7a8c79e87ac8369b314ea39154f2f33a341", 0xbb}, {&(0x7f0000001000)="61dd86365acac68a42ba3be73b92747f65a59166d9859114d48445a488a0f7cecf467bc11ad9dab1dcabeb34ad01a4761eadaefe6d8465f49ffa09ba23a8201f54863396f76b576c5ad48e2307e4e0c41dc8a2219f2e3de6c843edc68765d3c488e51c5264bccd94fdf69e386b12dd61c12eb6bea79e8903452cf103033bdbe39c847742f04f252f40d875140e341b1a7f2f85987f42f7032dbf7c47ef3e78773013d24c267398ec388a7d3f8f4742b0843eb4189cb5961071b0ab4bb121deff4b6049ec6cadae", 0xc7}, {&(0x7f00000016c0)="5a0fc2b44eebb57989d6a82628ac026af15f98851984039ba844d7e0d2db8f39c42f0e8f3ca888e47fdbe0c7b2bcb3cab2bab99b4f2fe9c696e52cb6a32eb49b1634265ce23e6290482041c08a9eba7e4b2ae78c95f2907954d39f7f5bc12c896b858560898ed22edf686ca52dc7faf8a91b122af18aa63adb349ff83d02d379905cc8a2bb94f4cb1fc7e1d7b107213e3170270f75ba9c830656520f1e6ba4", 0x9f}, {&(0x7f0000001780)="987fe23057dc65d962eb266e9a48bccecfb252bb28918452a1bede2dd2b9abb0b07640a8db346ac0fe1622d624280530b4b2ec58d6382c517f2d72c792255f487cbe0c81a73c19c2a71964770fee478a8e4df78d80d34c0ffafe95fd0548c66a8758bd6346f47b500f73036eb8e503cc934eb8e994ad94d7b8c9fcf81d529be84125d38a325e414129e25e5caad0e9a3e2b3d05fd282ad64a3ea636821b853bf43690f2164e861275ae505f89d63ef3529ef93", 0xb3}], 0x7}, 0x24000900) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x0, @private=0xa010104}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0, 0x1, 0x10000, 0x2, 0xffffffffffffffff}}], 0x58}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r9 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r10 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) 5m23.433889826s ago: executing program 3 (id=1580): socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x80440, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x3}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 5m23.422981926s ago: executing program 33 (id=1580): socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x80440, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x3}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 2m50.02860675s ago: executing program 5 (id=3625): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) getegid() connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000003c0)={0x13e, 0x101, 0x1, 'queue1\x00', 0x7f}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m49.844215713s ago: executing program 5 (id=3630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 2m49.779960494s ago: executing program 5 (id=3632): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000100001000000000000009de960f0739cc6210000060a0b04000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x4048010) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = shmget(0x0, 0x3000, 0x184c, &(0x7f0000003000/0x3000)=nil) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095", @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r11, 0x1}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8004, 0x1, 0xdbab, r12}, &(0x7f0000000200)=0x10) setgid(0xffffffffffffffff) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r14, 0x0, 0xffffffffffffffff}, 0x18) 2m48.923197456s ago: executing program 5 (id=3652): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000740)=[{0x200000000006, 0xa3, 0xfe, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRES16=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804000, &(0x7f0000000040)={[{}, {@noauto_da_alloc}, {@delalloc}, {@nobh}, {@dioread_lock}]}, 0x3, 0x4c0, &(0x7f0000000540)="$eJzs3VFrXFkdAPD/vUlq2qYmVR9qwRq0khbtTNLYNvjQVhB9Kqj1PcZkEkImmZCZtE0okuIHEERU9MknXwQ/gCD9CCIU9F2WZZey23Yf9mF3Z7kzd9psmCTtNpnpZn4/OLnn3Hsz//+ZYc7MmXu5N4CeNRoRNyOiLyIuRsRwvj7NS2w1S7bf0yf3Z7OSRL1++70kknxd67GSfHky/7fBiPj5TyJ+lSTNFdtUNzaXZsrl0lreLtaWV4vVjc1Li8szC6WF0srk5MTVqWtTV6bGD6yv13/09h9++7cfX//X9+7+f/rdC7/O8h3Kt23vx0FqPicDjeeipT8i1g4jWBf05f0Z6HYiAAC8lOw7/lci4lsR8ezP3c4GAAAAOAz1G0PxURJRBwAAAI6stHEObJIW8nMBhiJNC4XmObxfixtRrlRr352vrK/MNc+VHYmBdH6xXBrPzxUeiYEka0806i/al3e0JyPidET8fvh4o12YrZTnuv3jBwAAAPSIbJ4/lDbr2eKD4eb8HwAAADhiRrqdAAAAAHDozP8BAADg6Nt1/p/0dzYRAAAA4DD89NatrNRb97+eu7OxvlS5c2muVF0qLK/PFmYra6uFhUploXHNvuX9Hq9cqax+P1bW7xVrpWqtWN3YnF6urK/Uphv39Z4uuU80AAAAdN7pbz78XxIRWz843iiZY/k2c3U42tJX2z05rDyAzuvrdgJA1zjBF3qXOT6w38R+sEN5AAAAh2fs647/Q696xeP/wBHi+D/0Lsf/oXeZ4wOf+/j/vw8+FwAA4HAMNUqSFvJjgUORpoVCxKnGbQEGkvnFcmk8Ir4cEf8dHvhS1p7odtIAAAAAAAAAAAAAAAAAAAAAAAAA8AVTrydRBwAAAI60iPSdJL//19jw+aGdvw8cSz4cbiwj4u5fbv/x3kyttjaRrX//+fran/L1l7vxCwYAAACwU2ue3prHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBevrk/myrdDLu4x9GxEi7+P0x2FgOxkBEnHiWRP+2/0siou8A4m89iIgz7eInWVoxkmexM34aEcc7FL9d/7P4Jw8gPvSyh9n4c7Pd+y+N0cay/fu/Py+v6/HobuNf+nz869tl/Du1z2Mfy5dnH/2juGv8BxFn+9uPP634yWuOv7/8xebmbtvqf40Ya/v5k3wmVrG2vFqsbmxeWlyeWSgtlFYmJyeuTl2bujI1XpxfLJfyv21j/O4b//xkr/6f2CX+yD79P7+tvddz8fGje0++ukf8C99u//qf2SN+Fu87+edAtn2sVd9q1rc79/f/nNur/3O79H+/1//CHn3e7uLPfvPWS+4KAHRAdWNzaaZcLq29TCWNV9hZ5TUro29GGiq9WckHiMEuD1AAAMCBefGlv9uZAAAAAAAAAAAAAAAAAAAAQO/qxOXEtsdzOTEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E31aQAAAP//YGHTsw==") syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x5, 0x31f, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00f8515b2875d99c8e271ccaccc99e488ebb82eafe55df22e2787c8b90", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m48.451764283s ago: executing program 5 (id=3657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) (fail_nth: 1) 2m47.34138309s ago: executing program 5 (id=3673): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x0, 0x36a, 0x20003f}) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[], 0xe01, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x80000, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3ab3, 0x3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x11) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2, 0x6, 0x0, 0x6, 0x3, 0x0, 0x70bd30, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x7f}]}, 0x18}}, 0x4040) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @thr={&(0x7f0000000bc0)="ebd86dc202d3a45afa7672fcd128124383173137c17578311b0a0379e989a387d70144f85c06df724f07d81158d1ef8ec7b05e5f3dad78f91309e9252a3428130b200d49069e644d35360b75ba5120c9459df783766b3ae06e6bcb1106bf8bfbb8407e7c6a26e7d08ed68e90e6c0f489b792115baaf1444eafc55dbff2f884c328b17e139707f24111fa22df9c17ccf7830a52acea4b514a86f8fb7a1f71ecb005000000000000008fc879fa0678", &(0x7f0000000a80)="3fae423e6fc8f8511fbf725293e6dee282940bac28a601206b62fbef9df432000000000000000000000000c88b0a8210ee837cddaa51044b52d079a096075d01217892dde6a34345651412e494ba6a119a21d4ecbf3e6feb5f79c4fb904bdf9bba29193d251f6389c20e86d5090fc9cdcdafbbf30c184ee9dd2f6779170642f644cfe5156cb991c9eb7cc6eb8aa741"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2m47.33911701s ago: executing program 34 (id=3673): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x0, 0x36a, 0x20003f}) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[], 0xe01, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x80000, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3ab3, 0x3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x11) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2, 0x6, 0x0, 0x6, 0x3, 0x0, 0x70bd30, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x7f}]}, 0x18}}, 0x4040) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @thr={&(0x7f0000000bc0)="ebd86dc202d3a45afa7672fcd128124383173137c17578311b0a0379e989a387d70144f85c06df724f07d81158d1ef8ec7b05e5f3dad78f91309e9252a3428130b200d49069e644d35360b75ba5120c9459df783766b3ae06e6bcb1106bf8bfbb8407e7c6a26e7d08ed68e90e6c0f489b792115baaf1444eafc55dbff2f884c328b17e139707f24111fa22df9c17ccf7830a52acea4b514a86f8fb7a1f71ecb005000000000000008fc879fa0678", &(0x7f0000000a80)="3fae423e6fc8f8511fbf725293e6dee282940bac28a601206b62fbef9df432000000000000000000000000c88b0a8210ee837cddaa51044b52d079a096075d01217892dde6a34345651412e494ba6a119a21d4ecbf3e6feb5f79c4fb904bdf9bba29193d251f6389c20e86d5090fc9cdcdafbbf30c184ee9dd2f6779170642f644cfe5156cb991c9eb7cc6eb8aa741"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2.108683199s ago: executing program 7 (id=6336): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x5, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 1.854599392s ago: executing program 7 (id=6341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x200400d4) 1.801186713s ago: executing program 7 (id=6342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x4e, 0x34, 0x0, 0x0, @u32=0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.757166154s ago: executing program 7 (id=6345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x40e}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)={0x3a, 0x0, 0x2, 0x9}, 0x8) 1.698271754s ago: executing program 7 (id=6347): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000000380), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0x0, 0x7ffc1ffb}]}) setrlimit(0x3, &(0x7f0000000000)={0x800000000000000, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) r6 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r5, 0x11, 0x4, 0x0, {0x6}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x50}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x20000004}, 0x0) listen(r2, 0xffffffff) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71]}}, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) openat(r0, 0x0, 0x103a3, 0x138) 1.164737183s ago: executing program 1 (id=6355): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x20, 0x0) 1.161760183s ago: executing program 6 (id=6356): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x4e, 0x34, 0x0, 0x0, @u32=0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.132570533s ago: executing program 1 (id=6357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x7, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1.131705113s ago: executing program 6 (id=6358): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x80000001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="9e458354b2f531bd76b0fcabd3ee6f94c9d4efcb3b1c367cf5cbb3dc8a12149d8bbda05a2759f7dfdd7e7f0ab8a315835de3845d0df24253384f3f90ef85ae9eb027e2af5221018a16371ec52c80d71e9393d28296cb582289", @ANYRES32=r0, @ANYRES32=r0], 0x5b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0bc4a4a4914f8107f0a4bc75bb00000007e5ffff070000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x400, 0x120) openat(r5, &(0x7f00000003c0)='./bus\x00', 0x40082, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x358) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20004011, 0x0, 0x0) 1.115883224s ago: executing program 1 (id=6360): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) socket$nl_route(0x10, 0x3, 0x0) 1.054800824s ago: executing program 6 (id=6362): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) statfs(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write(r1, &(0x7f0000004200)='t', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) 926.334996ms ago: executing program 6 (id=6365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) clock_adjtime(0x0, &(0x7f0000000740)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0xf423f, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0x1, 0x81, 0x9f, 0x2, 0xfffffffffffffffc, 0x6, 0x1ff, 0x9, 0x8001, 0x3, 0x0, 0x4, 0x72a3, 0xe}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) mlockall(0x3) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000000000000000008200"/29, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 771.388439ms ago: executing program 7 (id=6367): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@inlinecrypt}, {@jqfmt_vfsv1}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}], [{@appraise}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x0, 0x8) unshare(0x8000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xeaff, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000002c0)="9fcc", 0x2, r2) semget$private(0x0, 0x4000, 0x555) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8993, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x36b7, 0x8}}) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) 594.728541ms ago: executing program 2 (id=6374): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) clock_adjtime(0x0, &(0x7f0000000740)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0xf423f, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0x1, 0x81, 0x9f, 0x2, 0xfffffffffffffffc, 0x6, 0x1ff, 0x9, 0x8001, 0x3, 0x0, 0x4, 0x72a3, 0xe}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 511.053003ms ago: executing program 2 (id=6375): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0xffff, @multicast2}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x20008053) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f00000007c0)=""/220, 0xdc, 0x0, &(0x7f00000008c0)=""/188, 0xbc}}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 456.923853ms ago: executing program 2 (id=6376): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0xffff, @multicast2}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x20008053) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f00000007c0)=""/220, 0xdc, 0x0, &(0x7f00000008c0)=""/188, 0xbc}}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 412.558734ms ago: executing program 0 (id=6377): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000240)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x20008053) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000340)=""/189, &(0x7f0000000180)=0xbd) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x3, 0x85, {{0x37, 0x4, 0x0, 0x6, 0xdc, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @loopback, {[@rr={0x7, 0x1b, 0x9, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @remote, @rand_addr=0x64010101, @multicast1, @broadcast]}, @ssrr={0x89, 0x23, 0x65, [@remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xbc, 0x1, 0x6, [{@rand_addr=0x64010101, 0x3}]}, @timestamp={0x44, 0x28, 0x4a, 0x0, 0x6, [0x3b, 0x6, 0x9, 0x6, 0x10f4, 0x58, 0x6, 0x6, 0x8000]}, @timestamp_prespec={0x44, 0x54, 0x42, 0x3, 0xe, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@broadcast, 0x81c}, {@remote, 0x4}, {@empty, 0xf8}, {@multicast1, 0x8}, {@remote, 0x511}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@rand_addr=0x64010101, 0xa8}, {@rand_addr=0x64010102, 0x8}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f00000007c0)=""/220, 0xdc, 0x0, &(0x7f00000008c0)=""/188, 0xbc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3f, 0xc, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xcd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000240)='GPL\x00', 0x14c, 0xff, &(0x7f0000000500)=""/255, 0x41000, 0x9, '\x00', r4, @fallback=0x35, r0, 0x8, &(0x7f0000000740)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xe, 0x7, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r0, r0, r0], 0x0, 0x10, 0x5, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 312.109866ms ago: executing program 0 (id=6378): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x7}, 0x3323, 0x4, 0xffffffff, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000f00)="6e37cff5b582", 0x6}], 0x1}, 0x0) 249.397427ms ago: executing program 2 (id=6379): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1300) 222.201597ms ago: executing program 1 (id=6380): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x4e, 0x34, 0x0, 0x0, @u32=0x80}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 198.553637ms ago: executing program 0 (id=6381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000003e000701fcfbbb92d5dbdf250150fa5e080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r4, r5, 0x0) 197.914457ms ago: executing program 1 (id=6382): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 142.183628ms ago: executing program 2 (id=6383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x7, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 141.594488ms ago: executing program 0 (id=6384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x3}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x810, r8, 0x180000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 110.270849ms ago: executing program 2 (id=6385): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$kcm(0xa, 0x3, 0x73) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x2, 0xd0, 0x6, "8e5d4cd98017f8e8bc83f15ec65617961c0efc47c7f00aa6fb2f88b85252abca343bdcca4d57b4adedacefd0b7a5a7e0c9a9529b871b144b6d305b0bf99154", 0x3b}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000100000000000000e700fc0000000000"], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x7, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x3, 0xfff8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x40880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000d49000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x4f24d000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000005c0), &(0x7f0000000640)=ANY=[@ANYBLOB="00fbf705fbf4d86717481651c17dfe6c6c6be6338b142eed73694be8d6e780619429831c112848300962f8427dbf90c25b6fd891690cbdf4cc3807ab5cb7f457e02ae4d6d66f8453644b5f7ae76bc7bafcd412225355378aa01de52cd35ff14698b57a5b2a14693469430509b8e90b083998abbbab97d52d72af8983"], 0xf7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000004c0)={0x4, &(0x7f0000000340)=[{0x1ff, 0xd7, 0x7, 0xc}, {0x3fe2, 0x7, 0x9, 0x7ff}, {0x80, 0xd, 0x7, 0x2b8}, {0x3ff, 0x6, 0xd, 0xf3}]}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8001, 0x9}, {0xd, 0x3ff}]}) 92.949339ms ago: executing program 1 (id=6386): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800"/112], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000b00), &(0x7f0000000c80)=r1}, 0x20) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$uac1(0x5, 0xa1, &(0x7f0000000800)=ANY=[@ANYBLOB="1201a6509ce51b4947f6010140000102030109028f0003010900020201020624050204cb06240501c0e209040100000102e9ff0816010101010200000f246f2d0557660202030080000915fc87258f8907240105010210072401080504000905010940000600020725010301ff7f0904020000010200000904020101010200000724010408030009058209100001c8060725"], &(0x7f0000000a80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x41, 0x0, 0x2, 0x7, 0x8, 0xa6}, 0x12, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f120003071002929a060003100b02100be307a398f680ae9f93c48e79b245d267b90a4449a2cbdc7ec1930a203afb35e82e457997ecbbfb80ea7cb8d80bd1a67a6700b5d0148e8cd50c45603b5208962ed0c0e3757447031f9b825d3c33c2b3e652e990570d7c6dc5b41808b439d275bcc87f"], 0x4, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x414}}, {0x29, &(0x7f0000000980)=@string={0x29, 0x3, "6c52e5e7400cfa382264e862db35f00abe3d28dbf6fd987b4f9d5950627194f5704728ac71ddb7"}}, {0x43, &(0x7f00000009c0)=ANY=[@ANYBLOB="4303392a780a6bf7f7e3bbbca725a298c11233d0a09ecf494100e0294fcb60c892848e65691c5a3c1411f8882cc9ebb69e34a7de72c1750015ddaba1233e361e13698e"]}, {0x9, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x3801}}]}) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) dup2(r4, r1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000980)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x8050) 92.675409ms ago: executing program 0 (id=6387): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 32.39618ms ago: executing program 6 (id=6388): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) 632µs ago: executing program 0 (id=6389): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 0s ago: executing program 6 (id=6390): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) clock_adjtime(0x0, &(0x7f0000000740)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0xf423f, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0x1, 0x81, 0x9f, 0x2, 0xfffffffffffffffc, 0x6, 0x1ff, 0x9, 0x8001, 0x3, 0x0, 0x4, 0x72a3, 0xe}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kernel console output (not intermixed with test programs): .683277][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5666'. [ 435.799272][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5667'. [ 435.880437][T21002] bridge_slave_0: left allmulticast mode [ 435.884765][T21000] infiniband syz!: set down [ 435.886140][T21002] bridge_slave_0: left promiscuous mode [ 435.890709][T21000] infiniband syz!: added team_slave_0 [ 435.896416][T21002] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.914765][T21002] bridge_slave_1: left allmulticast mode [ 435.919373][T21000] RDS/IB: syz!: added [ 435.920418][T21002] bridge_slave_1: left promiscuous mode [ 435.924588][T21000] smc: adding ib device syz! with port count 1 [ 435.924610][T21000] smc: ib device syz! port 1 has pnetid [ 435.942881][T21002] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.959738][T21002] bond0: (slave bond_slave_0): Releasing backup interface [ 435.970259][T21002] bond0: (slave bond_slave_1): Releasing backup interface [ 435.984450][T21002] team0: Port device team_slave_0 removed [ 435.993896][T21002] team0: Port device team_slave_1 removed [ 436.000718][T21002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.008253][T21002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.017142][T21002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.024857][T21002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.035024][T21014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5669'. [ 436.058301][T21011] veth0: entered promiscuous mode [ 436.229227][T21026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.243290][T21035] loop6: detected capacity change from 0 to 512 [ 436.257840][T21035] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.260889][T21026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.277116][T21035] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 436.343048][T21035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 436.351463][T21035] System zones: 1-12 [ 436.379311][T21035] EXT4-fs (loop6): 1 truncate cleaned up [ 436.386565][T21035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.431667][T21042] sctp: [Deprecated]: syz.7.5679 (pid 21042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.431667][T21042] Use struct sctp_sack_info instead [ 436.490209][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5678'. [ 436.621784][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.668665][T21049] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5681'. [ 436.741804][T21052] loop6: detected capacity change from 0 to 512 [ 436.751179][T21052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.786538][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.826571][T21057] SELinux: (21057) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 437.080901][T21065] loop1: detected capacity change from 0 to 128 [ 437.105746][T21065] bio_check_eod: 74 callbacks suppressed [ 437.105761][T21065] syz.1.5687: attempt to access beyond end of device [ 437.105761][T21065] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 437.142104][T21065] syz.1.5687: attempt to access beyond end of device [ 437.142104][T21065] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 437.156364][T21065] syz.1.5687: attempt to access beyond end of device [ 437.156364][T21065] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 437.170093][T21065] syz.1.5687: attempt to access beyond end of device [ 437.170093][T21065] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 437.184035][T21065] syz.1.5687: attempt to access beyond end of device [ 437.184035][T21065] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 437.197633][T21065] syz.1.5687: attempt to access beyond end of device [ 437.197633][T21065] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 437.214634][T21070] FAULT_INJECTION: forcing a failure. [ 437.214634][T21070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.227805][T21070] CPU: 1 UID: 0 PID: 21070 Comm: syz.0.5690 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 437.227857][T21070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.227868][T21070] Call Trace: [ 437.227874][T21070] [ 437.227880][T21070] __dump_stack+0x1d/0x30 [ 437.227948][T21070] dump_stack_lvl+0xe8/0x140 [ 437.227970][T21070] dump_stack+0x15/0x1b [ 437.227988][T21070] should_fail_ex+0x265/0x280 [ 437.228044][T21070] should_fail+0xb/0x20 [ 437.228102][T21070] should_fail_usercopy+0x1a/0x20 [ 437.228127][T21070] _copy_to_user+0x20/0xa0 [ 437.228155][T21070] simple_read_from_buffer+0xb5/0x130 [ 437.228196][T21070] proc_fail_nth_read+0x100/0x140 [ 437.228282][T21070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.228301][T21070] vfs_read+0x19d/0x6f0 [ 437.228318][T21070] ? tty_unlock+0x21/0x30 [ 437.228345][T21070] ? __rcu_read_unlock+0x4f/0x70 [ 437.228402][T21070] ? __fget_files+0x184/0x1c0 [ 437.228429][T21070] ksys_read+0xda/0x1a0 [ 437.228496][T21070] __x64_sys_read+0x40/0x50 [ 437.228514][T21070] x64_sys_call+0x2d77/0x2fb0 [ 437.228568][T21070] do_syscall_64+0xd2/0x200 [ 437.228654][T21070] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 437.228684][T21070] ? clear_bhb_loop+0x40/0x90 [ 437.228734][T21070] ? clear_bhb_loop+0x40/0x90 [ 437.228754][T21070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.228774][T21070] RIP: 0033:0x7f8d77dcd33c [ 437.228856][T21070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 437.228872][T21070] RSP: 002b:00007f8d76437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.228888][T21070] RAX: ffffffffffffffda RBX: 00007f8d77ff5fa0 RCX: 00007f8d77dcd33c [ 437.228903][T21070] RDX: 000000000000000f RSI: 00007f8d764370a0 RDI: 0000000000000005 [ 437.228917][T21070] RBP: 00007f8d76437090 R08: 0000000000000000 R09: 0000000000000000 [ 437.228929][T21070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.228940][T21070] R13: 0000000000000000 R14: 00007f8d77ff5fa0 R15: 00007fff44bb13f8 [ 437.228956][T21070] [ 437.444946][T21065] syz.1.5687: attempt to access beyond end of device [ 437.444946][T21065] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 437.486278][T21065] syz.1.5687: attempt to access beyond end of device [ 437.486278][T21065] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 437.497849][T21074] syz.1.5687: attempt to access beyond end of device [ 437.497849][T21074] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 437.524522][T21065] syz.1.5687: attempt to access beyond end of device [ 437.524522][T21065] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 437.564949][T21064] Buffer I/O error on dev loop1, logical block 305, async page read [ 437.574572][T21064] Buffer I/O error on dev loop1, logical block 306, async page read [ 437.587179][T21064] Buffer I/O error on dev loop1, logical block 307, async page read [ 437.595344][T21064] Buffer I/O error on dev loop1, logical block 308, async page read [ 437.624139][T21064] Buffer I/O error on dev loop1, logical block 309, async page read [ 437.624287][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 437.624368][ T29] audit: type=1400 audit(1749095531.276:31139): avc: denied { listen } for pid=21075 comm="syz.7.5691" lport=58726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.632191][T21064] Buffer I/O error on dev loop1, logical block 310, async page read [ 437.757420][ T29] audit: type=1326 audit(1749095531.326:31140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.760686][T21064] Buffer I/O error on dev loop1, logical block 311, async page read [ 437.781010][ T29] audit: type=1326 audit(1749095531.326:31141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.809299][T21064] Buffer I/O error on dev loop1, logical block 312, async page read [ 437.812548][ T29] audit: type=1326 audit(1749095531.326:31142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.812575][ T29] audit: type=1326 audit(1749095531.326:31143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.839445][T21064] Buffer I/O error on dev loop1, logical block 305, async page read [ 437.844757][ T29] audit: type=1326 audit(1749095531.326:31144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.883812][T21064] Buffer I/O error on dev loop1, logical block 306, async page read [ 437.899725][ T29] audit: type=1326 audit(1749095531.326:31145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.899759][ T29] audit: type=1326 audit(1749095531.326:31146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.955177][ T29] audit: type=1326 audit(1749095531.326:31147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 437.979070][ T29] audit: type=1326 audit(1749095531.326:31148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.2.5696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 438.073360][T21082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.083378][T21082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.230858][T21112] sctp: [Deprecated]: syz.6.5699 (pid 21112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.230858][T21112] Use struct sctp_sack_info instead [ 438.957147][T21139] FAULT_INJECTION: forcing a failure. [ 438.957147][T21139] name failslab, interval 1, probability 0, space 0, times 0 [ 438.969941][T21139] CPU: 0 UID: 0 PID: 21139 Comm: syz.1.5709 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 438.969998][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.970013][T21139] Call Trace: [ 438.970020][T21139] [ 438.970027][T21139] __dump_stack+0x1d/0x30 [ 438.970048][T21139] dump_stack_lvl+0xe8/0x140 [ 438.970072][T21139] dump_stack+0x15/0x1b [ 438.970150][T21139] should_fail_ex+0x265/0x280 [ 438.970172][T21139] should_failslab+0x8c/0xb0 [ 438.970195][T21139] __kmalloc_noprof+0xa5/0x3e0 [ 438.970280][T21139] ? kobject_get_path+0x92/0x1c0 [ 438.970471][T21139] kobject_get_path+0x92/0x1c0 [ 438.970652][T21139] kobject_uevent_env+0x1da/0x570 [ 438.970681][T21139] ? device_pm_check_callbacks+0x683/0x6a0 [ 438.970740][T21139] kobject_uevent+0x1d/0x30 [ 438.970762][T21139] device_del+0x710/0x790 [ 438.970790][T21139] __del_gendisk+0x494/0x570 [ 438.970892][T21139] del_gendisk+0xac/0xf0 [ 438.970914][T21139] loop_remove+0x26/0x80 [ 438.970931][T21139] loop_control_ioctl+0x3b3/0x3f0 [ 438.970949][T21139] ? __pfx_loop_control_ioctl+0x10/0x10 [ 438.970974][T21139] __se_sys_ioctl+0xcb/0x140 [ 438.971058][T21139] __x64_sys_ioctl+0x43/0x50 [ 438.971091][T21139] x64_sys_call+0x19a8/0x2fb0 [ 438.971188][T21139] do_syscall_64+0xd2/0x200 [ 438.971222][T21139] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 438.971250][T21139] ? clear_bhb_loop+0x40/0x90 [ 438.971277][T21139] ? clear_bhb_loop+0x40/0x90 [ 438.971311][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.971337][T21139] RIP: 0033:0x7f3cc30de929 [ 438.971351][T21139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.971368][T21139] RSP: 002b:00007f3cc1747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.971386][T21139] RAX: ffffffffffffffda RBX: 00007f3cc3305fa0 RCX: 00007f3cc30de929 [ 438.971398][T21139] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003 [ 438.971480][T21139] RBP: 00007f3cc1747090 R08: 0000000000000000 R09: 0000000000000000 [ 438.971507][T21139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.971522][T21139] R13: 0000000000000000 R14: 00007f3cc3305fa0 R15: 00007fffebe67038 [ 438.971573][T21139] [ 439.328360][T21155] SELinux: (21155) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 439.354895][T21158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.363768][T21158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.443096][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5721'. [ 439.460452][T21168] bridge0: entered allmulticast mode [ 439.694040][T21184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.702750][T21184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.920174][T21193] SELinux: (21193) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 440.088884][T21197] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5731'. [ 440.139098][T21200] loop6: detected capacity change from 0 to 512 [ 440.156042][T21200] EXT4-fs (loop6): 1 orphan inode deleted [ 440.162148][T21200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.174824][T12077] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 1 [ 440.174880][T21200] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.199355][T21200] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.5732: iget: bad i_size value: 360287970189639690 [ 440.232788][T21200] netlink: 'syz.6.5732': attribute type 4 has an invalid length. [ 440.243116][ T577] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 440.243850][T21200] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.5732: iget: bad i_size value: 360287970189639690 [ 440.270808][T21200] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 440.289717][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.351217][T21214] loop6: detected capacity change from 0 to 2048 [ 440.368172][T21214] EXT4-fs (loop6): failed to initialize system zone (-117) [ 440.388207][T21214] EXT4-fs (loop6): mount failed [ 440.422296][T21214] FAULT_INJECTION: forcing a failure. [ 440.422296][T21214] name failslab, interval 1, probability 0, space 0, times 0 [ 440.435082][T21214] CPU: 1 UID: 0 PID: 21214 Comm: syz.6.5734 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 440.435111][T21214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.435124][T21214] Call Trace: [ 440.435131][T21214] [ 440.435139][T21214] __dump_stack+0x1d/0x30 [ 440.435185][T21214] dump_stack_lvl+0xe8/0x140 [ 440.435211][T21214] dump_stack+0x15/0x1b [ 440.435249][T21214] should_fail_ex+0x265/0x280 [ 440.435305][T21214] should_failslab+0x8c/0xb0 [ 440.435335][T21214] kmem_cache_alloc_node_noprof+0x57/0x320 [ 440.435447][T21214] ? __alloc_skb+0x101/0x320 [ 440.435476][T21214] __alloc_skb+0x101/0x320 [ 440.435501][T21214] ? audit_log_start+0x365/0x6c0 [ 440.435530][T21214] audit_log_start+0x380/0x6c0 [ 440.435598][T21214] audit_seccomp+0x48/0x100 [ 440.435625][T21214] ? __seccomp_filter+0x68c/0x10d0 [ 440.435727][T21214] __seccomp_filter+0x69d/0x10d0 [ 440.435759][T21214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.435785][T21214] ? vfs_write+0x75e/0x8e0 [ 440.435803][T21214] ? __rcu_read_unlock+0x4f/0x70 [ 440.435831][T21214] ? __fget_files+0x184/0x1c0 [ 440.435854][T21214] __secure_computing+0x82/0x150 [ 440.435879][T21214] syscall_trace_enter+0xcf/0x1e0 [ 440.435929][T21214] do_syscall_64+0xac/0x200 [ 440.435961][T21214] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 440.435990][T21214] ? clear_bhb_loop+0x40/0x90 [ 440.436007][T21214] ? clear_bhb_loop+0x40/0x90 [ 440.436065][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.436089][T21214] RIP: 0033:0x7fd584b6e929 [ 440.436103][T21214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.436119][T21214] RSP: 002b:00007fd5831d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 440.436139][T21214] RAX: ffffffffffffffda RBX: 00007fd584d95fa0 RCX: 00007fd584b6e929 [ 440.436152][T21214] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 440.436218][T21214] RBP: 00007fd5831d7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.436231][T21214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.436244][T21214] R13: 0000000000000000 R14: 00007fd584d95fa0 R15: 00007ffc19d71df8 [ 440.436264][T21214] [ 440.690495][T21220] sctp: [Deprecated]: syz.2.5737 (pid 21220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.690495][T21220] Use struct sctp_sack_info instead [ 440.716965][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5738'. [ 440.793384][T21230] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 440.880614][T21236] loop6: detected capacity change from 0 to 1024 [ 440.882803][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5744'. [ 440.902332][T21236] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 440.913364][T21236] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 440.924545][T21238] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5745'. [ 440.935720][T21236] JBD2: no valid journal superblock found [ 440.941493][T21236] EXT4-fs (loop6): Could not load journal inode [ 441.140386][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.181453][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.203543][T21249] tipc: Enabling of bearer rejected, failed to enable media [ 441.914137][T21281] loop6: detected capacity change from 0 to 1024 [ 441.928231][T21281] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 441.929337][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5759'. [ 441.939213][T21281] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 441.983921][T21281] JBD2: no valid journal superblock found [ 441.989801][T21281] EXT4-fs (loop6): Could not load journal inode [ 442.162715][T21293] loop6: detected capacity change from 0 to 2048 [ 442.224634][T21293] loop6: p1 < > p4 [ 442.229018][T21293] loop6: p4 size 8388608 extends beyond EOD, truncated [ 442.304800][T21298] loop7: detected capacity change from 0 to 2048 [ 442.373644][T21298] loop7: p1 < > p4 [ 442.378702][T21298] loop7: p4 size 8388608 extends beyond EOD, truncated [ 442.702144][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 442.702159][ T29] audit: type=1326 audit(1749095536.408:31969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.789447][ T29] audit: type=1326 audit(1749095536.438:31970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.813071][ T29] audit: type=1326 audit(1749095536.438:31971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.836809][ T29] audit: type=1326 audit(1749095536.438:31972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.860502][ T29] audit: type=1326 audit(1749095536.448:31973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.860538][ T29] audit: type=1326 audit(1749095536.448:31974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.860639][ T29] audit: type=1326 audit(1749095536.448:31975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.860671][ T29] audit: type=1326 audit(1749095536.448:31976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21309 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 442.860764][ T29] audit: type=1326 audit(1749095536.489:31977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21312 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 442.860796][ T29] audit: type=1326 audit(1749095536.489:31978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21312 comm="syz.2.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 442.940284][T21326] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 443.257697][T21334] loop6: detected capacity change from 0 to 1024 [ 443.303198][T21334] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 443.314109][T21334] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 443.385005][T21334] JBD2: no valid journal superblock found [ 443.390762][T21334] EXT4-fs (loop6): Could not load journal inode [ 443.419357][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5776'. [ 443.428913][T21342] xt_hashlimit: size too large, truncated to 1048576 [ 443.442159][T21339] bridge0: entered allmulticast mode [ 443.627421][T21351] sctp: [Deprecated]: syz.2.5778 (pid 21351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.627421][T21351] Use struct sctp_sack_info instead [ 443.975681][T21377] FAULT_INJECTION: forcing a failure. [ 443.975681][T21377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.988968][T21377] CPU: 1 UID: 0 PID: 21377 Comm: syz.0.5789 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 443.988998][T21377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.989013][T21377] Call Trace: [ 443.989021][T21377] [ 443.989030][T21377] __dump_stack+0x1d/0x30 [ 443.989053][T21377] dump_stack_lvl+0xe8/0x140 [ 443.989129][T21377] dump_stack+0x15/0x1b [ 443.989145][T21377] should_fail_ex+0x265/0x280 [ 443.989209][T21377] should_fail+0xb/0x20 [ 443.989229][T21377] should_fail_usercopy+0x1a/0x20 [ 443.989248][T21377] _copy_from_iter+0xcf/0xe40 [ 443.989307][T21377] ? alloc_pages_mpol+0x201/0x250 [ 443.989346][T21377] copy_page_from_iter+0x178/0x2a0 [ 443.989453][T21377] tun_get_user+0x5f0/0x2500 [ 443.989536][T21377] ? ref_tracker_alloc+0x1f2/0x2f0 [ 443.989593][T21377] tun_chr_write_iter+0x15e/0x210 [ 443.989620][T21377] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 443.989706][T21377] vfs_write+0x49d/0x8e0 [ 443.989772][T21377] ksys_write+0xda/0x1a0 [ 443.989796][T21377] __x64_sys_write+0x40/0x50 [ 443.989818][T21377] x64_sys_call+0x2cdd/0x2fb0 [ 443.989839][T21377] do_syscall_64+0xd2/0x200 [ 443.989954][T21377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 443.989981][T21377] ? clear_bhb_loop+0x40/0x90 [ 443.990004][T21377] ? clear_bhb_loop+0x40/0x90 [ 443.990170][T21377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.990231][T21377] RIP: 0033:0x7f8d77dcd3df [ 443.990249][T21377] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 443.990275][T21377] RSP: 002b:00007f8d76437000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 443.990311][T21377] RAX: ffffffffffffffda RBX: 00007f8d77ff5fa0 RCX: 00007f8d77dcd3df [ 443.990323][T21377] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 443.990370][T21377] RBP: 00007f8d76437090 R08: 0000000000000000 R09: 0000000000000000 [ 443.990384][T21377] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 443.990415][T21377] R13: 0000000000000000 R14: 00007f8d77ff5fa0 R15: 00007fff44bb13f8 [ 443.990438][T21377] [ 444.684896][T21393] SELinux: syz.6.5795 (21393) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 444.814053][T21408] netlink: 'syz.7.5800': attribute type 10 has an invalid length. [ 444.821894][T21408] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5800'. [ 444.889007][T21408] team0: Port device geneve1 added [ 444.963203][T21416] FAULT_INJECTION: forcing a failure. [ 444.963203][T21416] name failslab, interval 1, probability 0, space 0, times 0 [ 444.975930][T21416] CPU: 0 UID: 0 PID: 21416 Comm: syz.0.5803 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 444.976011][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.976026][T21416] Call Trace: [ 444.976033][T21416] [ 444.976042][T21416] __dump_stack+0x1d/0x30 [ 444.976069][T21416] dump_stack_lvl+0xe8/0x140 [ 444.976093][T21416] dump_stack+0x15/0x1b [ 444.976200][T21416] should_fail_ex+0x265/0x280 [ 444.976222][T21416] should_failslab+0x8c/0xb0 [ 444.976248][T21416] __kmalloc_noprof+0xa5/0x3e0 [ 444.976302][T21416] ? io_cache_alloc_new+0x2a/0xb0 [ 444.976351][T21416] io_cache_alloc_new+0x2a/0xb0 [ 444.976381][T21416] io_sendmsg_prep+0x2dd/0x5e0 [ 444.976425][T21416] io_submit_sqes+0x5e5/0xfd0 [ 444.976471][T21416] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 444.976556][T21416] ? 0xffffffff81000000 [ 444.976572][T21416] ? __rcu_read_unlock+0x4f/0x70 [ 444.976596][T21416] ? get_pid_task+0x96/0xd0 [ 444.976694][T21416] ? proc_fail_nth_write+0x12d/0x160 [ 444.976721][T21416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 444.976743][T21416] ? vfs_write+0x75e/0x8e0 [ 444.976801][T21416] ? __rcu_read_unlock+0x4f/0x70 [ 444.976823][T21416] ? __fget_files+0x184/0x1c0 [ 444.976850][T21416] ? fput+0x8f/0xc0 [ 444.976881][T21416] __x64_sys_io_uring_enter+0x78/0x90 [ 444.976917][T21416] x64_sys_call+0x28c8/0x2fb0 [ 444.976972][T21416] do_syscall_64+0xd2/0x200 [ 444.977034][T21416] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 444.977129][T21416] ? clear_bhb_loop+0x40/0x90 [ 444.977154][T21416] ? clear_bhb_loop+0x40/0x90 [ 444.977179][T21416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.977279][T21416] RIP: 0033:0x7f8d77dce929 [ 444.977314][T21416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.977333][T21416] RSP: 002b:00007f8d76437038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 444.977358][T21416] RAX: ffffffffffffffda RBX: 00007f8d77ff5fa0 RCX: 00007f8d77dce929 [ 444.977381][T21416] RDX: 0000000000000000 RSI: 0000000000004866 RDI: 0000000000000006 [ 444.977396][T21416] RBP: 00007f8d76437090 R08: 0000000000000000 R09: 0000000000000000 [ 444.977412][T21416] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 444.977427][T21416] R13: 0000000000000000 R14: 00007f8d77ff5fa0 R15: 00007fff44bb13f8 [ 444.977450][T21416] [ 445.787503][T21432] syzkaller1: entered promiscuous mode [ 445.793069][T21432] syzkaller1: entered allmulticast mode [ 445.903785][T21432] loop7: detected capacity change from 0 to 1024 [ 445.992965][T21439] loop6: detected capacity change from 0 to 2048 [ 446.005229][T21432] EXT4-fs: Ignoring removed mblk_io_submit option [ 446.027765][T21432] EXT4-fs: quotafile must be on filesystem root [ 446.177352][T21439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.199990][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5810'. [ 446.916480][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5823'. [ 446.993903][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.048762][T21496] vlan2: entered allmulticast mode [ 447.054013][T21496] bond0: entered allmulticast mode [ 447.106082][T21502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5831'. [ 447.289910][T21513] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 447.305790][T21511] sctp: [Deprecated]: syz.1.5830 (pid 21511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.305790][T21511] Use struct sctp_sack_info instead [ 447.924423][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 447.924487][ T29] audit: type=1326 audit(1749095541.666:32599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6459d58e7 code=0x7ffc0000 [ 447.954311][ T29] audit: type=1326 audit(1749095541.666:32600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa64597ab19 code=0x7ffc0000 [ 447.991789][ T29] audit: type=1326 audit(1749095541.666:32601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6459d58e7 code=0x7ffc0000 [ 448.015295][ T29] audit: type=1326 audit(1749095541.666:32602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa64597ab19 code=0x7ffc0000 [ 448.038923][ T29] audit: type=1326 audit(1749095541.666:32603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 448.062595][ T29] audit: type=1326 audit(1749095541.666:32604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 448.086159][ T29] audit: type=1326 audit(1749095541.666:32605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 448.109647][ T29] audit: type=1326 audit(1749095541.666:32606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 448.133262][ T29] audit: type=1326 audit(1749095541.666:32607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 448.156832][ T29] audit: type=1326 audit(1749095541.666:32608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21527 comm="syz.7.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 448.280030][T21545] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5843'. [ 448.300058][T21545] loop7: detected capacity change from 0 to 1024 [ 448.306966][T21545] EXT4-fs: Ignoring removed nobh option [ 448.312571][T21545] EXT4-fs: Ignoring removed bh option [ 448.321611][T21551] loop6: detected capacity change from 0 to 512 [ 448.335166][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5845'. [ 448.339687][T21551] EXT4-fs (loop6): orphan cleanup on readonly fs [ 448.350954][T21551] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.5844: bad orphan inode 13 [ 448.361126][T21545] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 448.369148][T21551] ext4_test_bit(bit=12, block=18) = 1 [ 448.374572][T21551] is_bad_inode(inode)=0 [ 448.378800][T21551] NEXT_ORPHAN(inode)=2130706432 [ 448.383821][T21551] max_ino=32 [ 448.387036][T21551] i_nlink=1 [ 448.421494][T21545] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 448.491129][T21551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 448.557395][T21551] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 448.599615][T21561] FAULT_INJECTION: forcing a failure. [ 448.599615][T21561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.612882][T21561] CPU: 0 UID: 0 PID: 21561 Comm: syz.2.5848 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 448.612968][T21561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.612980][T21561] Call Trace: [ 448.612985][T21561] [ 448.612991][T21561] __dump_stack+0x1d/0x30 [ 448.613010][T21561] dump_stack_lvl+0xe8/0x140 [ 448.613026][T21561] dump_stack+0x15/0x1b [ 448.613042][T21561] should_fail_ex+0x265/0x280 [ 448.613060][T21561] should_fail_alloc_page+0xf2/0x100 [ 448.613119][T21561] __alloc_frozen_pages_noprof+0xff/0x360 [ 448.613152][T21561] alloc_pages_mpol+0xb3/0x250 [ 448.613190][T21561] vma_alloc_folio_noprof+0x1aa/0x300 [ 448.613221][T21561] handle_mm_fault+0xec2/0x2be0 [ 448.613272][T21561] ? __rcu_read_lock+0x37/0x50 [ 448.613319][T21561] __get_user_pages+0x1036/0x1fb0 [ 448.613348][T21561] __gup_longterm_locked+0x30f/0x1010 [ 448.613374][T21561] ? ___pte_offset_map+0xea/0x150 [ 448.613402][T21561] gup_fast_fallback+0x1f9/0x1730 [ 448.613483][T21561] pin_user_pages_fast+0x5f/0x90 [ 448.613505][T21561] io_pin_pages+0xb5/0x170 [ 448.613525][T21561] io_sqe_buffer_register+0x184/0x12f0 [ 448.613550][T21561] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 448.613598][T21561] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 448.613624][T21561] ? io_sqe_buffers_register+0xc2/0x530 [ 448.613689][T21561] io_sqe_buffers_register+0x2ac/0x530 [ 448.613717][T21561] __se_sys_io_uring_register+0xa9f/0xeb0 [ 448.613738][T21561] ? fput+0x8f/0xc0 [ 448.613762][T21561] ? ksys_write+0x192/0x1a0 [ 448.613781][T21561] __x64_sys_io_uring_register+0x55/0x70 [ 448.613855][T21561] x64_sys_call+0xc91/0x2fb0 [ 448.613873][T21561] do_syscall_64+0xd2/0x200 [ 448.613898][T21561] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 448.613921][T21561] ? clear_bhb_loop+0x40/0x90 [ 448.613991][T21561] ? clear_bhb_loop+0x40/0x90 [ 448.614010][T21561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.614038][T21561] RIP: 0033:0x7f95d7a6e929 [ 448.614052][T21561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.614068][T21561] RSP: 002b:00007f95d60d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 448.614085][T21561] RAX: ffffffffffffffda RBX: 00007f95d7c95fa0 RCX: 00007f95d7a6e929 [ 448.614143][T21561] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 448.614154][T21561] RBP: 00007f95d60d7090 R08: 0000000000000000 R09: 0000000000000000 [ 448.614164][T21561] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 448.614175][T21561] R13: 0000000000000000 R14: 00007f95d7c95fa0 R15: 00007ffce12102c8 [ 448.614194][T21561] [ 448.614374][T21551] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 449.045203][T21559] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 449.087557][T21572] vlan2: entered allmulticast mode [ 449.092731][T21572] bond0: entered allmulticast mode [ 449.176293][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.243308][T21575] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5852'. [ 449.293734][T21575] 0ªX¹¦D: renamed from gretap0 (while UP) [ 449.301124][T21575] 0ªX¹¦D: entered allmulticast mode [ 449.315477][T21575] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 449.364806][T21577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.365335][T21575] netlink: 'syz.6.5852': attribute type 1 has an invalid length. [ 449.373327][T21577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.962645][T21602] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.983921][T21598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.000594][T21598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.012235][T21610] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5860'. [ 450.059272][T21602] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.084926][T21598] tipc: Enabling of bearer rejected, failed to enable media [ 450.141886][T21602] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.202079][T21602] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.265782][T21602] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.295238][T21616] SELinux: syz.2.5864 (21616) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 450.301797][T21602] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.325370][T21602] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.337387][T21602] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.393786][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5865'. [ 450.440732][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5866'. [ 450.517209][T21629] loop7: detected capacity change from 0 to 1024 [ 450.530600][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5868'. [ 450.579046][T21629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.644502][T21629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.667546][T21641] FAULT_INJECTION: forcing a failure. [ 450.667546][T21641] name failslab, interval 1, probability 0, space 0, times 0 [ 450.680234][T21641] CPU: 0 UID: 0 PID: 21641 Comm: syz.6.5872 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 450.680277][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.680291][T21641] Call Trace: [ 450.680297][T21641] [ 450.680323][T21641] __dump_stack+0x1d/0x30 [ 450.680385][T21641] dump_stack_lvl+0xe8/0x140 [ 450.680410][T21641] dump_stack+0x15/0x1b [ 450.680431][T21641] should_fail_ex+0x265/0x280 [ 450.680452][T21641] should_failslab+0x8c/0xb0 [ 450.680502][T21641] kmem_cache_alloc_node_noprof+0x57/0x320 [ 450.680619][T21641] ? __alloc_skb+0x101/0x320 [ 450.680653][T21641] __alloc_skb+0x101/0x320 [ 450.680688][T21641] netlink_alloc_large_skb+0xba/0xf0 [ 450.680721][T21641] netlink_sendmsg+0x3cf/0x6b0 [ 450.680792][T21641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.680905][T21641] __sock_sendmsg+0x145/0x180 [ 450.680929][T21641] ____sys_sendmsg+0x31e/0x4e0 [ 450.680967][T21641] ___sys_sendmsg+0x17b/0x1d0 [ 450.681012][T21641] __x64_sys_sendmsg+0xd4/0x160 [ 450.681064][T21641] x64_sys_call+0x2999/0x2fb0 [ 450.681087][T21641] do_syscall_64+0xd2/0x200 [ 450.681189][T21641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 450.681263][T21641] ? clear_bhb_loop+0x40/0x90 [ 450.681285][T21641] ? clear_bhb_loop+0x40/0x90 [ 450.681308][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.681423][T21641] RIP: 0033:0x7fd584b6e929 [ 450.681451][T21641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.681469][T21641] RSP: 002b:00007fd5831d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.681487][T21641] RAX: ffffffffffffffda RBX: 00007fd584d95fa0 RCX: 00007fd584b6e929 [ 450.681499][T21641] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 450.681526][T21641] RBP: 00007fd5831d7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.681549][T21641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.681559][T21641] R13: 0000000000000000 R14: 00007fd584d95fa0 R15: 00007ffc19d71df8 [ 450.681574][T21641] [ 451.269568][T21658] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 451.357135][T21665] SELinux: (21665) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 451.490492][T21676] FAULT_INJECTION: forcing a failure. [ 451.490492][T21676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.504309][T21676] CPU: 1 UID: 0 PID: 21676 Comm: syz.2.5885 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 451.504334][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 451.504347][T21676] Call Trace: [ 451.504354][T21676] [ 451.504432][T21676] __dump_stack+0x1d/0x30 [ 451.504452][T21676] dump_stack_lvl+0xe8/0x140 [ 451.504492][T21676] dump_stack+0x15/0x1b [ 451.504513][T21676] should_fail_ex+0x265/0x280 [ 451.504534][T21676] should_fail+0xb/0x20 [ 451.504561][T21676] should_fail_usercopy+0x1a/0x20 [ 451.504587][T21676] _copy_from_user+0x1c/0xb0 [ 451.504613][T21676] ___sys_sendmsg+0xc1/0x1d0 [ 451.504734][T21676] __x64_sys_sendmsg+0xd4/0x160 [ 451.504769][T21676] x64_sys_call+0x2999/0x2fb0 [ 451.504791][T21676] do_syscall_64+0xd2/0x200 [ 451.504895][T21676] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 451.504953][T21676] ? clear_bhb_loop+0x40/0x90 [ 451.504980][T21676] ? clear_bhb_loop+0x40/0x90 [ 451.505056][T21676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.505075][T21676] RIP: 0033:0x7f95d7a6e929 [ 451.505089][T21676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.505164][T21676] RSP: 002b:00007f95d60d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.505229][T21676] RAX: ffffffffffffffda RBX: 00007f95d7c95fa0 RCX: 00007f95d7a6e929 [ 451.505243][T21676] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 451.505256][T21676] RBP: 00007f95d60d7090 R08: 0000000000000000 R09: 0000000000000000 [ 451.505270][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.505283][T21676] R13: 0000000000000000 R14: 00007f95d7c95fa0 R15: 00007ffce12102c8 [ 451.505300][T21676] [ 451.703621][T21678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.713957][T21678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.755851][T21669] tipc: Enabling of bearer rejected, failed to enable media [ 451.862812][T21671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21671 comm=syz.6.5884 [ 451.888551][T21624] syz.7.5867 (21624) used greatest stack depth: 5824 bytes left [ 452.075933][T21685] team0: Port device geneve1 removed [ 452.540674][T21690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.596468][T21690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.710337][T21699] FAULT_INJECTION: forcing a failure. [ 452.710337][T21699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.724072][T21699] CPU: 1 UID: 0 PID: 21699 Comm: syz.7.5891 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 452.724095][T21699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.724105][T21699] Call Trace: [ 452.724110][T21699] [ 452.724116][T21699] __dump_stack+0x1d/0x30 [ 452.724135][T21699] dump_stack_lvl+0xe8/0x140 [ 452.724157][T21699] dump_stack+0x15/0x1b [ 452.724187][T21699] should_fail_ex+0x265/0x280 [ 452.724209][T21699] should_fail+0xb/0x20 [ 452.724226][T21699] should_fail_usercopy+0x1a/0x20 [ 452.724244][T21699] _copy_from_iter+0xcf/0xe40 [ 452.724261][T21699] ? __build_skb_around+0x1a0/0x200 [ 452.724360][T21699] ? __alloc_skb+0x223/0x320 [ 452.724389][T21699] netlink_sendmsg+0x471/0x6b0 [ 452.724478][T21699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.724564][T21699] __sock_sendmsg+0x145/0x180 [ 452.724581][T21699] ____sys_sendmsg+0x31e/0x4e0 [ 452.724667][T21699] ___sys_sendmsg+0x17b/0x1d0 [ 452.724712][T21699] __x64_sys_sendmsg+0xd4/0x160 [ 452.724796][T21699] x64_sys_call+0x2999/0x2fb0 [ 452.724813][T21699] do_syscall_64+0xd2/0x200 [ 452.724840][T21699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 452.724882][T21699] ? clear_bhb_loop+0x40/0x90 [ 452.724900][T21699] ? clear_bhb_loop+0x40/0x90 [ 452.725001][T21699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.725019][T21699] RIP: 0033:0x7fa6459de929 [ 452.725031][T21699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.725058][T21699] RSP: 002b:00007fa644047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.725074][T21699] RAX: ffffffffffffffda RBX: 00007fa645c05fa0 RCX: 00007fa6459de929 [ 452.725096][T21699] RDX: 0000000000000850 RSI: 0000200000000180 RDI: 0000000000000003 [ 452.725107][T21699] RBP: 00007fa644047090 R08: 0000000000000000 R09: 0000000000000000 [ 452.725116][T21699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.725126][T21699] R13: 0000000000000000 R14: 00007fa645c05fa0 R15: 00007ffc89482fc8 [ 452.725141][T21699] [ 452.970154][T21701] loop7: detected capacity change from 0 to 1024 [ 452.977588][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 452.977659][ T29] audit: type=1326 audit(1749095802.719:33151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 453.008208][ T29] audit: type=1326 audit(1749095802.719:33152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 453.032678][ T29] audit: type=1326 audit(1749095802.719:33153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6459e0847 code=0x7ffc0000 [ 453.057231][ T29] audit: type=1326 audit(1749095802.719:33154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa6459e07bc code=0x7ffc0000 [ 453.081031][ T29] audit: type=1326 audit(1749095802.719:33155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa6459e06f4 code=0x7ffc0000 [ 453.105422][ T29] audit: type=1326 audit(1749095802.719:33156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa6459e06f4 code=0x7ffc0000 [ 453.105824][T21701] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 453.129659][ T29] audit: type=1326 audit(1749095802.719:33157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa6459dd58a code=0x7ffc0000 [ 453.139758][T21701] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 453.147608][T21701] JBD2: no valid journal superblock found [ 453.163916][ T29] audit: type=1326 audit(1749095802.719:33158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 453.172904][T21701] EXT4-fs (loop7): Could not load journal inode [ 453.209101][ T29] audit: type=1326 audit(1749095802.719:33159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 453.233190][T21710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.233259][T21710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.249570][ T29] audit: type=1326 audit(1749095802.719:33160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21700 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6459de929 code=0x7ffc0000 [ 453.318700][T21713] loop7: detected capacity change from 0 to 512 [ 453.345826][T21713] EXT4-fs: Invalid want_extra_isize 3 [ 453.402997][T21721] __nla_validate_parse: 1 callbacks suppressed [ 453.403023][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5899'. [ 453.437074][T21719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.445812][T21719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.456071][T21719] tipc: Enabling of bearer rejected, failed to enable media [ 453.569889][T21738] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 453.669405][T21747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.677977][T21747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.690647][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5910'. [ 453.722394][T21755] SELinux: policydb version 502858626 does not match my version range 15-34 [ 453.731284][T21755] SELinux: failed to load policy [ 453.805219][T21762] SELinux: policydb version 502858626 does not match my version range 15-34 [ 453.814167][T21762] SELinux: failed to load policy [ 453.825588][T21762] FAULT_INJECTION: forcing a failure. [ 453.825588][T21762] name failslab, interval 1, probability 0, space 0, times 0 [ 453.838249][T21762] CPU: 1 UID: 0 PID: 21762 Comm: syz.0.5914 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 453.838272][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.838282][T21762] Call Trace: [ 453.838287][T21762] [ 453.838350][T21762] __dump_stack+0x1d/0x30 [ 453.838379][T21762] dump_stack_lvl+0xe8/0x140 [ 453.838401][T21762] dump_stack+0x15/0x1b [ 453.838469][T21762] should_fail_ex+0x265/0x280 [ 453.838486][T21762] should_failslab+0x8c/0xb0 [ 453.838512][T21762] kmem_cache_alloc_noprof+0x50/0x310 [ 453.838540][T21762] ? audit_log_start+0x365/0x6c0 [ 453.838570][T21762] audit_log_start+0x365/0x6c0 [ 453.838664][T21762] audit_seccomp+0x48/0x100 [ 453.838770][T21762] ? __seccomp_filter+0x68c/0x10d0 [ 453.838867][T21762] __seccomp_filter+0x69d/0x10d0 [ 453.838919][T21762] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 453.838944][T21762] ? vfs_write+0x75e/0x8e0 [ 453.838968][T21762] __secure_computing+0x82/0x150 [ 453.839063][T21762] syscall_trace_enter+0xcf/0x1e0 [ 453.839091][T21762] do_syscall_64+0xac/0x200 [ 453.839121][T21762] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 453.839220][T21762] ? clear_bhb_loop+0x40/0x90 [ 453.839242][T21762] ? clear_bhb_loop+0x40/0x90 [ 453.839339][T21762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.839357][T21762] RIP: 0033:0x7f8d77dce929 [ 453.839369][T21762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.839390][T21762] RSP: 002b:00007f8d76437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.839488][T21762] RAX: ffffffffffffffda RBX: 00007f8d77ff5fa0 RCX: 00007f8d77dce929 [ 453.839499][T21762] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 000000000000000a [ 453.839509][T21762] RBP: 00007f8d76437090 R08: 0000000000000000 R09: 0000000000000000 [ 453.839519][T21762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.839529][T21762] R13: 0000000000000000 R14: 00007f8d77ff5fa0 R15: 00007fff44bb13f8 [ 453.839546][T21762] [ 454.084314][T21766] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 454.130274][T21769] SELinux: policydb version 502858626 does not match my version range 15-34 [ 454.139186][T21769] SELinux: failed to load policy [ 454.188405][T21775] FAULT_INJECTION: forcing a failure. [ 454.188405][T21775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.201637][T21775] CPU: 1 UID: 0 PID: 21775 Comm: syz.2.5920 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 454.201694][T21775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.201708][T21775] Call Trace: [ 454.201715][T21775] [ 454.201723][T21775] __dump_stack+0x1d/0x30 [ 454.201742][T21775] dump_stack_lvl+0xe8/0x140 [ 454.201761][T21775] dump_stack+0x15/0x1b [ 454.201778][T21775] should_fail_ex+0x265/0x280 [ 454.201820][T21775] should_fail+0xb/0x20 [ 454.201837][T21775] should_fail_usercopy+0x1a/0x20 [ 454.201855][T21775] _copy_from_user+0x1c/0xb0 [ 454.201941][T21775] ___sys_sendmsg+0xc1/0x1d0 [ 454.201975][T21775] __x64_sys_sendmsg+0xd4/0x160 [ 454.202003][T21775] x64_sys_call+0x2999/0x2fb0 [ 454.202062][T21775] do_syscall_64+0xd2/0x200 [ 454.202090][T21775] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 454.202112][T21775] ? clear_bhb_loop+0x40/0x90 [ 454.202129][T21775] ? clear_bhb_loop+0x40/0x90 [ 454.202237][T21775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.202259][T21775] RIP: 0033:0x7f95d7a6e929 [ 454.202275][T21775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.202295][T21775] RSP: 002b:00007f95d60d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.202361][T21775] RAX: ffffffffffffffda RBX: 00007f95d7c95fa0 RCX: 00007f95d7a6e929 [ 454.202374][T21775] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 454.202518][T21775] RBP: 00007f95d60d7090 R08: 0000000000000000 R09: 0000000000000000 [ 454.202532][T21775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.202544][T21775] R13: 0000000000000000 R14: 00007f95d7c95fa0 R15: 00007ffce12102c8 [ 454.202570][T21775] [ 454.426958][T21783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.435651][T21783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.501997][T21790] sctp: [Deprecated]: syz.0.5922 (pid 21790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.501997][T21790] Use struct sctp_sack_info instead [ 454.555189][T21792] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 454.562314][T21794] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 454.727133][T21805] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5932'. [ 454.859086][T21812] loop7: detected capacity change from 0 to 1024 [ 454.871409][T21812] EXT4-fs: Ignoring removed nobh option [ 454.877811][T21812] EXT4-fs: Ignoring removed bh option [ 454.983867][T21812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.222540][T21812] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.5934: Allocating blocks 497-513 which overlap fs metadata [ 455.364591][T15316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.525541][T21831] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 455.666383][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5946'. [ 455.994627][T21848] sctp: [Deprecated]: syz.7.5945 (pid 21848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.994627][T21848] Use struct sctp_sack_info instead [ 456.719508][T21892] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 457.050101][T21902] loop6: detected capacity change from 0 to 512 [ 457.072678][T21902] EXT4-fs (loop6): orphan cleanup on readonly fs [ 457.085635][T21902] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.5964: bad orphan inode 13 [ 457.104417][T21902] ext4_test_bit(bit=12, block=18) = 1 [ 457.109815][T21902] is_bad_inode(inode)=0 [ 457.114616][T21902] NEXT_ORPHAN(inode)=2130706432 [ 457.119589][T21902] max_ino=32 [ 457.122818][T21902] i_nlink=1 [ 457.126576][T21902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.144244][T21902] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 457.162648][T21902] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 457.173277][T21909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5967'. [ 457.196886][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'. [ 457.204594][T21917] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 457.528474][T21937] sctp: [Deprecated]: syz.2.5973 (pid 21937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.528474][T21937] Use struct sctp_sack_info instead [ 457.643771][T21919] chnl_net:caif_netlink_parms(): no params data found [ 457.725337][T21919] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.732531][T21919] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.752320][T21919] bridge_slave_0: entered allmulticast mode [ 457.758778][T21919] bridge_slave_0: entered promiscuous mode [ 457.813325][T21919] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.820479][T21919] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.843768][T21919] bridge_slave_1: entered allmulticast mode [ 457.850235][T21919] bridge_slave_1: entered promiscuous mode [ 457.853397][T21952] sctp: [Deprecated]: syz.7.5975 (pid 21952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.853397][T21952] Use struct sctp_sack_info instead [ 457.885827][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.908615][T21919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.926467][T21919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.990971][T21954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.008982][T21919] team0: Port device team_slave_0 added [ 458.019670][T21954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.056953][T12082] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.078762][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 458.078775][ T29] audit: type=1326 audit(1749095807.839:33739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.114431][ T29] audit: type=1326 audit(1749095807.879:33740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.138587][ T29] audit: type=1326 audit(1749095807.879:33741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.162727][ T29] audit: type=1326 audit(1749095807.879:33742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.187102][ T29] audit: type=1326 audit(1749095807.879:33743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.211402][ T29] audit: type=1326 audit(1749095807.879:33744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.239059][T21919] team0: Port device team_slave_1 added [ 458.249777][ T29] audit: type=1326 audit(1749095807.879:33745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.273987][ T29] audit: type=1326 audit(1749095807.879:33746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.297610][ T29] audit: type=1326 audit(1749095807.879:33747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.321888][ T29] audit: type=1326 audit(1749095807.879:33748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21953 comm="syz.6.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 458.359194][T21919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.366831][T21919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.393658][T21919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.407025][T12082] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.419404][T21919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.426376][T21919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.453120][T21919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.500176][T21919] hsr_slave_0: entered promiscuous mode [ 458.507061][T21919] hsr_slave_1: entered promiscuous mode [ 458.513731][T21919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.541727][T21919] Cannot create hsr debugfs directory [ 458.549859][T12082] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.599040][T12082] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.673270][T21983] loop7: detected capacity change from 0 to 512 [ 458.683751][T21983] EXT4-fs (loop7): orphan cleanup on readonly fs [ 458.690979][T21983] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.5985: bad orphan inode 13 [ 458.697394][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 458.717145][ T1050] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.727295][T21983] ext4_test_bit(bit=12, block=18) = 1 [ 458.732702][T21983] is_bad_inode(inode)=0 [ 458.736850][T21983] NEXT_ORPHAN(inode)=2130706432 [ 458.741716][T21983] max_ino=32 [ 458.744937][T21983] i_nlink=1 [ 458.754261][T21983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.767605][T21987] netlink: 'syz.6.5987': attribute type 5 has an invalid length. [ 458.781924][T21987] sctp: [Deprecated]: syz.6.5987 (pid 21987) Use of int in maxseg socket option. [ 458.781924][T21987] Use struct sctp_assoc_value instead [ 458.806503][T21983] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 458.822836][T21983] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 458.854825][T12082] bond0 (unregistering): Released all slaves [ 458.935928][T12082] hsr_slave_0: left promiscuous mode [ 458.954078][T12082] hsr_slave_1: left promiscuous mode [ 458.968267][T22003] netlink: 'syz.0.5994': attribute type 3 has an invalid length. [ 458.976717][T22003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5994'. [ 458.985984][T12082] veth1_vlan: left promiscuous mode [ 458.991313][T12082] veth0_vlan: left promiscuous mode [ 459.051881][T22006] sctp: [Deprecated]: syz.2.5992 (pid 22006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.051881][T22006] Use struct sctp_sack_info instead [ 459.335476][T12082] IPVS: stop unused estimator thread 0... [ 459.468237][T15316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.581430][T21919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 459.611793][T22019] loop6: detected capacity change from 0 to 1024 [ 459.619749][T21919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 459.633558][T22019] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 459.644460][T22019] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 459.650250][T21919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 459.666035][T22019] JBD2: no valid journal superblock found [ 459.666449][T22027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.671824][T22019] EXT4-fs (loop6): Could not load journal inode [ 459.702281][T22027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.767007][T21919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 459.783407][T22021] tipc: Enabling of bearer rejected, failed to enable media [ 459.849319][T21919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.861993][T21919] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.873068][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.880194][T12048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.894169][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.901284][T12048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.988250][T21919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.003660][T22057] loop7: detected capacity change from 0 to 1024 [ 460.010809][T22057] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 460.021829][T22057] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 460.042792][T22057] JBD2: no valid journal superblock found [ 460.048661][T22057] EXT4-fs (loop7): Could not load journal inode [ 460.071634][T21919] veth0_vlan: entered promiscuous mode [ 460.074482][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'. [ 460.087398][T21919] veth1_vlan: entered promiscuous mode [ 460.139583][T21919] veth0_macvtap: entered promiscuous mode [ 460.149257][T21919] veth1_macvtap: entered promiscuous mode [ 460.161256][T21919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.172863][T21919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.182166][T21919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.190905][T21919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.199674][T21919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.208499][T21919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.327893][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6018'. [ 460.337127][T22084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.344643][T22084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.364832][T22084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.372359][T22084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.537864][T22097] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 460.565052][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 460.838464][T22112] loop6: detected capacity change from 0 to 512 [ 460.879039][T22112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.916409][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.984868][T22126] loop7: detected capacity change from 0 to 256 [ 460.995031][T22126] vfat: Unknown parameter '' [ 461.172658][T22146] loop6: detected capacity change from 0 to 512 [ 461.181270][T22146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.210386][T17425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.238621][T22152] FAULT_INJECTION: forcing a failure. [ 461.238621][T22152] name failslab, interval 1, probability 0, space 0, times 0 [ 461.251308][T22152] CPU: 1 UID: 0 PID: 22152 Comm: syz.2.6043 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 461.251344][T22152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.251360][T22152] Call Trace: [ 461.251368][T22152] [ 461.251377][T22152] __dump_stack+0x1d/0x30 [ 461.251403][T22152] dump_stack_lvl+0xe8/0x140 [ 461.251454][T22152] dump_stack+0x15/0x1b [ 461.251552][T22152] should_fail_ex+0x265/0x280 [ 461.251587][T22152] should_failslab+0x8c/0xb0 [ 461.251609][T22152] __kmalloc_noprof+0xa5/0x3e0 [ 461.251632][T22152] ? iovec_from_user+0x84/0x210 [ 461.251654][T22152] iovec_from_user+0x84/0x210 [ 461.251810][T22152] __import_iovec+0xf3/0x540 [ 461.251875][T22152] ? kstrtouint_from_user+0x9f/0xf0 [ 461.251901][T22152] import_iovec+0x61/0x80 [ 461.251990][T22152] vfs_readv+0xf1/0x690 [ 461.252020][T22152] __x64_sys_preadv+0xfd/0x1c0 [ 461.252046][T22152] x64_sys_call+0x1503/0x2fb0 [ 461.252063][T22152] do_syscall_64+0xd2/0x200 [ 461.252140][T22152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 461.252276][T22152] ? clear_bhb_loop+0x40/0x90 [ 461.252294][T22152] ? clear_bhb_loop+0x40/0x90 [ 461.252317][T22152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.252341][T22152] RIP: 0033:0x7f95d7a6e929 [ 461.252357][T22152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.252432][T22152] RSP: 002b:00007f95d60b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 461.252450][T22152] RAX: ffffffffffffffda RBX: 00007f95d7c96080 RCX: 00007f95d7a6e929 [ 461.252464][T22152] RDX: 000000000000003e RSI: 00002000000015c0 RDI: 0000000000000003 [ 461.252477][T22152] RBP: 00007f95d60b6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.252491][T22152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.252504][T22152] R13: 0000000000000001 R14: 00007f95d7c96080 R15: 00007ffce12102c8 [ 461.252519][T22152] [ 461.582958][T22155] FAULT_INJECTION: forcing a failure. [ 461.582958][T22155] name failslab, interval 1, probability 0, space 0, times 0 [ 461.595598][T22155] CPU: 0 UID: 0 PID: 22155 Comm: syz.2.6045 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 461.595628][T22155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.595723][T22155] Call Trace: [ 461.595730][T22155] [ 461.595738][T22155] __dump_stack+0x1d/0x30 [ 461.595759][T22155] dump_stack_lvl+0xe8/0x140 [ 461.595838][T22155] dump_stack+0x15/0x1b [ 461.595916][T22155] should_fail_ex+0x265/0x280 [ 461.595960][T22155] should_failslab+0x8c/0xb0 [ 461.595986][T22155] kmem_cache_alloc_noprof+0x50/0x310 [ 461.596016][T22155] ? getname_flags+0x80/0x3b0 [ 461.596043][T22155] ? get_pid_task+0x96/0xd0 [ 461.596087][T22155] getname_flags+0x80/0x3b0 [ 461.596122][T22155] do_mq_open+0xd9/0x4f0 [ 461.596151][T22155] ? __rcu_read_unlock+0x4f/0x70 [ 461.596174][T22155] ? __fget_files+0x184/0x1c0 [ 461.596198][T22155] ? finish_task_switch+0xad/0x2b0 [ 461.596355][T22155] __x64_sys_mq_open+0xcb/0x100 [ 461.596379][T22155] x64_sys_call+0x27d6/0x2fb0 [ 461.596402][T22155] do_syscall_64+0xd2/0x200 [ 461.596497][T22155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 461.596526][T22155] ? clear_bhb_loop+0x40/0x90 [ 461.596608][T22155] ? clear_bhb_loop+0x40/0x90 [ 461.596626][T22155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.596720][T22155] RIP: 0033:0x7f95d7a6e929 [ 461.596732][T22155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.596750][T22155] RSP: 002b:00007f95d60d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 461.596770][T22155] RAX: ffffffffffffffda RBX: 00007f95d7c95fa0 RCX: 00007f95d7a6e929 [ 461.596783][T22155] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 0000000000000000 [ 461.596855][T22155] RBP: 00007f95d60d7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.596868][T22155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.596882][T22155] R13: 0000000000000000 R14: 00007f95d7c95fa0 R15: 00007ffce12102c8 [ 461.596902][T22155] [ 461.888149][T22164] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6046'. [ 461.920232][T22161] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6048'. [ 462.133487][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.153500][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.216010][T22188] loop7: detected capacity change from 0 to 512 [ 462.233454][T22188] EXT4-fs: Invalid want_extra_isize 3 [ 462.411885][T22191] loop7: detected capacity change from 0 to 512 [ 462.424919][T22191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.438038][T22191] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.463467][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6058'. [ 462.872835][ T1050] IPVS: starting estimator thread 0... [ 462.879162][T22207] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 462.962783][T22211] IPVS: using max 2064 ests per chain, 103200 per kthread [ 462.983631][T22222] FAULT_INJECTION: forcing a failure. [ 462.983631][T22222] name failslab, interval 1, probability 0, space 0, times 0 [ 462.996301][T22222] CPU: 0 UID: 0 PID: 22222 Comm: syz.1.6068 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 462.996331][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.996344][T22222] Call Trace: [ 462.996408][T22222] [ 462.996455][T22222] __dump_stack+0x1d/0x30 [ 462.996473][T22222] dump_stack_lvl+0xe8/0x140 [ 462.996490][T22222] dump_stack+0x15/0x1b [ 462.996505][T22222] should_fail_ex+0x265/0x280 [ 462.996522][T22222] should_failslab+0x8c/0xb0 [ 462.996598][T22222] kmem_cache_alloc_node_noprof+0x57/0x320 [ 462.996624][T22222] ? __alloc_skb+0x101/0x320 [ 462.996649][T22222] __alloc_skb+0x101/0x320 [ 462.996677][T22222] netlink_alloc_large_skb+0xba/0xf0 [ 462.996706][T22222] netlink_sendmsg+0x3cf/0x6b0 [ 462.996843][T22222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.996871][T22222] __sock_sendmsg+0x145/0x180 [ 462.996890][T22222] ____sys_sendmsg+0x31e/0x4e0 [ 462.996967][T22222] ___sys_sendmsg+0x17b/0x1d0 [ 462.997005][T22222] __x64_sys_sendmsg+0xd4/0x160 [ 462.997038][T22222] x64_sys_call+0x2999/0x2fb0 [ 462.997059][T22222] do_syscall_64+0xd2/0x200 [ 462.997130][T22222] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 462.997154][T22222] ? clear_bhb_loop+0x40/0x90 [ 462.997200][T22222] ? clear_bhb_loop+0x40/0x90 [ 462.997220][T22222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.997239][T22222] RIP: 0033:0x7f4d93cce929 [ 462.997253][T22222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.997450][T22222] RSP: 002b:00007f4d92337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.997467][T22222] RAX: ffffffffffffffda RBX: 00007f4d93ef5fa0 RCX: 00007f4d93cce929 [ 462.997481][T22222] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 462.997493][T22222] RBP: 00007f4d92337090 R08: 0000000000000000 R09: 0000000000000000 [ 462.997504][T22222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.997595][T22222] R13: 0000000000000000 R14: 00007f4d93ef5fa0 R15: 00007ffc83a7a898 [ 462.997612][T22222] [ 463.055146][T22232] FAULT_INJECTION: forcing a failure. [ 463.055146][T22232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.079757][T22224] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6069'. [ 463.084400][T22232] CPU: 1 UID: 0 PID: 22232 Comm: syz.2.6073 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 463.084444][T22232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.084458][T22232] Call Trace: [ 463.084465][T22232] [ 463.084473][T22232] __dump_stack+0x1d/0x30 [ 463.084539][T22232] dump_stack_lvl+0xe8/0x140 [ 463.084561][T22232] dump_stack+0x15/0x1b [ 463.084653][T22232] should_fail_ex+0x265/0x280 [ 463.084677][T22232] should_fail+0xb/0x20 [ 463.084696][T22232] should_fail_usercopy+0x1a/0x20 [ 463.084800][T22232] _copy_from_iter+0xcf/0xe40 [ 463.084825][T22232] ? __build_skb_around+0x1a0/0x200 [ 463.084907][T22232] ? __alloc_skb+0x223/0x320 [ 463.084938][T22232] netlink_sendmsg+0x471/0x6b0 [ 463.084986][T22232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.085053][T22232] __sock_sendmsg+0x145/0x180 [ 463.085076][T22232] ____sys_sendmsg+0x31e/0x4e0 [ 463.085112][T22232] ___sys_sendmsg+0x17b/0x1d0 [ 463.085184][T22232] __x64_sys_sendmsg+0xd4/0x160 [ 463.085223][T22232] x64_sys_call+0x2999/0x2fb0 [ 463.085249][T22232] do_syscall_64+0xd2/0x200 [ 463.085281][T22232] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 463.085340][T22232] ? clear_bhb_loop+0x40/0x90 [ 463.085365][T22232] ? clear_bhb_loop+0x40/0x90 [ 463.085389][T22232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.085412][T22232] RIP: 0033:0x7f95d7a6e929 [ 463.085480][T22232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.085500][T22232] RSP: 002b:00007f95d60d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.085521][T22232] RAX: ffffffffffffffda RBX: 00007f95d7c95fa0 RCX: 00007f95d7a6e929 [ 463.085541][T22232] RDX: 0000000000000850 RSI: 0000200000000180 RDI: 0000000000000003 [ 463.085555][T22232] RBP: 00007f95d60d7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.085569][T22232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.085584][T22232] R13: 0000000000000000 R14: 00007f95d7c95fa0 R15: 00007ffce12102c8 [ 463.085645][T22232] [ 463.238322][T22239] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 463.442699][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 463.442736][ T29] audit: type=1326 audit(1749096581.170:34278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 463.479923][ T29] audit: type=1326 audit(1749096581.170:34279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 463.503569][ T29] audit: type=1326 audit(1749096581.170:34280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95d7a70847 code=0x7ffc0000 [ 463.527099][ T29] audit: type=1326 audit(1749096581.170:34281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f95d7a707bc code=0x7ffc0000 [ 463.550589][ T29] audit: type=1326 audit(1749096581.170:34282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f95d7a706f4 code=0x7ffc0000 [ 463.574273][ T29] audit: type=1326 audit(1749096581.170:34283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f95d7a706f4 code=0x7ffc0000 [ 463.597836][ T29] audit: type=1326 audit(1749096581.170:34284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95d7a6d58a code=0x7ffc0000 [ 463.621267][ T29] audit: type=1326 audit(1749096581.170:34285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 463.644842][ T29] audit: type=1326 audit(1749096581.170:34286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 463.668330][ T29] audit: type=1326 audit(1749096581.170:34287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22241 comm="syz.2.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d7a6e929 code=0x7ffc0000 [ 463.748273][T15316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.770787][T22251] batadv0: entered allmulticast mode [ 463.785923][T22251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.831737][T22263] FAULT_INJECTION: forcing a failure. [ 463.831737][T22263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.845425][T22263] CPU: 1 UID: 0 PID: 22263 Comm: syz.6.6085 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 463.845487][T22263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.845498][T22263] Call Trace: [ 463.845503][T22263] [ 463.845511][T22263] __dump_stack+0x1d/0x30 [ 463.845534][T22263] dump_stack_lvl+0xe8/0x140 [ 463.845554][T22263] dump_stack+0x15/0x1b [ 463.845592][T22263] should_fail_ex+0x265/0x280 [ 463.845635][T22263] should_fail+0xb/0x20 [ 463.845653][T22263] should_fail_usercopy+0x1a/0x20 [ 463.845677][T22263] _copy_from_user+0x1c/0xb0 [ 463.845703][T22263] ___sys_sendmsg+0xc1/0x1d0 [ 463.845815][T22263] __x64_sys_sendmsg+0xd4/0x160 [ 463.845844][T22263] x64_sys_call+0x2999/0x2fb0 [ 463.845870][T22263] do_syscall_64+0xd2/0x200 [ 463.845902][T22263] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 463.845976][T22263] ? clear_bhb_loop+0x40/0x90 [ 463.845998][T22263] ? clear_bhb_loop+0x40/0x90 [ 463.846022][T22263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.846045][T22263] RIP: 0033:0x7fd584b6e929 [ 463.846091][T22263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.846167][T22263] RSP: 002b:00007fd5831d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.846187][T22263] RAX: ffffffffffffffda RBX: 00007fd584d95fa0 RCX: 00007fd584b6e929 [ 463.846201][T22263] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 463.846215][T22263] RBP: 00007fd5831d7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.846228][T22263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.846241][T22263] R13: 0000000000000000 R14: 00007fd584d95fa0 R15: 00007ffc19d71df8 [ 463.846267][T22263] [ 464.163519][T22276] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6088'. [ 464.216967][T22278] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 464.340568][T22295] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6097'. [ 466.099135][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 466.119566][T22309] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6102'. [ 466.181472][T22314] SELinux: (22314) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 466.186502][T22317] FAULT_INJECTION: forcing a failure. [ 466.186502][T22317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.207289][T22317] CPU: 1 UID: 0 PID: 22317 Comm: syz.1.6105 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 466.207312][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.207326][T22317] Call Trace: [ 466.207331][T22317] [ 466.207336][T22317] __dump_stack+0x1d/0x30 [ 466.207397][T22317] dump_stack_lvl+0xe8/0x140 [ 466.207418][T22317] dump_stack+0x15/0x1b [ 466.207435][T22317] should_fail_ex+0x265/0x280 [ 466.207461][T22317] should_fail+0xb/0x20 [ 466.207479][T22317] should_fail_usercopy+0x1a/0x20 [ 466.207501][T22317] strncpy_from_user+0x25/0x230 [ 466.207604][T22317] strncpy_from_user_nofault+0x68/0xf0 [ 466.207625][T22317] bpf_probe_read_user_str+0x2a/0x70 [ 466.207669][T22317] bpf_prog_78f9c3f13797e2ae+0x3e/0x44 [ 466.207683][T22317] bpf_trace_run3+0x10f/0x1d0 [ 466.207708][T22317] ? __kfree_skb+0x109/0x150 [ 466.207794][T22317] ? __kernel_text_address+0xd/0x40 [ 466.207814][T22317] ? unwind_get_return_address+0x16/0x40 [ 466.207841][T22317] ? __kfree_skb+0x109/0x150 [ 466.207881][T22317] __traceiter_kmem_cache_free+0x38/0x60 [ 466.207947][T22317] ? __kfree_skb+0x109/0x150 [ 466.208024][T22317] kmem_cache_free+0x257/0x300 [ 466.208049][T22317] __kfree_skb+0x109/0x150 [ 466.208075][T22317] ? nlmon_xmit+0x4f/0x60 [ 466.208107][T22317] consume_skb+0x49/0x150 [ 466.208128][T22317] nlmon_xmit+0x4f/0x60 [ 466.208159][T22317] dev_hard_start_xmit+0x122/0x3e0 [ 466.208207][T22317] __dev_queue_xmit+0x10b9/0x1fb0 [ 466.208237][T22317] ? __dev_queue_xmit+0x182/0x1fb0 [ 466.208287][T22317] ? __account_obj_stock+0x211/0x350 [ 466.208316][T22317] ? __rcu_read_unlock+0x4f/0x70 [ 466.208348][T22317] ? __skb_clone+0x2a6/0x2d0 [ 466.208430][T22317] __netlink_deliver_tap+0x3c3/0x500 [ 466.208464][T22317] netlink_unicast+0x64c/0x670 [ 466.208542][T22317] netlink_sendmsg+0x58b/0x6b0 [ 466.208573][T22317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.208609][T22317] __sock_sendmsg+0x145/0x180 [ 466.208628][T22317] ____sys_sendmsg+0x31e/0x4e0 [ 466.208710][T22317] ___sys_sendmsg+0x17b/0x1d0 [ 466.208837][T22317] __x64_sys_sendmsg+0xd4/0x160 [ 466.208879][T22317] x64_sys_call+0x2999/0x2fb0 [ 466.208995][T22317] do_syscall_64+0xd2/0x200 [ 466.209023][T22317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 466.209102][T22317] ? clear_bhb_loop+0x40/0x90 [ 466.209125][T22317] ? clear_bhb_loop+0x40/0x90 [ 466.209145][T22317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.209164][T22317] RIP: 0033:0x7f4d93cce929 [ 466.209245][T22317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.209262][T22317] RSP: 002b:00007f4d92337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.209284][T22317] RAX: ffffffffffffffda RBX: 00007f4d93ef5fa0 RCX: 00007f4d93cce929 [ 466.209312][T22317] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 466.209326][T22317] RBP: 00007f4d92337090 R08: 0000000000000000 R09: 0000000000000000 [ 466.209340][T22317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.209354][T22317] R13: 0000000000000000 R14: 00007f4d93ef5fa0 R15: 00007ffc83a7a898 [ 466.209384][T22317] [ 466.587542][T22322] loop7: detected capacity change from 0 to 512 [ 466.594556][T22322] EXT4-fs: Invalid want_extra_isize 3 [ 467.666272][T22351] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6118'. [ 468.110219][T22368] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 468.185771][T22370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.202468][T22370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.256466][T22375] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 468.308760][T22377] SELinux: (22377) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 468.611161][T22384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.620787][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 468.620803][ T29] audit: type=1400 audit(1749097610.384:34569): avc: denied { connect } for pid=22383 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 468.683474][ T29] audit: type=1400 audit(1749097610.454:34570): avc: denied { read } for pid=22383 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 468.785504][T22392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6133'. [ 468.798102][ T29] audit: type=1326 audit(1749097866.569:34571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.822388][ T29] audit: type=1326 audit(1749097866.569:34572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.846617][ T29] audit: type=1326 audit(1749097866.569:34573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.860972][T22392] bridge_slave_0: left allmulticast mode [ 468.870955][ T29] audit: type=1326 audit(1749097866.569:34574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.875868][T22392] bridge_slave_0: left promiscuous mode [ 468.899970][ T29] audit: type=1326 audit(1749097866.569:34575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.904998][T22392] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.929076][ T29] audit: type=1326 audit(1749097866.569:34576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.959794][ T29] audit: type=1326 audit(1749097866.569:34577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 468.983992][ T29] audit: type=1326 audit(1749097866.569:34578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22389 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 469.024481][T22392] bridge_slave_1: left allmulticast mode [ 469.030219][T22392] bridge_slave_1: left promiscuous mode [ 469.035927][T22392] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.050558][T22392] bond0: (slave bond_slave_0): Releasing backup interface [ 469.066409][T22392] bond0: (slave bond_slave_1): Releasing backup interface [ 469.080948][T22392] team0: Port device team_slave_0 removed [ 469.098746][T22392] team0: Port device team_slave_1 removed [ 469.133485][T22398] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 469.228665][T22403] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 469.313194][T22408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.323429][T22408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.348492][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6144'. [ 469.387279][T22391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22391 comm=syz.0.6132 [ 469.617205][T22429] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6148'. [ 469.693310][T22431] loop7: detected capacity change from 0 to 1024 [ 469.700565][T22431] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.711604][T22431] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 469.723093][T22431] JBD2: no valid journal superblock found [ 469.728844][T22431] EXT4-fs (loop7): Could not load journal inode [ 470.524555][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 470.532905][ T3390] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.585569][T22463] netlink: 'syz.2.6162': attribute type 5 has an invalid length. [ 470.712748][T22466] loop7: detected capacity change from 0 to 1024 [ 470.722253][T22466] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 470.733707][T22466] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 470.745498][T22466] JBD2: no valid journal superblock found [ 470.751235][T22466] EXT4-fs (loop7): Could not load journal inode [ 470.755589][T22452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22452 comm=syz.0.6158 [ 470.819731][T22469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.837674][T22469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.858766][T22469] tipc: Enabling of bearer rejected, failed to enable media [ 470.933564][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6167'. [ 470.946014][T22481] SELinux: (22481) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 471.214609][T22487] sctp: [Deprecated]: syz.0.6171 (pid 22487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.214609][T22487] Use struct sctp_sack_info instead [ 471.979596][T22512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6178'. [ 472.053492][T22517] SELinux: (22517) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 472.099832][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6180'. [ 472.351485][T22524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.380084][T22524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.414148][T22524] tipc: Enabling of bearer rejected, failed to enable media [ 472.511700][T22533] loop7: detected capacity change from 0 to 8192 [ 472.537885][T22533] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 2068) [ 472.546640][T22533] FAT-fs (loop7): Filesystem has been set read-only [ 472.978090][T22551] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 472.994823][T22552] sctp: [Deprecated]: syz.2.6192 (pid 22552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.994823][T22552] Use struct sctp_sack_info instead [ 473.573205][T22564] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 473.640449][ T29] kauditd_printk_skb: 786 callbacks suppressed [ 473.640508][ T29] audit: type=1326 audit(1749098895.400:35365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 473.669870][ T29] audit: type=1326 audit(1749098895.400:35366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd584b6e963 code=0x7ffc0000 [ 473.692770][ T29] audit: type=1326 audit(1749098895.400:35367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd584b6d3df code=0x7ffc0000 [ 473.706578][T22558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22558 comm=syz.0.6196 [ 473.715717][ T29] audit: type=1326 audit(1749098895.400:35368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd584b6e9b7 code=0x7ffc0000 [ 473.715746][ T29] audit: type=1326 audit(1749098895.400:35369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd584b6d290 code=0x7ffc0000 [ 473.715776][ T29] audit: type=1326 audit(1749098895.400:35370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd584b6d58a code=0x7ffc0000 [ 473.797209][ T29] audit: type=1326 audit(1749098895.400:35371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22563 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd584b6e929 code=0x7ffc0000 [ 473.820782][ T29] audit: type=1326 audit(1749098895.430:35372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22557 comm="syz.0.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 473.845005][ T29] audit: type=1326 audit(1749098895.430:35373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22557 comm="syz.0.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 473.869222][ T29] audit: type=1326 audit(1749098895.470:35374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22557 comm="syz.0.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 473.949367][T22564] netlink: '+}[@': attribute type 3 has an invalid length. [ 474.109960][T22581] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6202'. [ 474.143377][T22566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22566 comm=syz.7.6198 [ 474.198015][T22587] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 474.281357][ T3390] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 474.291872][ T3390] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 474.753308][T22608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.888317][T22616] netlink: 'syz.7.6215': attribute type 1 has an invalid length. [ 474.928079][T22616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.936703][T22616] bond1: (slave bond2): making interface the new active one [ 474.945846][T22616] bond1: (slave bond2): Enslaving as an active interface with an up link [ 474.976573][T22624] SELinux: (22624) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 474.990171][T22616] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6215'. [ 475.001838][T22616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.013746][T22616] loop7: detected capacity change from 0 to 512 [ 475.021892][T22616] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.6215: bad orphan inode 13 [ 475.034775][T22616] ext4_test_bit(bit=12, block=4) = 1 [ 475.040087][T22616] is_bad_inode(inode)=0 [ 475.044317][T22616] NEXT_ORPHAN(inode)=0 [ 475.048392][T22616] max_ino=32 [ 475.051642][T22616] i_nlink=1 [ 475.055259][T22616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.121921][T22619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22619 comm=syz.6.6216 [ 475.234620][T22639] SELinux: (22639) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 475.255153][T22626] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 475.257362][T22641] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 475.402609][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6226'. [ 475.525571][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6230'. [ 475.645710][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6231'. [ 475.814724][T15316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.959298][T22676] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 476.111812][T22664] chnl_net:caif_netlink_parms(): no params data found [ 476.268211][T22664] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.276075][T22664] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.319059][T22664] bridge_slave_0: entered allmulticast mode [ 476.335761][T22664] bridge_slave_0: entered promiscuous mode [ 476.356331][T22664] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.363645][T22664] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.407850][T22674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22674 comm=syz.7.6234 [ 476.413184][T22664] bridge_slave_1: entered allmulticast mode [ 476.435354][T22664] bridge_slave_1: entered promiscuous mode [ 476.475560][T22664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.497019][T22664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.539827][T22664] team0: Port device team_slave_0 added [ 476.547981][T22664] team0: Port device team_slave_1 added [ 476.570378][T22703] sctp: [Deprecated]: syz.0.6240 (pid 22703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.570378][T22703] Use struct sctp_sack_info instead [ 476.594946][T22664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.601910][T22664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.628525][T22664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.668134][T22664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.675226][T22664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.701291][T22664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.829745][T22710] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 476.831144][T22664] hsr_slave_0: entered promiscuous mode [ 477.197547][T22664] hsr_slave_1: entered promiscuous mode [ 477.203533][T22664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.211149][T22664] Cannot create hsr debugfs directory [ 477.263427][T12079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.580673][T12079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.675421][T12079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.736178][T12079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.824422][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6255'. [ 477.973131][T22733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22733 comm=syz.0.6253 [ 478.259282][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6263'. [ 478.276560][T12079] bond0 (unregistering): Released all slaves [ 478.381148][T12079] hsr_slave_0: left promiscuous mode [ 478.404820][T12079] hsr_slave_1: left promiscuous mode [ 478.419058][T12079] veth1_macvtap: left promiscuous mode [ 478.442155][T12079] veth0_macvtap: left promiscuous mode [ 478.447662][T12079] veth1_vlan: left promiscuous mode [ 478.463638][T12079] veth0_vlan: left promiscuous mode [ 478.641060][T12541] smc: removing ib device syz! [ 478.642606][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 478.642622][ T29] audit: type=1326 audit(1749100180.406:35735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.677648][T22772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.719342][T22772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.751683][ T29] audit: type=1326 audit(1749100180.446:35736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.775332][ T29] audit: type=1326 audit(1749100180.446:35737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.799073][ T29] audit: type=1326 audit(1749100180.446:35738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d93ccd290 code=0x7ffc0000 [ 478.822755][ T29] audit: type=1326 audit(1749100180.446:35739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d93cce52b code=0x7ffc0000 [ 478.846362][ T29] audit: type=1326 audit(1749100180.446:35740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d93cce52b code=0x7ffc0000 [ 478.869987][ T29] audit: type=1326 audit(1749100180.496:35741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.893756][ T29] audit: type=1326 audit(1749100180.496:35742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.917291][ T29] audit: type=1326 audit(1749100180.496:35743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.940997][ T29] audit: type=1326 audit(1749100180.496:35744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22771 comm="syz.1.6268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d93cce929 code=0x7ffc0000 [ 478.998429][T22772] tipc: Enabling of bearer rejected, failed to enable media [ 479.096704][ T3390] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 479.132535][ T3390] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 479.219849][T22664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.246020][T22664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.291152][T22664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.305711][T22664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.339309][T12079] IPVS: stop unused estimator thread 0... [ 479.391483][T22664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.445323][T22664] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.454634][T12541] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.461702][T12541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.480565][T22664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.490988][T22664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.504096][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.511150][T12541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.605912][T22664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.695566][T22815] FAULT_INJECTION: forcing a failure. [ 479.695566][T22815] name failslab, interval 1, probability 0, space 0, times 0 [ 479.700167][T22664] veth0_vlan: entered promiscuous mode [ 479.708238][T22815] CPU: 0 UID: 0 PID: 22815 Comm: syz.6.6278 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 479.708310][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.708326][T22815] Call Trace: [ 479.708333][T22815] [ 479.708341][T22815] __dump_stack+0x1d/0x30 [ 479.708373][T22815] dump_stack_lvl+0xe8/0x140 [ 479.708397][T22815] dump_stack+0x15/0x1b [ 479.708417][T22815] should_fail_ex+0x265/0x280 [ 479.708503][T22815] ? sctp_add_bind_addr+0x71/0x1e0 [ 479.708579][T22815] should_failslab+0x8c/0xb0 [ 479.708608][T22815] __kmalloc_cache_noprof+0x4c/0x320 [ 479.708644][T22815] sctp_add_bind_addr+0x71/0x1e0 [ 479.708746][T22815] sctp_do_bind+0x427/0x4b0 [ 479.708777][T22815] sctp_connect_new_asoc+0x153/0x3a0 [ 479.708811][T22815] sctp_sendmsg+0xf10/0x18d0 [ 479.708841][T22815] ? selinux_socket_sendmsg+0x91/0x1b0 [ 479.708878][T22815] ? __pfx_sctp_sendmsg+0x10/0x10 [ 479.708906][T22815] inet_sendmsg+0xc5/0xd0 [ 479.708949][T22815] __sock_sendmsg+0x102/0x180 [ 479.708974][T22815] __sys_sendto+0x268/0x330 [ 479.709016][T22815] __x64_sys_sendto+0x76/0x90 [ 479.709047][T22815] x64_sys_call+0x2eb6/0x2fb0 [ 479.709108][T22815] do_syscall_64+0xd2/0x200 [ 479.709179][T22815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 479.709210][T22815] ? clear_bhb_loop+0x40/0x90 [ 479.709236][T22815] ? clear_bhb_loop+0x40/0x90 [ 479.709262][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.709370][T22815] RIP: 0033:0x7fd584b6e929 [ 479.709389][T22815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.709424][T22815] RSP: 002b:00007fd5831d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 479.709447][T22815] RAX: ffffffffffffffda RBX: 00007fd584d95fa0 RCX: 00007fd584b6e929 [ 479.709462][T22815] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 479.709477][T22815] RBP: 00007fd5831d7090 R08: 0000200000000400 R09: 000000000000001c [ 479.709492][T22815] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 479.709507][T22815] R13: 0000000000000000 R14: 00007fd584d95fa0 R15: 00007ffc19d71df8 [ 479.709529][T22815] [ 479.936005][T22664] veth1_vlan: entered promiscuous mode [ 479.940707][T22819] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 479.964776][T22664] veth0_macvtap: entered promiscuous mode [ 479.979404][T22664] veth1_macvtap: entered promiscuous mode [ 480.050173][T22664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.062777][T22664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.093381][T22664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.102181][T22664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.110880][T22664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.119640][T22664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.425750][T22849] SELinux: (22849) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 480.480663][T22851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.789314][T22869] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 480.797708][ T3390] IPVS: starting estimator thread 0... [ 480.894610][T22871] IPVS: using max 2736 ests per chain, 136800 per kthread [ 480.909478][T22874] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 480.972672][T22880] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.355484][T22904] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.400340][T22906] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.424862][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6312'. [ 481.689305][T22932] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.788800][T22937] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.868073][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6326'. [ 481.882938][T22939] loop7: detected capacity change from 0 to 1024 [ 481.899473][T22939] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 481.900551][T22941] bridge_slave_0: left allmulticast mode [ 481.910404][T22939] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 481.916155][T22941] bridge_slave_0: left promiscuous mode [ 481.931432][T22941] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.953470][T22939] JBD2: no valid journal superblock found [ 481.959200][T22939] EXT4-fs (loop7): Could not load journal inode [ 481.967368][T22941] bridge_slave_1: left allmulticast mode [ 481.973246][T22941] bridge_slave_1: left promiscuous mode [ 481.978946][T22941] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.993132][T22941] bond0: (slave bond_slave_0): Releasing backup interface [ 482.004694][T22941] bond0: (slave bond_slave_1): Releasing backup interface [ 482.027173][T22941] team0: Port device team_slave_0 removed [ 482.039879][T22941] team0: Port device team_slave_1 removed [ 482.048604][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6327'. [ 482.063267][T22941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.070711][T22941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.103808][T22941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.111246][T22941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.200535][T22944] bond1: (slave bond2): Releasing backup interface [ 482.305004][T22955] FAULT_INJECTION: forcing a failure. [ 482.305004][T22955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.318234][T22955] CPU: 0 UID: 0 PID: 22955 Comm: syz.7.6331 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 482.318266][T22955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.318280][T22955] Call Trace: [ 482.318288][T22955] [ 482.318296][T22955] __dump_stack+0x1d/0x30 [ 482.318320][T22955] dump_stack_lvl+0xe8/0x140 [ 482.318352][T22955] dump_stack+0x15/0x1b [ 482.318382][T22955] should_fail_ex+0x265/0x280 [ 482.318467][T22955] should_fail+0xb/0x20 [ 482.318480][T22955] should_fail_usercopy+0x1a/0x20 [ 482.318500][T22955] _copy_from_user+0x1c/0xb0 [ 482.318581][T22955] ____sys_sendmsg+0x1c5/0x4e0 [ 482.318609][T22955] ___sys_sendmsg+0x17b/0x1d0 [ 482.318650][T22955] __sys_sendmmsg+0x178/0x300 [ 482.318732][T22955] __x64_sys_sendmmsg+0x57/0x70 [ 482.318764][T22955] x64_sys_call+0x2f2f/0x2fb0 [ 482.318787][T22955] do_syscall_64+0xd2/0x200 [ 482.318878][T22955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 482.318913][T22955] ? clear_bhb_loop+0x40/0x90 [ 482.318936][T22955] ? clear_bhb_loop+0x40/0x90 [ 482.318970][T22955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.318993][T22955] RIP: 0033:0x7fa6459de929 [ 482.319070][T22955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.319090][T22955] RSP: 002b:00007fa644047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.319110][T22955] RAX: ffffffffffffffda RBX: 00007fa645c05fa0 RCX: 00007fa6459de929 [ 482.319124][T22955] RDX: 0000000000000001 RSI: 0000200000003640 RDI: 0000000000000004 [ 482.319137][T22955] RBP: 00007fa644047090 R08: 0000000000000000 R09: 0000000000000000 [ 482.319150][T22955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.319163][T22955] R13: 0000000000000000 R14: 00007fa645c05fa0 R15: 00007ffc89482fc8 [ 482.319182][T22955] [ 482.554829][T22963] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 482.602170][T22967] FAULT_INJECTION: forcing a failure. [ 482.602170][T22967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.615275][T22967] CPU: 0 UID: 0 PID: 22967 Comm: syz.0.6338 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 482.615332][T22967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.615350][T22967] Call Trace: [ 482.615355][T22967] [ 482.615361][T22967] __dump_stack+0x1d/0x30 [ 482.615382][T22967] dump_stack_lvl+0xe8/0x140 [ 482.615404][T22967] dump_stack+0x15/0x1b [ 482.615418][T22967] should_fail_ex+0x265/0x280 [ 482.615498][T22967] should_fail+0xb/0x20 [ 482.615547][T22967] should_fail_usercopy+0x1a/0x20 [ 482.615623][T22967] _copy_from_user+0x1c/0xb0 [ 482.615676][T22967] ___sys_sendmsg+0xc1/0x1d0 [ 482.615715][T22967] __x64_sys_sendmsg+0xd4/0x160 [ 482.615776][T22967] x64_sys_call+0x2999/0x2fb0 [ 482.615795][T22967] do_syscall_64+0xd2/0x200 [ 482.615821][T22967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 482.615845][T22967] ? clear_bhb_loop+0x40/0x90 [ 482.615920][T22967] ? clear_bhb_loop+0x40/0x90 [ 482.615939][T22967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.615987][T22967] RIP: 0033:0x7f8d77dce929 [ 482.616000][T22967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.616016][T22967] RSP: 002b:00007f8d76437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.616033][T22967] RAX: ffffffffffffffda RBX: 00007f8d77ff5fa0 RCX: 00007f8d77dce929 [ 482.616044][T22967] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 482.616058][T22967] RBP: 00007f8d76437090 R08: 0000000000000000 R09: 0000000000000000 [ 482.616069][T22967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.616080][T22967] R13: 0000000000000000 R14: 00007f8d77ff5fa0 R15: 00007fff44bb13f8 [ 482.616096][T22967] [ 483.004099][T22988] loop7: detected capacity change from 0 to 1024 [ 483.043155][T22988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.059032][T22995] netlink: 'syz.6.6337': attribute type 10 has an invalid length. [ 483.069168][T22988] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.083333][T22995] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 483.266957][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6347'. [ 483.587525][T23021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.672035][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 483.672050][ T29] audit: type=1326 audit(1749101721.431:36406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 483.703829][ T29] audit: type=1326 audit(1749101721.441:36407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d77dd0847 code=0x7ffc0000 [ 483.727443][ T29] audit: type=1326 audit(1749101721.441:36408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8d77dd07bc code=0x7ffc0000 [ 483.750975][ T29] audit: type=1326 audit(1749101721.441:36409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8d77dd06f4 code=0x7ffc0000 [ 483.774630][ T29] audit: type=1326 audit(1749101721.441:36410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8d77dd06f4 code=0x7ffc0000 [ 483.798247][ T29] audit: type=1326 audit(1749101721.441:36411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8d77dcd58a code=0x7ffc0000 [ 483.821745][ T29] audit: type=1326 audit(1749101721.441:36412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 483.845430][ T29] audit: type=1326 audit(1749101721.441:36413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 483.869215][ T29] audit: type=1326 audit(1749101721.441:36414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 483.892773][ T29] audit: type=1326 audit(1749101721.441:36415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d77dce929 code=0x7ffc0000 [ 483.930030][T15316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.978467][T23046] loop7: detected capacity change from 0 to 1024 [ 483.991897][T23046] EXT4-fs: inline encryption not supported [ 484.016121][T23046] EXT4-fs: Ignoring removed orlov option [ 484.021858][T23046] ext4: Unknown parameter 'appraise' [ 484.031757][T23046] netlink: 'syz.7.6367': attribute type 2 has an invalid length. [ 484.063361][T23046] loop7: detected capacity change from 0 to 1024 [ 484.075435][T23058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.084582][T23046] EXT4-fs: Ignoring removed orlov option [ 484.093260][T23046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.305099][T23072] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 484.453605][T23037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23037 comm=syz.6.6365 [ 484.652577][T23092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.672778][T23092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.708776][T23065] ================================================================== [ 484.716864][T23065] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 484.723994][T23065] [ 484.726309][T23065] write to 0xffff888106ea69a4 of 4 bytes by task 23046 on cpu 0: [ 484.734026][T23065] xas_set_mark+0x12b/0x140 [ 484.738535][T23065] __folio_start_writeback+0x1dd/0x440 [ 484.743999][T23065] ext4_bio_write_folio+0x5ad/0x9f0 [ 484.749200][T23065] mpage_submit_folio+0xe4/0x170 [ 484.754144][T23065] mpage_process_page_bufs+0x39b/0x4a0 [ 484.759608][T23065] mpage_prepare_extent_to_map+0x741/0xaa0 [ 484.765421][T23065] ext4_do_writepages+0xa1a/0x21c0 [ 484.770536][T23065] ext4_writepages+0x176/0x300 [ 484.775316][T23065] do_writepages+0x1c3/0x310 [ 484.779910][T23065] file_write_and_wait_range+0x156/0x2c0 [ 484.785551][T23065] generic_buffers_fsync_noflush+0x45/0x120 [ 484.791470][T23065] ext4_sync_file+0x1ab/0x690 [ 484.796160][T23065] vfs_fsync_range+0x10d/0x130 [ 484.800933][T23065] ext4_buffered_write_iter+0x34f/0x3c0 [ 484.806489][T23065] ext4_file_write_iter+0x383/0xf00 [ 484.811701][T23065] iter_file_splice_write+0x5f2/0x970 [ 484.817086][T23065] direct_splice_actor+0x156/0x2a0 [ 484.822206][T23065] splice_direct_to_actor+0x312/0x680 [ 484.827592][T23065] do_splice_direct+0xda/0x150 [ 484.832363][T23065] do_sendfile+0x380/0x650 [ 484.836781][T23065] __x64_sys_sendfile64+0x105/0x150 [ 484.841983][T23065] x64_sys_call+0xb39/0x2fb0 [ 484.846594][T23065] do_syscall_64+0xd2/0x200 [ 484.851109][T23065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.857008][T23065] [ 484.859327][T23065] read to 0xffff888106ea69a4 of 4 bytes by task 23065 on cpu 1: [ 484.866952][T23065] xas_find_marked+0x5dc/0x620 [ 484.871728][T23065] find_get_entry+0x5d/0x380 [ 484.876328][T23065] filemap_get_folios_tag+0x92/0x210 [ 484.881621][T23065] mpage_prepare_extent_to_map+0x320/0xaa0 [ 484.887437][T23065] ext4_do_writepages+0x6ea/0x21c0 [ 484.892551][T23065] ext4_writepages+0x176/0x300 [ 484.897336][T23065] do_writepages+0x1c3/0x310 [ 484.901932][T23065] file_write_and_wait_range+0x156/0x2c0 [ 484.907664][T23065] generic_buffers_fsync_noflush+0x45/0x120 [ 484.913610][T23065] ext4_sync_file+0x1ab/0x690 [ 484.918326][T23065] vfs_fsync_range+0x10d/0x130 [ 484.923089][T23065] ext4_buffered_write_iter+0x34f/0x3c0 [ 484.928639][T23065] ext4_file_write_iter+0x383/0xf00 [ 484.933839][T23065] iter_file_splice_write+0x5f2/0x970 [ 484.939226][T23065] direct_splice_actor+0x156/0x2a0 [ 484.944356][T23065] splice_direct_to_actor+0x312/0x680 [ 484.949746][T23065] do_splice_direct+0xda/0x150 [ 484.954523][T23065] do_sendfile+0x380/0x650 [ 484.958959][T23065] __x64_sys_sendfile64+0x105/0x150 [ 484.964173][T23065] x64_sys_call+0xb39/0x2fb0 [ 484.968770][T23065] do_syscall_64+0xd2/0x200 [ 484.973290][T23065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.979180][T23065] [ 484.981502][T23065] value changed: 0x0a000021 -> 0x04000021 [ 484.987223][T23065] [ 484.989537][T23065] Reported by Kernel Concurrency Sanitizer on: [ 484.995681][T23065] CPU: 1 UID: 0 PID: 23065 Comm: syz.7.6367 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 485.007832][T23065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.017887][T23065] ================================================================== [ 485.081575][T15316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.