last executing test programs: 2m22.738372708s ago: executing program 3 (id=1025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) 2m21.859369771s ago: executing program 3 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='4', 0x1}], 0x1}}], 0x1, 0x40000) 2m21.843180861s ago: executing program 3 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m20.887650855s ago: executing program 3 (id=1079): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x2, 0x6, @broadcast}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@mcast1, r2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000c07200005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0020ca8f97dcc3e4c664000000000000000000000000000000000000c26a58cf905f5978de47ae3bd6507301"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xa04016, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1438c2, 0x19) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x715, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0) 2m20.789087376s ago: executing program 3 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 2m20.041899937s ago: executing program 3 (id=1094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0883, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0x20000002, 0x100000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r5}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) 2m20.016325138s ago: executing program 32 (id=1094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0883, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0x20000002, 0x100000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r5}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) 46.769366494s ago: executing program 2 (id=3062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x500}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x30}}, 0x0) 46.672346886s ago: executing program 2 (id=3063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000003c0)="ae", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) 46.671545866s ago: executing program 2 (id=3065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 46.632555496s ago: executing program 2 (id=3067): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x4c210382) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="253b43ec34198be3fef62286fcb7a876588020354370484ec119132f607c39a8bb06d43ee60961652854764f2bca79da34a735c23592d46d68dd91d07cd209a1eb91ef45b21d441c7227d635701e2775136accd818469a2f3386d8b4d89043ea38ca3771c4e77c07988ddcfcf2ed2957cabae581cf114587858da3bda8", @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="47e17a60f26fc18b07b55b77cbfefde4e938e30d4bb7fb465fc918e26aa35a8af3d88f1092c5afc3cfd521fb2b09ac8484f64a325e2be6d1aa07f95d680a122e53d47bd339ea514517bdb001f45fe58fdf0b07f4fcd0732c", @ANYBLOB="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", @ANYRES64=r0, @ANYRES8=0xffffffffffffffff], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x19, 0xc, &(0x7f00000017c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r3, @ANYBLOB="18000000000000000000008ee30c680018110000f02a2a8872ff692c4dcf3010d03828fbb0300a3441181861171dfaa8a3217b558657849ca3b67cc7d0dd84d750827b093804f623293af872f898dbcdebc9cc369843cabfd99d0fb8cca5b9a89a1ba155", @ANYRESOCT], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet6(0xa, 0x400000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000645dc720030450f85d0500000001090212"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x82201) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 43.752756198s ago: executing program 2 (id=3116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) 43.282850646s ago: executing program 2 (id=3123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) 43.267871466s ago: executing program 33 (id=3123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) 33.151771344s ago: executing program 1 (id=3329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 33.074999515s ago: executing program 1 (id=3330): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x3}]}}}]}, 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) (async) brk(0x20001000) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x8045) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x1, 0x15e, [0x0, 0x2000000002c0, 0x2000000002f0, 0x200000000320], 0x0, 0x0, 0x0}, 0x1c9) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, 0x0, 0x0, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000000000)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) syz_clone3(&(0x7f0000000380)={0x8000080, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {0x30}, &(0x7f0000000180)=""/111, 0x6f, &(0x7f0000000200)=""/116, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) 33.074609575s ago: executing program 1 (id=3331): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x39351b8a4005ecf0, 0x7}, 0x3, 0x100, 0x0, 0x3, 0x0, 0x0, 0x1}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x101}, 0x18) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0xc0f85403, 0x0) 33.055606875s ago: executing program 1 (id=3334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x13, &(0x7f0000000200)={0x9, 0x0, 0x80000000}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x20) sendfile(r3, r3, 0x0, 0x800000009) 32.830367269s ago: executing program 1 (id=3339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000840), 0x81, r7}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r8, &(0x7f0000000040)='\x00', 0x2, 0x1200) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 32.498669854s ago: executing program 1 (id=3344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ftruncate(r2, 0x80000001) 32.476852724s ago: executing program 34 (id=3344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ftruncate(r2, 0x80000001) 3.526546508s ago: executing program 7 (id=3768): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="99177fa54f29ece65fbcee5586dd6c01a7c3001800"/38], 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x35, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) 3.145795334s ago: executing program 7 (id=3772): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r0, 0x101000) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000002000000000000800000000850000000f0000009500000000"], 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000380)=""/124, 0x7c, 0x0, &(0x7f0000000580)=""/204, 0xcc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000)=0x4, 0x4) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001180)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14004801}, 0x800) 3.043115595s ago: executing program 5 (id=3773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x5}, 0x18) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) 3.003301666s ago: executing program 5 (id=3774): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x1a000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.964422347s ago: executing program 5 (id=3775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r7}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r8, 0x0, 0x2, 0x1200) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.760347329s ago: executing program 7 (id=3776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60568, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="2f0000000000000000000000580349389b55f2b06f8be4ffdd29ddfba5258839612e4d9a529b246eb08b4ba1dadb6ea7056256a00250bb9393c9ebdcd7769f2ba462c9bb8a7ddef15e58955ca962012b40ecff13c07b71a4de9243e7484720511107", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8000, 0x8, 0x6, 0x3, 0x80000001, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r13 = getpgid(0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000640)={0x1010400, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1f}, &(0x7f0000000240)=""/211, 0xd3, &(0x7f0000000340)=""/239, &(0x7f00000005c0)=[0xffffffffffffffff, r6, r7, r8, r9, r12, r13, 0x0], 0x8, {r14}}, 0x58) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 2.70777986s ago: executing program 7 (id=3778): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x7c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x55e, &(0x7f0000000580)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.865929272s ago: executing program 7 (id=3783): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x0, @private=0xa010102, 0x4e24, 0x0, 'wlc\x00', 0x30, 0x7f, 0x43}, {@remote, 0x4e24, 0x3, 0x80000000, 0x7, 0x5}}, 0x44) utime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) flistxattr(r1, 0x0, 0x1c) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb0800070001000000"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0xffff, 0x8009) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x3c, 0xfcb5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x18, 0x0, 0x0, 0xffffffffffff8001}) 1.835444553s ago: executing program 5 (id=3785): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) inotify_rm_watch(r0, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x189400, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r11, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r11, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) 1.789372954s ago: executing program 4 (id=3786): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd, 0x30}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x50}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.744194334s ago: executing program 6 (id=3788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60568, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="2f0000000000000000000000580349389b55f2b06f8be4ffdd29ddfba5258839612e4d9a529b246eb08b4ba1dadb6ea7056256a00250bb9393c9ebdcd7769f2ba462c9bb8a7ddef15e58955ca962012b40ecff13c07b71a4de9243e7484720511107", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8000, 0x8, 0x6, 0x3, 0x80000001, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r13 = getpgid(0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000640)={0x1010400, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1f}, &(0x7f0000000240)=""/211, 0xd3, &(0x7f0000000340)=""/239, &(0x7f00000005c0)=[0xffffffffffffffff, r6, r7, r8, r9, r12, r13, 0x0], 0x8, {r14}}, 0x58) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 1.672735365s ago: executing program 6 (id=3791): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xf}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r8 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000080)=[r9, r8], 0x2) getpeername$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) 1.663827155s ago: executing program 4 (id=3792): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) read(r0, &(0x7f0000000000)=""/126, 0x7e) 1.581878936s ago: executing program 4 (id=3793): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@fwd={0xa}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x74a1}, {0xb, 0xf}, {0x7, 0xfffff047}]}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x1}]}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x238dca65}, {0x7fff}, {0x1, 0x12c}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0x5, 0x5}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000580)=""/175, 0xac, 0xaf, 0x1, 0x7, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x3a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mq_timedsend(0xffffffffffffffff, 0x0, 0x47, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0xf}, 0x18) listen(r9, 0x9) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r4, 0x0, 0x6}, 0x18) io_setup(0x2, &(0x7f0000002400)) clock_gettime(0x0, &(0x7f0000000300)) 1.581114447s ago: executing program 6 (id=3794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00'}, 0x18) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) utime(0x0, 0x0) 1.386959079s ago: executing program 6 (id=3795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r7}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r8, 0x0, 0x2, 0x1200) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.38242085s ago: executing program 7 (id=3796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) utime(0x0, 0x0) 1.335308971s ago: executing program 35 (id=3796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) utime(0x0, 0x0) 1.33197531s ago: executing program 4 (id=3798): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x200816, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f00000008c0)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r2, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, r2, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000f80)={r2, 0xc6b7, 0xa, 0x1}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000001dc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00142c0000000000000000000000000000000001fc0000"], 0x0) 1.095186283s ago: executing program 4 (id=3799): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x44, 0x100000000}, 0x3323, 0x4, 0x3, 0x3, 0x9, 0x2f43, 0x40, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x9}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000001340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000011c0)='pkcs7_test\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa6d78b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f5c008d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000340)='trusted\x00', &(0x7f0000000380)='9p\x00') add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000200)="0a42527af69786aea8f513bc1c50be36a80188d0223c274a9514f4af3d62ecb257", 0x21, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000600)={0xffffffffffffffff, 0x1, 0x7, 0x7, @vifc_lcl_ifindex, @local}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 857.658647ms ago: executing program 0 (id=3800): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x88040) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) setgroups(0x3, &(0x7f0000000180)=[0x0, 0xee01, 0xee00]) 781.839708ms ago: executing program 5 (id=3801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r2, 0xa49a, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}]}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r5, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) socket$netlink(0x10, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e23, 0xc0, @mcast2, 0x5}}}, &(0x7f0000000000)=0x84) syz_emit_ethernet(0x126, &(0x7f0000000300)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @udp={{0x1f, 0x4, 0x0, 0x5, 0x118, 0x65, 0x0, 0x9, 0x11, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x7, 0xf, "1d78a9b8edb1a4cd63b0f0a605"}, @lsrr={0x83, 0xb, 0xe7, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x20}]}, @end, @timestamp={0x44, 0x24, 0x2b, 0x0, 0x7, [0x40, 0x7f, 0xfff, 0x8, 0x101, 0x9, 0x3, 0x100]}, @rr={0x7, 0xf, 0xa7, [@private=0xa010102, @multicast2, @empty]}, @noop, @lsrr={0x83, 0x13, 0x1a, [@private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1]}]}}, {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a7d6205b0fcb6e0781b9b0259fc727cf7e2b94b182103000", "db3e6bd3f9be9dc4b108bbcebf86adf4635c55295ff53ac291449277c125a3f4ccbc90b8caeb6e607b0154364fb8db41", "934564190fc0c82510029d9cbfd73d846e40fdacdd784f6f8f40f0de", {"9edefdc394dd3ce0b688c3edac3371d5", "337d43ddf52fe7fbfcf903191fce00"}}}}}}}, 0x0) 629.82247ms ago: executing program 5 (id=3802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60568, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="2f0000000000000000000000580349389b55f2b06f8be4ffdd29ddfba5258839612e4d9a529b246eb08b4ba1dadb6ea7056256a00250bb9393c9ebdcd7769f2ba462c9bb8a7ddef15e58955ca962012b40ecff13c07b71a4de9243e7484720511107", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8000, 0x8, 0x6, 0x3, 0x80000001, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r13 = getpgid(0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000640)={0x1010400, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1f}, &(0x7f0000000240)=""/211, 0xd3, &(0x7f0000000340)=""/239, &(0x7f00000005c0)=[0xffffffffffffffff, r6, r7, r8, r9, r12, r13, 0x0], 0x8, {r14}}, 0x58) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 629.25343ms ago: executing program 0 (id=3803): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000002400)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x28, 0x10, 0x401, 0x71bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54280, 0x44000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c0d5}, 0x0) listen(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, 0x0, 0x0, 0x0) 607.480701ms ago: executing program 0 (id=3804): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) (fail_nth: 15) 551.895112ms ago: executing program 6 (id=3805): r0 = open(0x0, 0x145142, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x213, @tick=0x3f, 0x3, {0x6, 0x8}, 0xf, 0x1, 0x80}) r2 = open(0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x1fef15578321af4b, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0, @ANYBLOB="87dfce35bee6f412b152d0e4aa64603aeaa9fd6027881d6e34a1efa80ee630d857a3eb51", @ANYRES32, @ANYRESOCT, @ANYRESDEC=r2, @ANYRES64=r3], 0x3, 0x7ec, &(0x7f0000001580)="$eJzs3U1sHOX5APBnjU3yN39FiKKQRiFMApWCFMx6DaYWB1jWY2fA3rV215WjtoKIOMiKAwiKWnxoyAXaiqrqqUfaK7deqlaVWqmHtqdK5dBLb0icKlq1UtWqquRqZncdf6w/QuIkwO9nxfN69pn3fd7xZJ4d2zsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECUapPl8mgpZrL6/EKyxUBEJPd2Y2e3PLy6urraafX6+/WGxQ7jRpTyf3HwYBzprDpy79WHD+efTsaxzlfH4mC+OBgrdx2++8kvDA70tt+a8HU7sce4UsRbeVIXzy0vL762D4ncRN/75U6PDvZb+e/i+z6d1rNWI5utTqdJ1mokE+Pj5UfPTLWSqWwmbZ1ttdPZpNZMq+1GMzlVezgZnZgYS9KRs435+vRkdSbtrXzikUq5PJ48O3I5IlqN+qPPjrRqZ7KZmaw+XcRUyt+MPOaJpDbZfC5r57u/sLw4ttvsLiwtL45uWTuUH9mFYw/d/dEbH/5jaTE/ILfrpDdeZXS0Uhkdf3zi8SfK5cFKubJxRXmTWIuIgYg8Yl8OWm4fA7H9UVToHklD13fihhtgoFv/YyayqMd8LETS52MoajEZzWjEbP71n4a2RHT16v+XHv3rH3Yad33971X5I1cfPhpF/T/e+er4dvW/b6438mOgm892j78eb8ZKXIxzsRzLsRiv7XtG1/kxsOfIE/+/h6jpSKMeWbSiEVnMRrVYk3TXJDER4zEe5Xg+zsRUtCKJqchiJtJoxdloRTvS4oiqRTPSqEY7GtGMJE5FLR6OJEZjIiZiLJJIYyTORiPmox7TMRnVopcLsVTs97FNeR3+9gu/eOmPH72Xt9eCRneYSCl/MpcH/X2HoC3lfu/1fzW6Eer/590NPoPDJ7faq/8AAADAZ1ap+Ol7qfh91P1FayqbSb96q9MCAAAAbqDiN//H8kXx96j3Rym//i/3ifzgpucGAAAA3Bil4jV2pYgYjgc6rd7Lpfr9EAAAAAD4FCp+/388XwxHXC5WuP4HAACAz5jvbHeP/Q9799htzR0o/epv0WwOla7MLTxUulTN46qX7uhs1118Za3H9tTR0sHodFL0NT64clcpIgZr6bFS7+6X/z3QWX5cfD46uLb5dvf6L21KYG2LOzZPKU/g0MqmBA4XA78bJzoxJ853loPdRLt3JB6eyuKtiMbMk8UtEfN/7TdeXvpWFNP/bn32UCkuLC0vjrz4yvL5IpcreS9XLnVvoLjlPor9cylGXO3ugbi//4yHihdidMcd7oxbXv8NGHi62Hxg5zFL68d8O052Yk4Od5bDKxvmfzAfc3TkydGoVg8NtNOF9hur62bfzWL0Omf+djzYiXnw1IOdRZ8sKhuyeHlrFpX1WXR3wi77YtcshroH1nsnLi/887eNUjq2WxZjm7I4eI1ZANwqF4q7/lytQv9XVKH/rHbk9f9q3U06AV3ds9x9a13lZ7leGdh0lrsQa4/0tl9X6wZjS3Xf/PQiNo2yzRn9VCfmVOf5xODRPnWl3OeM/urSq7/rntEfe/9HP/768d//9JNXt/fj4U5MdxH3/GabGpvP+fv12eFepwtPdRs/2Xbc1kylFEMRd3zj0qtx+PU3Vx5ZunTupcWXFl+uVMbGy4+Vy49XYqh4qtBdqD0A9LH7e+zsGlF6bPNV9fmNdfeetT8pGIkX45VYjvNxuni1QUQ80L/X4XV/hnA6TkZxsbzNVevwund4Ob3LteXQWmxla2wptul3bN0eu++HxeJf+/hNAYB9dnKXOryX+n96l+vujbV809VxbF/L+/nyvu4NAPh8SJsfl4bb75SazWzu+dGJidFq+0yaNBu155JmNjmdJlm9nTZrZ6r16TSZazbajVrvB8eTaStpzc/NNZrtZKrRTOYarWyheOf3pPvW7610tlpvZ7XW3ExabaVJrVFvV2vtZDJr1ZK5O5+ZyVpn0maxcWsurWVTWa3azhr1pNWYb9bSkSRppWkyN98LzCbTejubyvJmPZlrZrPV5pWImJmfTZPJtFVrZnPtRvOLeYe1RhRjZfWpRnO26HZk6/T/crP3NwDcDl5/c+XiueXlxdc2Ng7F5jWbGoNRNP68U0yvcavnCABspEoDAAAAAAAAAAAAAMDtb+vL9fK1u76kr1/jQFz7Vgfimoa4zkY+te6ad3/2tRc/8Uw/HY18erdBGvvQKO19Xi889dTF7WKeuXzkzN766f8/pd9LXd85FHHnz3/QWfP0zdotH1w9sK9l89XSDjG39rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP38LwAA//+yk1F7") r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 335.197205ms ago: executing program 6 (id=3806): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x7, 0xfffffffa, 0x1, 0xb3a}, 0xb6, 0x0, 0xffff, 0x2, 0x50a, 0x14, 0x1e, 0x1d, 0x5, 0xfe, {0x6, 0x9c22, 0x9, 0x10, 0x4, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008d1}, 0x22040044) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x3e}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 84.459399ms ago: executing program 0 (id=3807): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 54.232289ms ago: executing program 0 (id=3808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000740)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) rmdir(&(0x7f0000000100)='./file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x11) 12.74598ms ago: executing program 0 (id=3809): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f5, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000ff0000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1020, 0x5dd8, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sync_file_range(r1, 0x6, 0x10000000000000, 0x2) 0s ago: executing program 4 (id=3810): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x103f81af530ab711, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000001d5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000"], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): entered forwarding state [ 189.944592][T12541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.957878][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.969093][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.990246][T12541] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.064439][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.071560][ T5612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.083213][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.090424][ T5612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.194989][T12541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.237887][T12676] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3375'. [ 190.355456][T12690] loop5: detected capacity change from 0 to 512 [ 190.380583][T12690] EXT4-fs: Ignoring removed oldalloc option [ 190.404826][T12690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.426113][T12690] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.428553][T12541] veth0_vlan: entered promiscuous mode [ 190.456913][T12690] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3379: bg 0: block 217: padding at end of block bitmap is not set [ 190.459578][T12541] veth1_vlan: entered promiscuous mode [ 190.495437][T12541] veth0_macvtap: entered promiscuous mode [ 190.508993][T12541] veth1_macvtap: entered promiscuous mode [ 190.528953][T12541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.541246][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.542921][T12541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.560250][T12541] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.569162][T12541] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.578056][T12541] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.586911][T12541] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.661176][T12714] __nla_validate_parse: 1 callbacks suppressed [ 190.661197][T12714] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3385'. [ 190.691049][T12707] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3385'. [ 190.703532][T12719] loop7: detected capacity change from 0 to 128 [ 190.721977][T12721] loop4: detected capacity change from 0 to 128 [ 190.735704][T12721] syz.4.3388: attempt to access beyond end of device [ 190.735704][T12721] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 190.736484][T12719] syz.7.3345: attempt to access beyond end of device [ 190.736484][T12719] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 190.777926][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 190.777947][ T29] audit: type=1326 audit(1751621384.692:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.808139][ T29] audit: type=1326 audit(1751621384.692:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.808613][T12727] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3389'. [ 190.831766][ T29] audit: type=1326 audit(1751621384.692:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.846452][T12723] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3389'. [ 190.866385][ T29] audit: type=1326 audit(1751621384.692:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.897317][ T29] audit: type=1326 audit(1751621384.692:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.920933][ T29] audit: type=1326 audit(1751621384.692:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.944642][ T29] audit: type=1326 audit(1751621384.692:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.968254][ T29] audit: type=1326 audit(1751621384.692:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 190.991791][ T29] audit: type=1326 audit(1751621384.692:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 191.015405][ T29] audit: type=1326 audit(1751621384.692:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.3390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85749dd3df code=0x7ffc0000 [ 191.080791][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3393'. [ 191.089792][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3393'. [ 191.178819][T12741] loop6: detected capacity change from 0 to 512 [ 191.204193][T12741] EXT4-fs: Ignoring removed oldalloc option [ 191.220333][T12741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.233325][T12741] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.247470][T12741] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3397: bg 0: block 217: padding at end of block bitmap is not set [ 191.285970][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.456041][T12761] loop5: detected capacity change from 0 to 128 [ 191.467859][T12761] syz.5.3402: attempt to access beyond end of device [ 191.467859][T12761] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 191.491873][T12759] loop7: detected capacity change from 0 to 512 [ 191.548305][T12759] EXT4-fs (loop7): too many log groups per flexible block group [ 191.556129][T12759] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 191.577772][T12759] EXT4-fs (loop7): mount failed [ 191.634109][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3405'. [ 191.643305][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3405'. [ 192.169084][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3418'. [ 192.178197][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3418'. [ 192.222179][T12805] loop6: detected capacity change from 0 to 128 [ 192.308145][T12814] loop7: detected capacity change from 0 to 1024 [ 192.338383][T12814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.355964][T12814] pim6reg: entered allmulticast mode [ 192.369425][T12814] pim6reg: left allmulticast mode [ 192.498389][T12826] loop6: detected capacity change from 0 to 1024 [ 192.505399][T12826] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 192.604279][T12837] loop5: detected capacity change from 0 to 1764 [ 192.632101][T12844] loop6: detected capacity change from 0 to 128 [ 192.643977][T12846] loop4: detected capacity change from 0 to 512 [ 192.650886][T12846] EXT4-fs: Ignoring removed oldalloc option [ 192.661527][T12846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.674814][T12846] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.687748][T12846] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3435: bg 0: block 217: padding at end of block bitmap is not set [ 192.715680][T11521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.835865][T12856] FAULT_INJECTION: forcing a failure. [ 192.835865][T12856] name failslab, interval 1, probability 0, space 0, times 0 [ 192.848638][T12856] CPU: 0 UID: 0 PID: 12856 Comm: syz.5.3438 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 192.848682][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.848696][T12856] Call Trace: [ 192.848703][T12856] [ 192.848711][T12856] __dump_stack+0x1d/0x30 [ 192.848787][T12856] dump_stack_lvl+0xe8/0x140 [ 192.848837][T12856] dump_stack+0x15/0x1b [ 192.848858][T12856] should_fail_ex+0x265/0x280 [ 192.848890][T12856] should_failslab+0x8c/0xb0 [ 192.848913][T12856] __kvmalloc_node_noprof+0x123/0x4e0 [ 192.849067][T12856] ? nf_hook_entries_grow+0x1bc/0x450 [ 192.849106][T12856] nf_hook_entries_grow+0x1bc/0x450 [ 192.849144][T12856] __nf_register_net_hook+0x18e/0x480 [ 192.849277][T12856] nf_register_net_hook+0x88/0x130 [ 192.849326][T12856] nf_register_net_hooks+0x44/0x150 [ 192.849369][T12856] nf_defrag_ipv6_enable+0x6e/0xc0 [ 192.849412][T12856] nf_ct_netns_do_get+0x161/0x380 [ 192.849488][T12856] nf_ct_netns_get+0x87/0xc0 [ 192.849517][T12856] masquerade_tg6_checkentry+0x5e/0x80 [ 192.849539][T12856] xt_check_target+0x28a/0x4c0 [ 192.849653][T12856] ? strnlen+0x28/0x50 [ 192.849688][T12856] ? strcmp+0x22/0x50 [ 192.849712][T12856] ? xt_find_target+0x1cd/0x200 [ 192.849753][T12856] translate_table+0xcf5/0x1070 [ 192.849824][T12856] do_ip6t_set_ctl+0x678/0x840 [ 192.849865][T12856] nf_setsockopt+0x196/0x1b0 [ 192.849886][T12856] ipv6_setsockopt+0x11a/0x130 [ 192.849911][T12856] udpv6_setsockopt+0x99/0xb0 [ 192.850001][T12856] sock_common_setsockopt+0x69/0x80 [ 192.850069][T12856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.850160][T12856] __sys_setsockopt+0x184/0x200 [ 192.850194][T12856] __x64_sys_setsockopt+0x64/0x80 [ 192.850236][T12856] x64_sys_call+0x2bd5/0x2fb0 [ 192.850343][T12856] do_syscall_64+0xd2/0x200 [ 192.850387][T12856] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.850422][T12856] ? clear_bhb_loop+0x40/0x90 [ 192.850446][T12856] ? clear_bhb_loop+0x40/0x90 [ 192.850468][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.850528][T12856] RIP: 0033:0x7f450df3e929 [ 192.850544][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.850563][T12856] RSP: 002b:00007f450c5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.850598][T12856] RAX: ffffffffffffffda RBX: 00007f450e165fa0 RCX: 00007f450df3e929 [ 192.850614][T12856] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 192.850630][T12856] RBP: 00007f450c5a7090 R08: 000000000000053e R09: 0000000000000000 [ 192.850662][T12856] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000001 [ 192.850677][T12856] R13: 0000000000000000 R14: 00007f450e165fa0 R15: 00007ffeafb8e878 [ 192.850717][T12856] [ 193.160110][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.348827][T12872] netlink: 'syz.5.3443': attribute type 39 has an invalid length. [ 193.364091][T12870] loop7: detected capacity change from 0 to 2048 [ 193.383760][T12870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.401571][T12877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12877 comm=syz.5.3443 [ 193.422032][T12870] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3444: bg 0: block 234: padding at end of block bitmap is not set [ 193.457986][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.494740][T12882] loop7: detected capacity change from 0 to 512 [ 193.502504][T12882] EXT4-fs: Ignoring removed oldalloc option [ 193.510673][T12877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=12877 comm=syz.5.3443 [ 193.525720][ T5652] kworker/u8:62: attempt to access beyond end of device [ 193.525720][ T5652] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 193.539361][ T5652] kworker/u8:62: attempt to access beyond end of device [ 193.539361][ T5652] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 193.570412][ T5652] kworker/u8:62: attempt to access beyond end of device [ 193.570412][ T5652] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 193.585654][T12882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.602559][T12888] loop5: detected capacity change from 0 to 128 [ 193.609202][T12882] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.651766][ T5652] kworker/u8:62: attempt to access beyond end of device [ 193.651766][ T5652] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 193.678439][T12882] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3447: bg 0: block 217: padding at end of block bitmap is not set [ 193.710595][ T5652] kworker/u8:62: attempt to access beyond end of device [ 193.710595][ T5652] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 193.766610][ T5652] kworker/u8:62: attempt to access beyond end of device [ 193.766610][ T5652] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 193.803957][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.980635][T12909] loop6: detected capacity change from 0 to 128 [ 194.041456][T12900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=12900 comm=syz.7.3453 [ 194.128902][T12921] loop7: detected capacity change from 0 to 128 [ 194.157553][T12924] SELinux: syz.5.3461 (12924) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 194.214663][T12927] syz.0.3463: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 194.229512][T12927] CPU: 0 UID: 0 PID: 12927 Comm: syz.0.3463 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 194.229547][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.229602][T12927] Call Trace: [ 194.229610][T12927] [ 194.229618][T12927] __dump_stack+0x1d/0x30 [ 194.229641][T12927] dump_stack_lvl+0xe8/0x140 [ 194.229718][T12927] dump_stack+0x15/0x1b [ 194.229757][T12927] warn_alloc+0x12b/0x1a0 [ 194.229826][T12927] ? update_curr+0x27f/0x320 [ 194.229860][T12927] __vmalloc_node_range_noprof+0x9c/0xe00 [ 194.229894][T12927] ? probe_sched_wakeup+0x85/0xa0 [ 194.229924][T12927] ? ttwu_do_activate+0x1cf/0x210 [ 194.230010][T12927] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 194.230037][T12927] ? __rcu_read_unlock+0x4f/0x70 [ 194.230060][T12927] ? avc_has_perm_noaudit+0x1b1/0x200 [ 194.230092][T12927] ? should_fail_ex+0x30/0x280 [ 194.230188][T12927] ? xskq_create+0x36/0xe0 [ 194.230214][T12927] vmalloc_user_noprof+0x7d/0xb0 [ 194.230272][T12927] ? xskq_create+0x80/0xe0 [ 194.230413][T12927] xskq_create+0x80/0xe0 [ 194.230445][T12927] xsk_init_queue+0x95/0xf0 [ 194.230468][T12927] xsk_setsockopt+0x35c/0x510 [ 194.230490][T12927] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.230512][T12927] __sys_setsockopt+0x184/0x200 [ 194.230550][T12927] __x64_sys_setsockopt+0x64/0x80 [ 194.230655][T12927] x64_sys_call+0x2bd5/0x2fb0 [ 194.230678][T12927] do_syscall_64+0xd2/0x200 [ 194.230696][T12927] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.230724][T12927] ? clear_bhb_loop+0x40/0x90 [ 194.230767][T12927] ? clear_bhb_loop+0x40/0x90 [ 194.230790][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.230813][T12927] RIP: 0033:0x7f027844e929 [ 194.230829][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.230866][T12927] RSP: 002b:00007f0276ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.230885][T12927] RAX: ffffffffffffffda RBX: 00007f0278675fa0 RCX: 00007f027844e929 [ 194.230898][T12927] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 194.230911][T12927] RBP: 00007f02784d0b39 R08: 0000000000000004 R09: 0000000000000000 [ 194.230923][T12927] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.230936][T12927] R13: 0000000000000000 R14: 00007f0278675fa0 R15: 00007ffe88b850a8 [ 194.230956][T12927] [ 194.230979][T12927] Mem-Info: [ 194.472847][T12927] active_anon:4057 inactive_anon:8 isolated_anon:0 [ 194.472847][T12927] active_file:6550 inactive_file:22267 isolated_file:0 [ 194.472847][T12927] unevictable:0 dirty:863 writeback:0 [ 194.472847][T12927] slab_reclaimable:3325 slab_unreclaimable:14751 [ 194.472847][T12927] mapped:31020 shmem:401 pagetables:1305 [ 194.472847][T12927] sec_pagetables:0 bounce:0 [ 194.472847][T12927] kernel_misc_reclaimable:0 [ 194.472847][T12927] free:1807037 free_pcp:16240 free_cma:0 [ 194.518025][T12927] Node 0 active_anon:16112kB inactive_anon:32kB active_file:26200kB inactive_file:89068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124080kB dirty:3568kB writeback:0kB shmem:1604kB writeback_tmp:0kB kernel_stack:4208kB pagetables:5336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.547150][T12927] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.575913][T12927] lowmem_reserve[]: 0 2882 7860 7860 [ 194.581361][T12927] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 194.611703][T12927] lowmem_reserve[]: 0 0 4978 4978 [ 194.616893][T12927] Node 0 Normal free:4265064kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16228kB inactive_anon:32kB active_file:26200kB inactive_file:89068kB unevictable:0kB writepending:3568kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:61120kB local_pcp:46844kB free_cma:0kB [ 194.649227][T12927] lowmem_reserve[]: 0 0 0 0 [ 194.653833][T12927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.666668][T12927] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 194.683078][T12927] Node 0 Normal: 1360*4kB (UME) 716*8kB (UME) 519*16kB (UM) 133*32kB (UM) 68*64kB (ME) 53*128kB (UM) 41*256kB (UME) 16*512kB (ME) 38*1024kB (UME) 81*2048kB (UM) 978*4096kB (UM) = 4264240kB [ 194.702169][T12927] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 194.711579][T12927] 29218 total pagecache pages [ 194.716323][T12927] 9 pages in swap cache [ 194.720551][T12927] Free swap = 124960kB [ 194.724723][T12927] Total swap = 124996kB [ 194.728973][T12927] 2097051 pages RAM [ 194.732854][T12927] 0 pages HighMem/MovableOnly [ 194.737554][T12927] 80813 pages reserved [ 194.839096][T12945] loop5: detected capacity change from 0 to 1024 [ 194.846283][T12945] EXT4-fs: quotafile must be on filesystem root [ 194.975189][T12952] loop6: detected capacity change from 0 to 128 [ 195.018477][T12952] bio_check_eod: 107 callbacks suppressed [ 195.018498][T12952] syz.6.3469: attempt to access beyond end of device [ 195.018498][T12952] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 195.036715][T12958] loop5: detected capacity change from 0 to 128 [ 195.118805][T12956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=12956 comm=syz.0.3471 [ 195.202224][T12975] FAULT_INJECTION: forcing a failure. [ 195.202224][T12975] name failslab, interval 1, probability 0, space 0, times 0 [ 195.215005][T12975] CPU: 1 UID: 0 PID: 12975 Comm: syz.0.3477 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 195.215063][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.215077][T12975] Call Trace: [ 195.215084][T12975] [ 195.215091][T12975] __dump_stack+0x1d/0x30 [ 195.215194][T12975] dump_stack_lvl+0xe8/0x140 [ 195.215221][T12975] dump_stack+0x15/0x1b [ 195.215241][T12975] should_fail_ex+0x265/0x280 [ 195.215273][T12975] should_failslab+0x8c/0xb0 [ 195.215422][T12975] kmem_cache_alloc_noprof+0x50/0x310 [ 195.215492][T12975] ? alloc_empty_file+0x76/0x200 [ 195.215516][T12975] ? fast_dput+0x44/0x2c0 [ 195.215539][T12975] alloc_empty_file+0x76/0x200 [ 195.215571][T12975] dentry_open+0x2d/0x90 [ 195.215602][T12975] ptm_open_peer+0x113/0x180 [ 195.215672][T12975] tty_ioctl+0x3bc/0xb80 [ 195.215735][T12975] ? __pfx_tty_ioctl+0x10/0x10 [ 195.215770][T12975] __se_sys_ioctl+0xce/0x140 [ 195.215879][T12975] __x64_sys_ioctl+0x43/0x50 [ 195.215986][T12975] x64_sys_call+0x19a8/0x2fb0 [ 195.216008][T12975] do_syscall_64+0xd2/0x200 [ 195.216030][T12975] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.216061][T12975] ? clear_bhb_loop+0x40/0x90 [ 195.216084][T12975] ? clear_bhb_loop+0x40/0x90 [ 195.216157][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.216185][T12975] RIP: 0033:0x7f027844e929 [ 195.216258][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.216348][T12975] RSP: 002b:00007f0276ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.216366][T12975] RAX: ffffffffffffffda RBX: 00007f0278675fa0 RCX: 00007f027844e929 [ 195.216379][T12975] RDX: 0000000000000401 RSI: 0000000000005441 RDI: 0000000000000006 [ 195.216393][T12975] RBP: 00007f0276ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.216409][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.216423][T12975] R13: 0000000000000000 R14: 00007f0278675fa0 R15: 00007ffe88b850a8 [ 195.216444][T12975] [ 195.547129][T12987] loop6: detected capacity change from 0 to 128 [ 195.557276][T12990] __nla_validate_parse: 4 callbacks suppressed [ 195.557294][T12990] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3479'. [ 195.601994][T12992] loop7: detected capacity change from 0 to 512 [ 195.620546][T12977] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3479'. [ 195.626105][T12992] EXT4-fs: Ignoring removed oldalloc option [ 195.652012][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 195.652031][ T29] audit: type=1326 audit(1751621389.833:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.0.3487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f027844e929 code=0x0 [ 195.710998][T12992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.742582][T12992] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.765021][T12994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=12994 comm=syz.6.3486 [ 195.809124][T12992] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3485: bg 0: block 217: padding at end of block bitmap is not set [ 195.861517][ T29] audit: type=1326 audit(1751621390.043:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 195.866522][T13017] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3492'. [ 195.886304][ T29] audit: type=1326 audit(1751621390.043:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 195.920348][ T29] audit: type=1326 audit(1751621390.043:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 195.943983][ T29] audit: type=1326 audit(1751621390.043:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 195.968219][ T29] audit: type=1326 audit(1751621390.043:7574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 195.983697][T13019] loop6: detected capacity change from 0 to 1024 [ 195.992070][ T29] audit: type=1326 audit(1751621390.043:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 196.000667][T13019] EXT4-fs: Ignoring removed bh option [ 196.023234][ T29] audit: type=1326 audit(1751621390.043:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 196.040895][T13019] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.050675][ T29] audit: type=1326 audit(1751621390.054:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 196.057085][T13019] EXT4-fs: Ignoring removed bh option [ 196.086756][ T29] audit: type=1326 audit(1751621390.054:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13016 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 196.111246][T13017] loop5: detected capacity change from 0 to 1024 [ 196.119506][T13019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.133286][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.146157][T13017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.175744][T13017] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.193931][T13019] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 196.218851][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.234577][T13026] FAULT_INJECTION: forcing a failure. [ 196.234577][T13026] name failslab, interval 1, probability 0, space 0, times 0 [ 196.247513][T13026] CPU: 0 UID: 0 PID: 13026 Comm: syz.7.3494 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 196.247544][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.247574][T13026] Call Trace: [ 196.247580][T13026] [ 196.247586][T13026] __dump_stack+0x1d/0x30 [ 196.247608][T13026] dump_stack_lvl+0xe8/0x140 [ 196.247631][T13026] dump_stack+0x15/0x1b [ 196.247709][T13026] should_fail_ex+0x265/0x280 [ 196.247754][T13026] ? audit_log_d_path+0x8d/0x150 [ 196.247786][T13026] should_failslab+0x8c/0xb0 [ 196.247809][T13026] __kmalloc_cache_noprof+0x4c/0x320 [ 196.247847][T13026] audit_log_d_path+0x8d/0x150 [ 196.247978][T13026] audit_log_d_path_exe+0x42/0x70 [ 196.248032][T13026] audit_log_task+0x1e9/0x250 [ 196.248065][T13026] audit_seccomp+0x61/0x100 [ 196.248098][T13026] ? __seccomp_filter+0x68c/0x10d0 [ 196.248138][T13026] __seccomp_filter+0x69d/0x10d0 [ 196.248268][T13026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.248303][T13026] ? vfs_write+0x75e/0x8e0 [ 196.248337][T13026] ? __rcu_read_unlock+0x4f/0x70 [ 196.248363][T13026] ? __fget_files+0x184/0x1c0 [ 196.248449][T13026] __secure_computing+0x82/0x150 [ 196.248471][T13026] syscall_trace_enter+0xcf/0x1e0 [ 196.248558][T13026] do_syscall_64+0xac/0x200 [ 196.248575][T13026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.248608][T13026] ? clear_bhb_loop+0x40/0x90 [ 196.248632][T13026] ? clear_bhb_loop+0x40/0x90 [ 196.248697][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.248719][T13026] RIP: 0033:0x7f37858de929 [ 196.248735][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.248815][T13026] RSP: 002b:00007f3783f26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.248838][T13026] RAX: ffffffffffffffda RBX: 00007f3785b06080 RCX: 00007f37858de929 [ 196.248854][T13026] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000006 [ 196.248870][T13026] RBP: 00007f3783f26090 R08: 0000000000000000 R09: 0000000000000000 [ 196.248939][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.248951][T13026] R13: 0000000000000000 R14: 00007f3785b06080 R15: 00007ffceca07618 [ 196.248974][T13026] [ 197.143296][T13049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13049 comm=syz.7.3501 [ 197.175692][T13058] loop7: detected capacity change from 0 to 128 [ 197.204574][T13058] syz.7.3502: attempt to access beyond end of device [ 197.204574][T13058] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 197.388600][T13065] loop6: detected capacity change from 0 to 512 [ 197.424290][T13065] EXT4-fs: Ignoring removed oldalloc option [ 197.482382][T13065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.556157][T13065] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.569964][T13077] FAULT_INJECTION: forcing a failure. [ 197.569964][T13077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.583115][T13077] CPU: 1 UID: 0 PID: 13077 Comm: syz.5.3509 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 197.583149][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.583165][T13077] Call Trace: [ 197.583174][T13077] [ 197.583182][T13077] __dump_stack+0x1d/0x30 [ 197.583307][T13077] dump_stack_lvl+0xe8/0x140 [ 197.583326][T13077] dump_stack+0x15/0x1b [ 197.583394][T13077] should_fail_ex+0x265/0x280 [ 197.583428][T13077] should_fail+0xb/0x20 [ 197.583470][T13077] should_fail_usercopy+0x1a/0x20 [ 197.583508][T13077] strncpy_from_user+0x25/0x230 [ 197.583615][T13077] ? kmem_cache_alloc_noprof+0x186/0x310 [ 197.583648][T13077] ? getname_flags+0x80/0x3b0 [ 197.583672][T13077] getname_flags+0xae/0x3b0 [ 197.583725][T13077] user_path_at+0x28/0x130 [ 197.583833][T13077] do_sys_truncate+0x5c/0x130 [ 197.583853][T13077] __x64_sys_truncate+0x31/0x40 [ 197.583874][T13077] x64_sys_call+0x2920/0x2fb0 [ 197.583902][T13077] do_syscall_64+0xd2/0x200 [ 197.583926][T13077] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.583953][T13077] ? clear_bhb_loop+0x40/0x90 [ 197.583974][T13077] ? clear_bhb_loop+0x40/0x90 [ 197.584019][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.584077][T13077] RIP: 0033:0x7f450df3e929 [ 197.584095][T13077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.584115][T13077] RSP: 002b:00007f450c5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 197.584136][T13077] RAX: ffffffffffffffda RBX: 00007f450e165fa0 RCX: 00007f450df3e929 [ 197.584152][T13077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 197.584167][T13077] RBP: 00007f450c5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.584179][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.584222][T13077] R13: 0000000000000000 R14: 00007f450e165fa0 R15: 00007ffeafb8e878 [ 197.584301][T13077] [ 197.793757][T13065] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3504: bg 0: block 217: padding at end of block bitmap is not set [ 197.821434][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.856444][T13082] FAULT_INJECTION: forcing a failure. [ 197.856444][T13082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.869695][T13082] CPU: 1 UID: 0 PID: 13082 Comm: +}[@ Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 197.869728][T13082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.869744][T13082] Call Trace: [ 197.869753][T13082] [ 197.869762][T13082] __dump_stack+0x1d/0x30 [ 197.869860][T13082] dump_stack_lvl+0xe8/0x140 [ 197.869884][T13082] dump_stack+0x15/0x1b [ 197.869905][T13082] should_fail_ex+0x265/0x280 [ 197.869971][T13082] should_fail+0xb/0x20 [ 197.870072][T13082] should_fail_usercopy+0x1a/0x20 [ 197.870115][T13082] _copy_from_user+0x1c/0xb0 [ 197.870142][T13082] ___sys_sendmsg+0xc1/0x1d0 [ 197.870202][T13082] __sys_sendmmsg+0x178/0x300 [ 197.870308][T13082] __x64_sys_sendmmsg+0x57/0x70 [ 197.870332][T13082] x64_sys_call+0x2f2f/0x2fb0 [ 197.870359][T13082] do_syscall_64+0xd2/0x200 [ 197.870381][T13082] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.870495][T13082] ? clear_bhb_loop+0x40/0x90 [ 197.870522][T13082] ? clear_bhb_loop+0x40/0x90 [ 197.870550][T13082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.870577][T13082] RIP: 0033:0x7f027844e929 [ 197.870658][T13082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.870681][T13082] RSP: 002b:00007f0276ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.870704][T13082] RAX: ffffffffffffffda RBX: 00007f0278675fa0 RCX: 00007f027844e929 [ 197.870720][T13082] RDX: 04000000000001c0 RSI: 00002000000044c0 RDI: 0000000000000003 [ 197.870735][T13082] RBP: 00007f0276ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.870750][T13082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.870765][T13082] R13: 0000000000000000 R14: 00007f0278675fa0 R15: 00007ffe88b850a8 [ 197.870816][T13082] [ 198.143916][T13084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3511'. [ 198.209141][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3517'. [ 198.230661][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3517'. [ 198.254312][T13103] loop6: detected capacity change from 0 to 128 [ 198.379175][T13106] FAULT_INJECTION: forcing a failure. [ 198.379175][T13106] name failslab, interval 1, probability 0, space 0, times 0 [ 198.392003][T13106] CPU: 1 UID: 0 PID: 13106 Comm: syz.5.3519 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 198.392040][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.392056][T13106] Call Trace: [ 198.392065][T13106] [ 198.392075][T13106] __dump_stack+0x1d/0x30 [ 198.392103][T13106] dump_stack_lvl+0xe8/0x140 [ 198.392129][T13106] dump_stack+0x15/0x1b [ 198.392151][T13106] should_fail_ex+0x265/0x280 [ 198.392194][T13106] should_failslab+0x8c/0xb0 [ 198.392225][T13106] kmem_cache_alloc_noprof+0x50/0x310 [ 198.392259][T13106] ? vm_area_dup+0x33/0x2c0 [ 198.392296][T13106] vm_area_dup+0x33/0x2c0 [ 198.392332][T13106] __split_vma+0xe9/0x650 [ 198.392363][T13106] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 198.392408][T13106] vma_modify+0x3f2/0xc80 [ 198.392436][T13106] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 198.392484][T13106] vma_modify_flags+0x101/0x130 [ 198.392522][T13106] mprotect_fixup+0x2cc/0x570 [ 198.392558][T13106] do_mprotect_pkey+0x6d6/0x980 [ 198.392607][T13106] __x64_sys_mprotect+0x48/0x60 [ 198.392639][T13106] x64_sys_call+0x2794/0x2fb0 [ 198.392668][T13106] do_syscall_64+0xd2/0x200 [ 198.392692][T13106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.392724][T13106] ? clear_bhb_loop+0x40/0x90 [ 198.392751][T13106] ? clear_bhb_loop+0x40/0x90 [ 198.392780][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.392808][T13106] RIP: 0033:0x7f450df3e929 [ 198.392829][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.392852][T13106] RSP: 002b:00007f450c5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 198.392877][T13106] RAX: ffffffffffffffda RBX: 00007f450e165fa0 RCX: 00007f450df3e929 [ 198.392892][T13106] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 198.392915][T13106] RBP: 00007f450c5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.392932][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.392948][T13106] R13: 0000000000000000 R14: 00007f450e165fa0 R15: 00007ffeafb8e878 [ 198.392972][T13106] [ 198.722573][T13112] loop5: detected capacity change from 0 to 1024 [ 198.765792][T13112] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 198.943708][T13117] program syz.7.3522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.965463][T13117] FAULT_INJECTION: forcing a failure. [ 198.965463][T13117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.978917][T13117] CPU: 1 UID: 0 PID: 13117 Comm: syz.7.3522 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 198.978954][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.978994][T13117] Call Trace: [ 198.979004][T13117] [ 198.979014][T13117] __dump_stack+0x1d/0x30 [ 198.979042][T13117] dump_stack_lvl+0xe8/0x140 [ 198.979069][T13117] dump_stack+0x15/0x1b [ 198.979091][T13117] should_fail_ex+0x265/0x280 [ 198.979137][T13117] should_fail+0xb/0x20 [ 198.979302][T13117] should_fail_usercopy+0x1a/0x20 [ 198.979392][T13117] _copy_to_user+0x20/0xa0 [ 198.979476][T13117] simple_read_from_buffer+0xb5/0x130 [ 198.979509][T13117] proc_fail_nth_read+0x100/0x140 [ 198.979610][T13117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.979653][T13117] vfs_read+0x1a0/0x6f0 [ 198.979734][T13117] ? __rcu_read_unlock+0x4f/0x70 [ 198.979764][T13117] ? __fget_files+0x184/0x1c0 [ 198.979794][T13117] ksys_read+0xda/0x1a0 [ 198.979838][T13117] __x64_sys_read+0x40/0x50 [ 198.979893][T13117] x64_sys_call+0x2d77/0x2fb0 [ 198.979927][T13117] do_syscall_64+0xd2/0x200 [ 198.979952][T13117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.980018][T13117] ? clear_bhb_loop+0x40/0x90 [ 198.980079][T13117] ? clear_bhb_loop+0x40/0x90 [ 198.980109][T13117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.980137][T13117] RIP: 0033:0x7f37858dd33c [ 198.980158][T13117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 198.980183][T13117] RSP: 002b:00007f3783f47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.980254][T13117] RAX: ffffffffffffffda RBX: 00007f3785b05fa0 RCX: 00007f37858dd33c [ 198.980271][T13117] RDX: 000000000000000f RSI: 00007f3783f470a0 RDI: 0000000000000008 [ 198.980288][T13117] RBP: 00007f3783f47090 R08: 0000000000000000 R09: 0000000000000000 [ 198.980304][T13117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.980365][T13117] R13: 0000000000000000 R14: 00007f3785b05fa0 R15: 00007ffceca07618 [ 198.980390][T13117] [ 199.278713][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.278713][ T5644] loop6: rw=1, sector=145, nr_sectors = 336 limit=128 [ 199.294380][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.294380][ T5644] loop6: rw=1, sector=489, nr_sectors = 8 limit=128 [ 199.346960][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.346960][ T5644] loop6: rw=1, sector=505, nr_sectors = 8 limit=128 [ 199.375813][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.375813][ T5644] loop6: rw=1, sector=521, nr_sectors = 8 limit=128 [ 199.408470][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.408470][ T5644] loop6: rw=1, sector=537, nr_sectors = 8 limit=128 [ 199.430940][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.430940][ T5644] loop6: rw=1, sector=553, nr_sectors = 8 limit=128 [ 199.444516][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.444516][ T5644] loop6: rw=1, sector=569, nr_sectors = 8 limit=128 [ 199.483987][ T5644] kworker/u8:56: attempt to access beyond end of device [ 199.483987][ T5644] loop6: rw=1, sector=585, nr_sectors = 8 limit=128 [ 199.848181][T13102] Set syz1 is full, maxelem 65536 reached [ 199.890806][T13134] loop7: detected capacity change from 0 to 1024 [ 199.925741][T13134] EXT4-fs: Ignoring removed nobh option [ 199.931422][T13134] EXT4-fs: Ignoring removed bh option [ 199.993890][T13134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.061959][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.095512][ T2959] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 200.102969][ T2959] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 200.110434][ T2959] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 200.142067][ T2959] hid-generic 0003:0004:0000.0027: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 200.335749][T13156] loop4: detected capacity change from 0 to 128 [ 200.451521][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 200.451536][ T29] audit: type=1400 audit(1751621394.887:8051): avc: denied { read append } for pid=13157 comm="syz.6.3535" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.481716][ T29] audit: type=1400 audit(1751621394.887:8052): avc: denied { ioctl open } for pid=13157 comm="syz.6.3535" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.495432][T13158] random: crng reseeded on system resumption [ 200.546266][ T29] audit: type=1400 audit(1751621394.961:8053): avc: denied { firmware_load } for pid=5644 comm="kworker/u8:56" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.652086][T13165] loop5: detected capacity change from 0 to 1024 [ 200.736274][T13165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.759383][ T29] audit: type=1400 audit(1751621395.087:8054): avc: denied { sqpoll } for pid=13164 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.821432][T13165] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.843255][T13173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13173 comm=syz.6.3540 [ 200.890789][ T29] audit: type=1326 audit(1751621395.234:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 200.914444][ T29] audit: type=1326 audit(1751621395.234:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 200.938309][ T29] audit: type=1326 audit(1751621395.234:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 200.962008][ T29] audit: type=1326 audit(1751621395.234:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85749de929 code=0x7ffc0000 [ 200.985598][ T29] audit: type=1326 audit(1751621395.234:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85749de963 code=0x7ffc0000 [ 201.027512][T13165] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 4) [ 201.048862][ T29] audit: type=1326 audit(1751621395.402:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.4.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85749dd3df code=0x7ffc0000 [ 201.093712][T13165] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 201.106127][T13165] EXT4-fs (loop5): This should not happen!! Data will be lost [ 201.106127][T13165] [ 201.186998][T13180] FAULT_INJECTION: forcing a failure. [ 201.186998][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.200246][T13180] CPU: 0 UID: 0 PID: 13180 Comm: syz.7.3543 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 201.200283][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.200299][T13180] Call Trace: [ 201.200307][T13180] [ 201.200393][T13180] __dump_stack+0x1d/0x30 [ 201.200421][T13180] dump_stack_lvl+0xe8/0x140 [ 201.200448][T13180] dump_stack+0x15/0x1b [ 201.200535][T13180] should_fail_ex+0x265/0x280 [ 201.200577][T13180] should_fail+0xb/0x20 [ 201.200665][T13180] should_fail_usercopy+0x1a/0x20 [ 201.200759][T13180] _copy_from_iter+0xcf/0xe40 [ 201.200810][T13180] hci_sock_sendmsg+0x36d/0x910 [ 201.200847][T13180] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 201.200916][T13180] __sock_sendmsg+0x145/0x180 [ 201.200950][T13180] sock_write_iter+0x165/0x1b0 [ 201.200986][T13180] ? __pfx_sock_write_iter+0x10/0x10 [ 201.201099][T13180] vfs_write+0x4a0/0x8e0 [ 201.201208][T13180] ksys_write+0xda/0x1a0 [ 201.201252][T13180] __x64_sys_write+0x40/0x50 [ 201.201291][T13180] x64_sys_call+0x2cdd/0x2fb0 [ 201.201320][T13180] do_syscall_64+0xd2/0x200 [ 201.201393][T13180] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.201429][T13180] ? clear_bhb_loop+0x40/0x90 [ 201.201528][T13180] ? clear_bhb_loop+0x40/0x90 [ 201.201555][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.201583][T13180] RIP: 0033:0x7f37858de929 [ 201.201632][T13180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.201718][T13180] RSP: 002b:00007f3783f47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.201743][T13180] RAX: ffffffffffffffda RBX: 00007f3785b05fa0 RCX: 00007f37858de929 [ 201.201760][T13180] RDX: 0000000000000006 RSI: 0000200000001280 RDI: 0000000000000004 [ 201.201776][T13180] RBP: 00007f3783f47090 R08: 0000000000000000 R09: 0000000000000000 [ 201.201792][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.201824][T13180] R13: 0000000000000000 R14: 00007f3785b05fa0 R15: 00007ffceca07618 [ 201.201849][T13180] [ 201.420007][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.505514][T13189] Cannot find del_set index 0 as target [ 201.538182][T13193] netlink: 'syz.6.3548': attribute type 39 has an invalid length. [ 201.587383][T13198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13198 comm=syz.6.3548 [ 201.703166][T13207] loop4: detected capacity change from 0 to 1024 [ 201.742509][T13207] EXT4-fs: Ignoring removed nobh option [ 201.748229][T13207] EXT4-fs: quotafile must be on filesystem root [ 201.782387][T13215] loop6: detected capacity change from 0 to 128 [ 201.897942][T13207] loop4: detected capacity change from 0 to 1024 [ 201.923128][T13207] EXT4-fs: Ignoring removed orlov option [ 201.939989][T13207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.565845][T13223] loop7: detected capacity change from 0 to 8192 [ 202.582975][T11521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.627722][ T5612] bio_check_eod: 18 callbacks suppressed [ 202.627740][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.627740][ T5612] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 202.648556][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.648556][ T5612] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 202.666329][T13226] random: crng reseeded on system resumption [ 202.680371][T13226] Restarting kernel threads ... [ 202.694716][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.694716][ T5612] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 202.708541][T13228] FAULT_INJECTION: forcing a failure. [ 202.708541][T13228] name failslab, interval 1, probability 0, space 0, times 0 [ 202.710263][T13226] Done restarting kernel threads. [ 202.721223][T13228] CPU: 1 UID: 0 PID: 13228 Comm: syz.4.3560 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 202.721259][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.721348][T13228] Call Trace: [ 202.721357][T13228] [ 202.721369][T13228] __dump_stack+0x1d/0x30 [ 202.721399][T13228] dump_stack_lvl+0xe8/0x140 [ 202.721429][T13228] dump_stack+0x15/0x1b [ 202.721492][T13228] should_fail_ex+0x265/0x280 [ 202.721539][T13228] should_failslab+0x8c/0xb0 [ 202.721572][T13228] kmem_cache_alloc_noprof+0x50/0x310 [ 202.721690][T13228] ? alloc_empty_file+0x76/0x200 [ 202.721729][T13228] alloc_empty_file+0x76/0x200 [ 202.721765][T13228] alloc_file_pseudo+0xc6/0x160 [ 202.721805][T13228] sock_alloc_file+0x9c/0x1e0 [ 202.721859][T13228] __sys_socket+0x116/0x180 [ 202.721896][T13228] __x64_sys_socket+0x3f/0x50 [ 202.721933][T13228] x64_sys_call+0x285a/0x2fb0 [ 202.721964][T13228] do_syscall_64+0xd2/0x200 [ 202.722074][T13228] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.722112][T13228] ? clear_bhb_loop+0x40/0x90 [ 202.722143][T13228] ? clear_bhb_loop+0x40/0x90 [ 202.722175][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.722267][T13228] RIP: 0033:0x7f85749e0847 [ 202.722291][T13228] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.722390][T13228] RSP: 002b:00007f8573045fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 202.722416][T13228] RAX: ffffffffffffffda RBX: 00007f8574c05fa0 RCX: 00007f85749e0847 [ 202.722433][T13228] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 202.722450][T13228] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 202.722518][T13228] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 202.722559][T13228] R13: 0000000000000000 R14: 00007f8574c05fa0 R15: 00007ffd7b7694f8 [ 202.722615][T13228] [ 202.722952][T13223] loop7: p1 p3 p4 [ 202.738848][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.738848][ T5612] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 202.936589][T13223] loop7: p1 size 8390912 extends beyond EOD, truncated [ 202.939813][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.939813][ T5612] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 202.959412][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.959412][ T5612] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 202.974086][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.974086][ T5612] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 202.990918][T13223] loop7: p3 size 589824 extends beyond EOD, truncated [ 202.997966][ T5612] kworker/u8:28: attempt to access beyond end of device [ 202.997966][ T5612] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 203.018464][ T5612] kworker/u8:28: attempt to access beyond end of device [ 203.018464][ T5612] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 203.047457][ T5612] kworker/u8:28: attempt to access beyond end of device [ 203.047457][ T5612] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 203.206109][T13240] SELinux: policydb version 0 does not match my version range 15-34 [ 203.214825][T13240] SELinux: failed to load policy [ 203.295856][T13239] loop7: detected capacity change from 0 to 512 [ 203.310387][T13239] EXT4-fs (loop7): orphan cleanup on readonly fs [ 203.317518][T13239] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3563: bg 0: block 248: padding at end of block bitmap is not set [ 203.333421][T13239] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3563: Failed to acquire dquot type 1 [ 203.347940][T13239] EXT4-fs (loop7): 1 truncate cleaned up [ 203.356768][T13239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.415708][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.964184][T13253] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 204.270256][T13265] FAULT_INJECTION: forcing a failure. [ 204.270256][T13265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.283507][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.6.3571 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 204.283594][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.283611][T13265] Call Trace: [ 204.283619][T13265] [ 204.283629][T13265] __dump_stack+0x1d/0x30 [ 204.283657][T13265] dump_stack_lvl+0xe8/0x140 [ 204.283759][T13265] dump_stack+0x15/0x1b [ 204.283776][T13265] should_fail_ex+0x265/0x280 [ 204.283871][T13265] should_fail+0xb/0x20 [ 204.283900][T13265] should_fail_usercopy+0x1a/0x20 [ 204.283946][T13265] _copy_from_user+0x1c/0xb0 [ 204.283993][T13265] ___sys_sendmsg+0xc1/0x1d0 [ 204.284082][T13265] __x64_sys_sendmsg+0xd4/0x160 [ 204.284132][T13265] x64_sys_call+0x2999/0x2fb0 [ 204.284156][T13265] do_syscall_64+0xd2/0x200 [ 204.284175][T13265] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.284202][T13265] ? clear_bhb_loop+0x40/0x90 [ 204.284225][T13265] ? clear_bhb_loop+0x40/0x90 [ 204.284299][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.284321][T13265] RIP: 0033:0x7f132943e929 [ 204.284337][T13265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.284356][T13265] RSP: 002b:00007f1327aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.284439][T13265] RAX: ffffffffffffffda RBX: 00007f1329665fa0 RCX: 00007f132943e929 [ 204.284452][T13265] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 204.284467][T13265] RBP: 00007f1327aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.284480][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.284537][T13265] R13: 0000000000000000 R14: 00007f1329665fa0 R15: 00007ffffc33bf78 [ 204.284557][T13265] [ 204.467559][T13268] FAULT_INJECTION: forcing a failure. [ 204.467559][T13268] name failslab, interval 1, probability 0, space 0, times 0 [ 204.480340][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.7.3572 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 204.480376][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.480455][T13268] Call Trace: [ 204.480463][T13268] [ 204.480473][T13268] __dump_stack+0x1d/0x30 [ 204.480500][T13268] dump_stack_lvl+0xe8/0x140 [ 204.480526][T13268] dump_stack+0x15/0x1b [ 204.480576][T13268] should_fail_ex+0x265/0x280 [ 204.480616][T13268] should_failslab+0x8c/0xb0 [ 204.480646][T13268] kmem_cache_alloc_noprof+0x50/0x310 [ 204.480680][T13268] ? skb_clone+0x151/0x1f0 [ 204.480747][T13268] skb_clone+0x151/0x1f0 [ 204.480849][T13268] dev_queue_xmit_nit+0x146/0x680 [ 204.480889][T13268] dev_hard_start_xmit+0xd3/0x3e0 [ 204.480929][T13268] ? validate_xmit_skb+0x746/0x910 [ 204.481010][T13268] __dev_queue_xmit+0x10b9/0x1fb0 [ 204.481042][T13268] ? __dev_queue_xmit+0x182/0x1fb0 [ 204.481082][T13268] ? __account_obj_stock+0x211/0x350 [ 204.481128][T13268] ? __rcu_read_unlock+0x4f/0x70 [ 204.481160][T13268] ? __skb_clone+0x2a6/0x2d0 [ 204.481199][T13268] __netlink_deliver_tap+0x3c3/0x500 [ 204.481274][T13268] netlink_unicast+0x64c/0x670 [ 204.481348][T13268] netlink_sendmsg+0x58b/0x6b0 [ 204.481373][T13268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.481393][T13268] __sock_sendmsg+0x145/0x180 [ 204.481420][T13268] ____sys_sendmsg+0x31e/0x4e0 [ 204.481501][T13268] ___sys_sendmsg+0x17b/0x1d0 [ 204.481591][T13268] __x64_sys_sendmsg+0xd4/0x160 [ 204.481681][T13268] x64_sys_call+0x2999/0x2fb0 [ 204.481710][T13268] do_syscall_64+0xd2/0x200 [ 204.481771][T13268] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.481806][T13268] ? clear_bhb_loop+0x40/0x90 [ 204.481834][T13268] ? clear_bhb_loop+0x40/0x90 [ 204.481858][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.481883][T13268] RIP: 0033:0x7f37858de929 [ 204.481898][T13268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.481919][T13268] RSP: 002b:00007f3783f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.481940][T13268] RAX: ffffffffffffffda RBX: 00007f3785b05fa0 RCX: 00007f37858de929 [ 204.481960][T13268] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 204.481976][T13268] RBP: 00007f3783f47090 R08: 0000000000000000 R09: 0000000000000000 [ 204.482039][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.482050][T13268] R13: 0000000000000000 R14: 00007f3785b05fa0 R15: 00007ffceca07618 [ 204.482122][T13268] [ 204.752099][T13268] ip6gretap0: entered promiscuous mode [ 204.757823][T13268] vlan2: entered promiscuous mode [ 204.836926][T13274] loop6: detected capacity change from 0 to 2048 [ 204.884579][T13274] EXT4-fs (loop6): failed to initialize system zone (-117) [ 204.886933][T13276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.892209][T13274] EXT4-fs (loop6): mount failed [ 204.914594][T13276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.927518][T13276] bond0 (unregistering): Released all slaves [ 204.938688][T13274] tipc: Started in network mode [ 204.943784][T13274] tipc: Node identity ac14140f, cluster identity 4711 [ 204.954154][T13274] tipc: New replicast peer: 0.0.255.255 [ 204.959782][T13274] tipc: Enabled bearer , priority 10 [ 205.072703][T13281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13281 comm=syz.4.3577 [ 205.164667][T13304] loop6: detected capacity change from 0 to 512 [ 205.172945][T13304] EXT4-fs: Ignoring removed oldalloc option [ 205.179955][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3579'. [ 205.210940][T13304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.223745][T13304] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.237203][T13304] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3584: bg 0: block 217: padding at end of block bitmap is not set [ 205.267369][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.297238][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 205.297256][ T29] audit: type=1400 audit(1751621399.979:8226): avc: denied { getopt } for pid=13317 comm="syz.5.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.361613][ T29] audit: type=1326 audit(1751621400.010:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.7.3588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37858de929 code=0x0 [ 205.487386][T13333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.531758][T13333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13333 comm=syz.5.3592 [ 205.607434][T13347] loop5: detected capacity change from 0 to 1024 [ 205.616475][T13347] EXT4-fs: Ignoring removed nobh option [ 205.625152][T13347] EXT4-fs: Ignoring removed oldalloc option [ 205.650201][T13335] FAULT_INJECTION: forcing a failure. [ 205.650201][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 205.662989][T13335] CPU: 0 UID: 0 PID: 13335 Comm: syz.6.3593 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 205.663083][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.663098][T13335] Call Trace: [ 205.663106][T13335] [ 205.663116][T13335] __dump_stack+0x1d/0x30 [ 205.663143][T13335] dump_stack_lvl+0xe8/0x140 [ 205.663206][T13335] dump_stack+0x15/0x1b [ 205.663222][T13335] should_fail_ex+0x265/0x280 [ 205.663277][T13335] ? call_usermodehelper_setup+0x72/0x190 [ 205.663316][T13335] should_failslab+0x8c/0xb0 [ 205.663344][T13335] ? __pfx_free_modprobe_argv+0x10/0x10 [ 205.663374][T13335] __kmalloc_cache_noprof+0x4c/0x320 [ 205.663409][T13335] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 205.663479][T13335] ? __pfx_free_modprobe_argv+0x10/0x10 [ 205.663550][T13335] call_usermodehelper_setup+0x72/0x190 [ 205.663592][T13335] __request_module+0x264/0x3e0 [ 205.663623][T13335] ? crypto_alg_lookup+0x310/0x360 [ 205.663685][T13335] crypto_alg_mod_lookup+0xa1/0x490 [ 205.663710][T13335] crypto_alloc_tfm_node+0xb5/0x2b0 [ 205.663733][T13335] ? snprintf+0x86/0xb0 [ 205.663805][T13335] crypto_alloc_aead+0x2d/0x40 [ 205.663841][T13335] esp6_init_state+0x229/0xa00 [ 205.663883][T13335] ? __pfx_crypto_larval_destroy+0x10/0x10 [ 205.663915][T13335] ? __pfx_crypto_larval_destroy+0x10/0x10 [ 205.663958][T13335] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 205.663997][T13335] __xfrm_init_state+0x740/0xbb0 [ 205.664034][T13335] xfrm_add_sa+0x1e51/0x2410 [ 205.664123][T13335] xfrm_user_rcv_msg+0x566/0x660 [ 205.664153][T13335] ? __kfree_skb+0x109/0x150 [ 205.664191][T13335] ? nlmon_xmit+0x4f/0x60 [ 205.664217][T13335] ? consume_skb+0x49/0x150 [ 205.664291][T13335] netlink_rcv_skb+0x120/0x220 [ 205.664335][T13335] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 205.664368][T13335] xfrm_netlink_rcv+0x48/0x60 [ 205.664462][T13335] netlink_unicast+0x5a1/0x670 [ 205.664572][T13335] netlink_sendmsg+0x58b/0x6b0 [ 205.664599][T13335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.664626][T13335] __sock_sendmsg+0x145/0x180 [ 205.664730][T13335] ____sys_sendmsg+0x31e/0x4e0 [ 205.664767][T13335] ___sys_sendmsg+0x17b/0x1d0 [ 205.664903][T13335] __x64_sys_sendmsg+0xd4/0x160 [ 205.664954][T13335] x64_sys_call+0x2999/0x2fb0 [ 205.665004][T13335] do_syscall_64+0xd2/0x200 [ 205.665026][T13335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 205.665059][T13335] ? clear_bhb_loop+0x40/0x90 [ 205.665086][T13335] ? clear_bhb_loop+0x40/0x90 [ 205.665184][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.665208][T13335] RIP: 0033:0x7f132943e929 [ 205.665226][T13335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.665317][T13335] RSP: 002b:00007f1327aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.665341][T13335] RAX: ffffffffffffffda RBX: 00007f1329665fa0 RCX: 00007f132943e929 [ 205.665353][T13335] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 000000000000000f [ 205.665366][T13335] RBP: 00007f1327aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 205.665381][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.665395][T13335] R13: 0000000000000000 R14: 00007f1329665fa0 R15: 00007ffffc33bf78 [ 205.665415][T13335] [ 205.675982][T13347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 206.002819][T13363] batadv_slave_1: entered promiscuous mode [ 206.026840][T13357] batadv_slave_1: left promiscuous mode [ 206.038087][ T3394] tipc: Node number set to 2886997007 [ 206.046835][ T29] audit: type=1400 audit(1751621400.756:8228): avc: denied { rename } for pid=13345 comm="syz.5.3594" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.103172][T13369] 9pnet_fd: Insufficient options for proto=fd [ 206.108091][ T29] audit: type=1400 audit(1751621400.798:8229): avc: denied { create } for pid=13345 comm="syz.5.3594" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 206.110364][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 206.129513][ T29] audit: type=1400 audit(1751621400.798:8230): avc: denied { rmdir } for pid=13345 comm="syz.5.3594" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 206.160206][ T29] audit: type=1326 audit(1751621400.819:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 206.183819][ T29] audit: type=1326 audit(1751621400.819:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 206.207378][ T29] audit: type=1326 audit(1751621400.819:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 206.230962][ T29] audit: type=1326 audit(1751621400.819:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 206.254454][ T29] audit: type=1326 audit(1751621400.819:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13368 comm="syz.6.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 206.266220][T13367] loop4: detected capacity change from 0 to 512 [ 206.310165][T13372] loop5: detected capacity change from 0 to 1024 [ 206.318835][T13367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.331836][T13367] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.345088][T13372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.359183][T13379] serio: Serial port ptm0 [ 206.390003][T13372] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 206.421087][T11521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.445083][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.478691][T13384] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3604'. [ 206.493380][T13387] FAULT_INJECTION: forcing a failure. [ 206.493380][T13387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.506750][T13387] CPU: 0 UID: 0 PID: 13387 Comm: syz.4.3602 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 206.506787][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.506803][T13387] Call Trace: [ 206.506810][T13387] [ 206.506820][T13387] __dump_stack+0x1d/0x30 [ 206.506848][T13387] dump_stack_lvl+0xe8/0x140 [ 206.506941][T13387] dump_stack+0x15/0x1b [ 206.506962][T13387] should_fail_ex+0x265/0x280 [ 206.507003][T13387] should_fail+0xb/0x20 [ 206.507039][T13387] should_fail_usercopy+0x1a/0x20 [ 206.507130][T13387] _copy_from_user+0x1c/0xb0 [ 206.507157][T13387] ___sys_sendmsg+0xc1/0x1d0 [ 206.507222][T13387] __x64_sys_sendmsg+0xd4/0x160 [ 206.507310][T13387] x64_sys_call+0x2999/0x2fb0 [ 206.507338][T13387] do_syscall_64+0xd2/0x200 [ 206.507422][T13387] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.507456][T13387] ? clear_bhb_loop+0x40/0x90 [ 206.507484][T13387] ? clear_bhb_loop+0x40/0x90 [ 206.507556][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.507583][T13387] RIP: 0033:0x7f85749de929 [ 206.507602][T13387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.507649][T13387] RSP: 002b:00007f8573047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.507672][T13387] RAX: ffffffffffffffda RBX: 00007f8574c05fa0 RCX: 00007f85749de929 [ 206.507688][T13387] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 206.507702][T13387] RBP: 00007f8573047090 R08: 0000000000000000 R09: 0000000000000000 [ 206.507717][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.507754][T13387] R13: 0000000000000000 R14: 00007f8574c05fa0 R15: 00007ffd7b7694f8 [ 206.507778][T13387] [ 206.724921][T13392] loop5: detected capacity change from 0 to 1024 [ 206.744085][T13392] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.755226][T13392] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 206.771092][T13392] EXT4-fs (loop5): orphan cleanup on readonly fs [ 206.778077][T13392] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.3603: Invalid inode table block 0 in block_group 0 [ 206.795587][T13392] EXT4-fs (loop5): Remounting filesystem read-only [ 206.804138][T13400] loop4: detected capacity change from 0 to 128 [ 206.817300][T13392] EXT4-fs (loop5): 1 truncate cleaned up [ 206.824451][T13392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.996895][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.146589][T13416] SET target dimension over the limit! [ 207.153599][T13414] loop6: detected capacity change from 0 to 2048 [ 207.171404][T13414] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.177957][T13414] EXT4-fs: Ignoring removed i_version option [ 207.192803][T13414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.230976][ T3402] kernel write not supported for file /246/oom_score_adj (pid: 3402 comm: kworker/0:4) [ 207.241449][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.298793][T13427] FAULT_INJECTION: forcing a failure. [ 207.298793][T13427] name failslab, interval 1, probability 0, space 0, times 0 [ 207.311600][T13427] CPU: 1 UID: 0 PID: 13427 Comm: syz.6.3617 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 207.311634][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.311651][T13427] Call Trace: [ 207.311658][T13427] [ 207.311665][T13427] __dump_stack+0x1d/0x30 [ 207.311686][T13427] dump_stack_lvl+0xe8/0x140 [ 207.311710][T13427] dump_stack+0x15/0x1b [ 207.311799][T13427] should_fail_ex+0x265/0x280 [ 207.311836][T13427] should_failslab+0x8c/0xb0 [ 207.311882][T13427] kmem_cache_alloc_node_noprof+0x57/0x320 [ 207.311913][T13427] ? __alloc_skb+0x101/0x320 [ 207.311944][T13427] __alloc_skb+0x101/0x320 [ 207.311974][T13427] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 207.312031][T13427] ? raw_notifier_call_chain+0x190/0x1b0 [ 207.312055][T13427] ? call_netdevice_notifiers_info+0x9c/0x100 [ 207.312086][T13427] unregister_netdevice_many_notify+0xe0c/0x1690 [ 207.312192][T13427] unregister_netdevice_queue+0x1f5/0x220 [ 207.312272][T13427] __tun_detach+0x7db/0xad0 [ 207.312336][T13427] ? __pfx_tun_chr_close+0x10/0x10 [ 207.312363][T13427] tun_chr_close+0x5a/0x100 [ 207.312397][T13427] __fput+0x298/0x650 [ 207.312434][T13427] fput_close_sync+0x6e/0x120 [ 207.312470][T13427] __x64_sys_close+0x56/0xf0 [ 207.312506][T13427] x64_sys_call+0x2747/0x2fb0 [ 207.312535][T13427] do_syscall_64+0xd2/0x200 [ 207.312558][T13427] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.312621][T13427] ? clear_bhb_loop+0x40/0x90 [ 207.312649][T13427] ? clear_bhb_loop+0x40/0x90 [ 207.312693][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.312769][T13427] RIP: 0033:0x7f132943e929 [ 207.312789][T13427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.312812][T13427] RSP: 002b:00007f1327aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 207.312831][T13427] RAX: ffffffffffffffda RBX: 00007f1329665fa0 RCX: 00007f132943e929 [ 207.312843][T13427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 207.312900][T13427] RBP: 00007f1327aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.312917][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.312932][T13427] R13: 0000000000000000 R14: 00007f1329665fa0 R15: 00007ffffc33bf78 [ 207.312961][T13427] [ 207.577458][T13429] loop7: detected capacity change from 0 to 512 [ 207.584157][ T5612] bio_check_eod: 128 callbacks suppressed [ 207.584175][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.584175][ T5612] loop4: rw=1, sector=569, nr_sectors = 8 limit=128 [ 207.584847][T13429] EXT4-fs: Ignoring removed i_version option [ 207.590742][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.590742][ T5612] loop4: rw=1, sector=585, nr_sectors = 8 limit=128 [ 207.604433][T13429] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 207.623393][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.623393][ T5612] loop4: rw=1, sector=601, nr_sectors = 8 limit=128 [ 207.650707][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.650707][ T5612] loop4: rw=1, sector=617, nr_sectors = 8 limit=128 [ 207.656262][T13429] EXT4-fs (loop7): 1 truncate cleaned up [ 207.664376][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.664376][ T5612] loop4: rw=1, sector=633, nr_sectors = 8 limit=128 [ 207.683439][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.683439][ T5612] loop4: rw=1, sector=649, nr_sectors = 8 limit=128 [ 207.685761][T13429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.697245][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.697245][ T5612] loop4: rw=1, sector=665, nr_sectors = 8 limit=128 [ 207.722912][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.722912][ T5612] loop4: rw=1, sector=681, nr_sectors = 8 limit=128 [ 207.736759][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.736759][ T5612] loop4: rw=1, sector=697, nr_sectors = 8 limit=128 [ 207.750366][ T5612] kworker/u8:28: attempt to access beyond end of device [ 207.750366][ T5612] loop4: rw=1, sector=713, nr_sectors = 8 limit=128 [ 207.851841][T13434] loop4: detected capacity change from 0 to 512 [ 207.859125][T13434] EXT4-fs: Ignoring removed oldalloc option [ 207.868471][T13434] EXT4-fs (loop4): failed to initialize system zone (-117) [ 207.876170][T13434] EXT4-fs (loop4): mount failed [ 207.974553][T13446] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 207.984357][T13446] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 208.414332][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.427904][T13453] random: crng reseeded on system resumption [ 208.460639][T13457] loop5: detected capacity change from 0 to 1024 [ 208.479302][T13457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.509511][T13457] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.536189][T13457] SELinux: Context Ü is not valid (left unmapped). [ 208.556958][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.649791][T13477] loop7: detected capacity change from 0 to 1024 [ 208.658725][T13479] loop6: detected capacity change from 0 to 512 [ 208.665616][T13477] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.680893][T13477] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.3634: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.695601][T13477] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3634: Failed to acquire dquot type 0 [ 208.713586][T13477] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3634: Freeing blocks not in datazone - block = 0, count = 4096 [ 208.733591][T13477] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3634: Invalid inode bitmap blk 0 in block_group 0 [ 208.747596][T13485] loop5: detected capacity change from 0 to 512 [ 208.750191][T13479] EXT4-fs (loop6): 1 orphan inode deleted [ 208.754751][ T5644] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.774227][T13477] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 208.775521][T13479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.798435][ T5644] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 0 [ 208.811475][T13477] EXT4-fs (loop7): 1 orphan inode deleted [ 208.817928][T13477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.832117][ T5644] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 1 [ 208.844230][T13485] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3637: bg 0: block 131: padding at end of block bitmap is not set [ 208.861959][T13485] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 208.866685][T13479] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.875720][T13477] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.888651][T13485] EXT4-fs (loop5): 1 truncate cleaned up [ 208.897274][T13485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.951014][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.269467][T13507] loop6: detected capacity change from 0 to 1024 [ 209.309341][T13507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.350243][T13507] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 209.399948][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.512953][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'. [ 209.522773][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'. [ 209.575173][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.621647][T13521] loop6: detected capacity change from 0 to 512 [ 209.680152][T13521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.702299][T13521] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.821787][T11831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.831172][T13543] FAULT_INJECTION: forcing a failure. [ 209.831172][T13543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.844350][T13543] CPU: 1 UID: 0 PID: 13543 Comm: syz.4.3655 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 209.844384][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.844401][T13543] Call Trace: [ 209.844408][T13543] [ 209.844417][T13543] __dump_stack+0x1d/0x30 [ 209.844500][T13543] dump_stack_lvl+0xe8/0x140 [ 209.844525][T13543] dump_stack+0x15/0x1b [ 209.844546][T13543] should_fail_ex+0x265/0x280 [ 209.844583][T13543] should_fail+0xb/0x20 [ 209.844618][T13543] should_fail_usercopy+0x1a/0x20 [ 209.844689][T13543] _copy_from_user+0x1c/0xb0 [ 209.844715][T13543] ___sys_sendmsg+0xc1/0x1d0 [ 209.844776][T13543] __x64_sys_sendmsg+0xd4/0x160 [ 209.844938][T13543] x64_sys_call+0x2999/0x2fb0 [ 209.845006][T13543] do_syscall_64+0xd2/0x200 [ 209.845090][T13543] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.845191][T13543] ? clear_bhb_loop+0x40/0x90 [ 209.845219][T13543] ? clear_bhb_loop+0x40/0x90 [ 209.845252][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.845276][T13543] RIP: 0033:0x7f85749de929 [ 209.845350][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.845435][T13543] RSP: 002b:00007f8573047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.845457][T13543] RAX: ffffffffffffffda RBX: 00007f8574c05fa0 RCX: 00007f85749de929 [ 209.845471][T13543] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 209.845485][T13543] RBP: 00007f8573047090 R08: 0000000000000000 R09: 0000000000000000 [ 209.845500][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.845513][T13543] R13: 0000000000000000 R14: 00007f8574c05fa0 R15: 00007ffd7b7694f8 [ 209.845557][T13543] [ 210.053756][T13551] loop4: detected capacity change from 0 to 128 [ 210.061705][T13548] Cannot find del_set index 0 as target [ 210.062569][T13549] bridge_slave_0: left allmulticast mode [ 210.073001][T13549] bridge_slave_0: left promiscuous mode [ 210.080757][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.101288][T13549] bridge_slave_1: left allmulticast mode [ 210.107059][T13549] bridge_slave_1: left promiscuous mode [ 210.112801][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.120872][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 210.120888][ T29] audit: type=1326 audit(1751621405.039:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.157628][T13549] bond0: (slave bond_slave_0): Releasing backup interface [ 210.169775][T13549] bond0: (slave bond_slave_1): Releasing backup interface [ 210.214099][T13549] team0: Port device team_slave_0 removed [ 210.244891][T13549] team0: Port device team_slave_1 removed [ 210.253123][ T29] audit: type=1326 audit(1751621405.039:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.276062][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.276979][ T29] audit: type=1326 audit(1751621405.039:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.284315][T13549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.308005][ T29] audit: type=1326 audit(1751621405.039:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.338695][ T29] audit: type=1326 audit(1751621405.039:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.362329][ T29] audit: type=1326 audit(1751621405.039:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.385995][ T29] audit: type=1326 audit(1751621405.039:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.409815][ T29] audit: type=1326 audit(1751621405.039:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.433256][ T29] audit: type=1326 audit(1751621405.039:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.456883][ T29] audit: type=1326 audit(1751621405.039:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.6.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132943e929 code=0x7ffc0000 [ 210.482639][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.490147][T13549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.704127][T13568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13568 comm=syz.5.3661 [ 211.261601][T13621] loop5: detected capacity change from 0 to 1024 [ 211.287029][T13621] EXT4-fs: Ignoring removed nobh option [ 211.292735][T13621] EXT4-fs: Ignoring removed bh option [ 211.328319][T13621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.346782][T13621] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 211.362719][T13633] SELinux: policydb version 0 does not match my version range 15-34 [ 211.370911][T13633] SELinux: failed to load policy [ 211.379222][T13621] EXT4-fs (loop5): Remounting filesystem read-only [ 211.399933][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.646134][T13677] loop7: detected capacity change from 0 to 128 [ 211.738847][T13647] loop5: detected capacity change from 0 to 512 [ 211.752395][T13647] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3673: Parent and EA inode have the same ino 15 [ 211.770100][T13647] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.3673: Parent and EA inode have the same ino 15 [ 211.782867][T13647] EXT4-fs (loop5): 1 orphan inode deleted [ 211.789089][T13647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.821013][T13647] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 211.840671][T13647] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.3673: unexpected EA_INODE flag [ 211.948083][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.976034][T13691] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 211.982692][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.990400][T13691] vhci_hcd vhci_hcd.0: Device attached [ 212.011286][T13692] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 212.018026][T13692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.025651][T13692] vhci_hcd vhci_hcd.0: Device attached [ 212.031952][T13690] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(14) [ 212.038672][T13690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.046350][T13690] vhci_hcd vhci_hcd.0: Device attached [ 212.052177][T13690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.062469][T13691] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 212.069565][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.077212][T13691] vhci_hcd vhci_hcd.0: Device attached [ 212.096513][T13692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.107161][T13690] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(25) [ 212.113826][T13690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 212.121624][T13690] vhci_hcd vhci_hcd.0: Device attached [ 212.122015][T13691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.175967][T13702] vhci_hcd: connection closed [ 212.176390][T13693] vhci_hcd: connection closed [ 212.176763][T13694] vhci_hcd: connection closed [ 212.186173][T13700] vhci_hcd: connection closed [ 212.198809][T13711] loop5: detected capacity change from 0 to 128 [ 212.202328][T13698] vhci_hcd: connection closed [ 212.206165][ T5618] vhci_hcd: stop threads [ 212.219006][ T5618] vhci_hcd: release socket [ 212.223545][ T5618] vhci_hcd: disconnect device [ 212.230199][ T6812] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 212.245676][ T5618] vhci_hcd: stop threads [ 212.250026][ T5618] vhci_hcd: release socket [ 212.254492][ T5618] vhci_hcd: disconnect device [ 212.265043][ T5618] vhci_hcd: stop threads [ 212.269395][ T5618] vhci_hcd: release socket [ 212.273991][ T5618] vhci_hcd: disconnect device [ 212.286597][ T5618] vhci_hcd: stop threads [ 212.290926][ T5618] vhci_hcd: release socket [ 212.295410][ T5618] vhci_hcd: disconnect device [ 212.310372][ T5618] vhci_hcd: stop threads [ 212.314674][ T5618] vhci_hcd: release socket [ 212.319162][ T5618] vhci_hcd: disconnect device [ 212.419406][ T5593] bio_check_eod: 78 callbacks suppressed [ 212.419425][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.419425][ T5593] loop7: rw=1, sector=153, nr_sectors = 8 limit=128 [ 212.441529][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.441529][ T5593] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 212.455082][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.455082][ T5593] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 212.470202][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.470202][ T5593] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 212.483901][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.483901][ T5593] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 212.501646][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.501646][ T5593] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 212.519081][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.519081][ T5593] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 212.541148][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.541148][ T5593] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 212.555870][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.555870][ T5593] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 212.597131][ T5593] kworker/u8:11: attempt to access beyond end of device [ 212.597131][ T5593] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 212.635323][T13729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13729 comm=syz.0.3684 [ 212.672220][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 212.682417][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'. [ 212.767594][T13767] loop7: detected capacity change from 0 to 1024 [ 212.775535][T13767] EXT4-fs: Ignoring removed nobh option [ 212.781178][T13767] EXT4-fs: Ignoring removed nobh option [ 212.788843][T13767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.906268][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.001945][T13795] 9pnet_fd: Insufficient options for proto=fd [ 213.030685][T13797] FAULT_INJECTION: forcing a failure. [ 213.030685][T13797] name failslab, interval 1, probability 0, space 0, times 0 [ 213.030719][T13797] CPU: 1 UID: 0 PID: 13797 Comm: syz.0.3699 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 213.030754][T13797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.030772][T13797] Call Trace: [ 213.030780][T13797] [ 213.030790][T13797] __dump_stack+0x1d/0x30 [ 213.030891][T13797] dump_stack_lvl+0xe8/0x140 [ 213.030918][T13797] dump_stack+0x15/0x1b [ 213.030941][T13797] should_fail_ex+0x265/0x280 [ 213.030985][T13797] should_failslab+0x8c/0xb0 [ 213.031080][T13797] __kvmalloc_node_noprof+0x123/0x4e0 [ 213.031117][T13797] ? rhashtable_init_noprof+0x316/0x4f0 [ 213.031229][T13797] rhashtable_init_noprof+0x316/0x4f0 [ 213.031276][T13797] rhltable_init_noprof+0x1d/0x40 [ 213.031436][T13797] nf_tables_newtable+0x522/0xea0 [ 213.031488][T13797] nfnetlink_rcv+0xb99/0x1690 [ 213.031555][T13797] netlink_unicast+0x5a1/0x670 [ 213.031597][T13797] netlink_sendmsg+0x58b/0x6b0 [ 213.031650][T13797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.031670][T13797] __sock_sendmsg+0x145/0x180 [ 213.031700][T13797] ____sys_sendmsg+0x31e/0x4e0 [ 213.031759][T13797] ___sys_sendmsg+0x17b/0x1d0 [ 213.031869][T13797] __x64_sys_sendmsg+0xd4/0x160 [ 213.031985][T13797] x64_sys_call+0x2999/0x2fb0 [ 213.032014][T13797] do_syscall_64+0xd2/0x200 [ 213.032038][T13797] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.032074][T13797] ? clear_bhb_loop+0x40/0x90 [ 213.032149][T13797] ? clear_bhb_loop+0x40/0x90 [ 213.032199][T13797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.032228][T13797] RIP: 0033:0x7f027844e929 [ 213.032319][T13797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.032338][T13797] RSP: 002b:00007f0276ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.032364][T13797] RAX: ffffffffffffffda RBX: 00007f0278675fa0 RCX: 00007f027844e929 [ 213.032381][T13797] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 213.032398][T13797] RBP: 00007f0276ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.032414][T13797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.032462][T13797] R13: 0000000000000000 R14: 00007f0278675fa0 R15: 00007ffe88b850a8 [ 213.032493][T13797] [ 213.032768][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3699'. [ 213.160064][T13810] FAULT_INJECTION: forcing a failure. [ 213.160064][T13810] name failslab, interval 1, probability 0, space 0, times 0 [ 213.160100][T13810] CPU: 0 UID: 0 PID: 13810 Comm: syz.0.3702 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 213.160136][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.160154][T13810] Call Trace: [ 213.160169][T13810] [ 213.160178][T13810] __dump_stack+0x1d/0x30 [ 213.160204][T13810] dump_stack_lvl+0xe8/0x140 [ 213.160241][T13810] dump_stack+0x15/0x1b [ 213.160262][T13810] should_fail_ex+0x265/0x280 [ 213.160302][T13810] ? tipc_nametbl_lookup_group+0x451/0x630 [ 213.160345][T13810] should_failslab+0x8c/0xb0 [ 213.160421][T13810] __kmalloc_cache_noprof+0x4c/0x320 [ 213.160499][T13810] tipc_nametbl_lookup_group+0x451/0x630 [ 213.160541][T13810] __tipc_sendmsg+0x409/0x1b00 [ 213.160594][T13810] ? obj_cgroup_charge_account+0x122/0x1a0 [ 213.160635][T13810] ? __rcu_read_unlock+0x4f/0x70 [ 213.160679][T13810] ? avc_has_perm_noaudit+0x1b1/0x200 [ 213.160785][T13810] ? __rcu_read_unlock+0x4f/0x70 [ 213.160807][T13810] __tipc_sendstream+0xa23/0xb30 [ 213.160836][T13810] ? selinux_socket_sendmsg+0x175/0x1b0 [ 213.160885][T13810] ? _raw_spin_unlock_bh+0x36/0x40 [ 213.160936][T13810] tipc_send_packet+0x65/0x80 [ 213.161019][T13810] ? __pfx_tipc_send_packet+0x10/0x10 [ 213.161052][T13810] __sock_sendmsg+0x145/0x180 [ 213.161087][T13810] ____sys_sendmsg+0x31e/0x4e0 [ 213.161137][T13810] ___sys_sendmsg+0x17b/0x1d0 [ 213.161208][T13810] __x64_sys_sendmsg+0xd4/0x160 [ 213.161289][T13810] x64_sys_call+0x2999/0x2fb0 [ 213.161314][T13810] do_syscall_64+0xd2/0x200 [ 213.161334][T13810] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.161367][T13810] ? clear_bhb_loop+0x40/0x90 [ 213.161449][T13810] ? clear_bhb_loop+0x40/0x90 [ 213.161480][T13810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.161586][T13810] RIP: 0033:0x7f027844e929 [ 213.161607][T13810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.161631][T13810] RSP: 002b:00007f0276ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.161656][T13810] RAX: ffffffffffffffda RBX: 00007f0278675fa0 RCX: 00007f027844e929 [ 213.161675][T13810] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 213.161691][T13810] RBP: 00007f0276ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.161707][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.161723][T13810] R13: 0000000000000000 R14: 00007f0278675fa0 R15: 00007ffe88b850a8 [ 213.161749][T13810] [ 213.205648][T13799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13799 comm=syz.6.3700 [ 213.240048][T13816] SET target dimension over the limit! [ 213.291844][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'. [ 213.403005][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3705'. [ 213.642673][T13826] Cannot find del_set index 0 as target [ 213.902505][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3712'. [ 213.921636][T13840] macvtap0: entered promiscuous mode [ 213.936019][T13840] macvtap0: left promiscuous mode [ 213.969127][T13849] FAULT_INJECTION: forcing a failure. [ 213.969127][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 213.981928][T13849] CPU: 1 UID: 0 PID: 13849 Comm: wg1 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 213.981961][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.982044][T13849] Call Trace: [ 213.982051][T13849] [ 213.982060][T13849] __dump_stack+0x1d/0x30 [ 213.982085][T13849] dump_stack_lvl+0xe8/0x140 [ 213.982133][T13849] dump_stack+0x15/0x1b [ 213.982167][T13849] should_fail_ex+0x265/0x280 [ 213.982201][T13849] should_failslab+0x8c/0xb0 [ 213.982246][T13849] kmem_cache_alloc_noprof+0x50/0x310 [ 213.982276][T13849] ? audit_log_start+0x365/0x6c0 [ 213.982367][T13849] audit_log_start+0x365/0x6c0 [ 213.982408][T13849] audit_seccomp+0x48/0x100 [ 213.982439][T13849] ? __seccomp_filter+0x68c/0x10d0 [ 213.982478][T13849] __seccomp_filter+0x69d/0x10d0 [ 213.982539][T13849] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.982580][T13849] ? vfs_write+0x75e/0x8e0 [ 213.982623][T13849] ? __rcu_read_unlock+0x4f/0x70 [ 213.982647][T13849] ? __fget_files+0x184/0x1c0 [ 213.982674][T13849] __secure_computing+0x82/0x150 [ 213.982700][T13849] syscall_trace_enter+0xcf/0x1e0 [ 213.982811][T13849] do_syscall_64+0xac/0x200 [ 213.982832][T13849] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.982862][T13849] ? clear_bhb_loop+0x40/0x90 [ 213.982886][T13849] ? clear_bhb_loop+0x40/0x90 [ 213.982978][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.983003][T13849] RIP: 0033:0x7f132943e929 [ 213.983021][T13849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.983043][T13849] RSP: 002b:00007f1327a86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 213.983065][T13849] RAX: ffffffffffffffda RBX: 00007f1329666080 RCX: 00007f132943e929 [ 213.983090][T13849] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000009 [ 213.983104][T13849] RBP: 00007f1327a86090 R08: 0000000000000000 R09: 0000000000000000 [ 213.983166][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.983180][T13849] R13: 0000000000000000 R14: 00007f1329666080 R15: 00007ffffc33bf78 [ 213.983272][T13849] [ 214.335728][T13863] loop5: detected capacity change from 0 to 512 [ 214.350563][T13854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13854 comm=syz.7.3715 [ 214.366425][T13863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3716: bg 0: block 131: padding at end of block bitmap is not set [ 214.388382][T13869] netlink: 'syz.4.3717': attribute type 8 has an invalid length. [ 214.400426][T13863] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 214.409004][T13869] loop4: detected capacity change from 0 to 512 [ 214.419013][T13863] EXT4-fs (loop5): 1 truncate cleaned up [ 214.426686][T13863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.444510][T13869] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 214.461387][T13880] loop7: detected capacity change from 0 to 128 [ 214.469345][T13869] EXT4-fs (loop4): mount failed [ 214.799587][T13901] Cannot find add_set index 0 as target [ 214.891563][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 214.891580][ T29] audit: type=1326 audit(1751621410.047:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f450df358e7 code=0x7ffc0000 [ 214.932643][ T29] audit: type=1326 audit(1751621410.068:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f450dedab19 code=0x7ffc0000 [ 214.956579][ T29] audit: type=1326 audit(1751621410.068:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 214.981026][ T29] audit: type=1326 audit(1751621410.078:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f450df358e7 code=0x7ffc0000 [ 215.004536][ T29] audit: type=1326 audit(1751621410.078:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f450dedab19 code=0x7ffc0000 [ 215.028394][ T29] audit: type=1326 audit(1751621410.078:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 215.052128][ T29] audit: type=1326 audit(1751621410.089:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f450df358e7 code=0x7ffc0000 [ 215.075636][ T29] audit: type=1326 audit(1751621410.089:9083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f450dedab19 code=0x7ffc0000 [ 215.099372][ T29] audit: type=1326 audit(1751621410.089:9084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f450df3e929 code=0x7ffc0000 [ 215.123588][ T29] audit: type=1326 audit(1751621410.099:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.5.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f450df358e7 code=0x7ffc0000 [ 215.176081][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.232588][T13918] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 215.308076][T13914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4523 sclass=netlink_route_socket pid=13914 comm=syz.0.3728 [ 215.338521][T13930] team0: No ports can be present during mode change [ 215.681618][T13941] pim6reg1: entered promiscuous mode [ 215.731452][T13944] FAULT_INJECTION: forcing a failure. [ 215.731452][T13944] name failslab, interval 1, probability 0, space 0, times 0 [ 215.744228][T13944] CPU: 0 UID: 0 PID: 13944 Comm: syz.4.3735 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 215.744264][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.744281][T13944] Call Trace: [ 215.744289][T13944] [ 215.744297][T13944] __dump_stack+0x1d/0x30 [ 215.744369][T13944] dump_stack_lvl+0xe8/0x140 [ 215.744393][T13944] dump_stack+0x15/0x1b [ 215.744410][T13944] should_fail_ex+0x265/0x280 [ 215.744442][T13944] ? audit_log_d_path+0x8d/0x150 [ 215.744508][T13944] should_failslab+0x8c/0xb0 [ 215.744532][T13944] __kmalloc_cache_noprof+0x4c/0x320 [ 215.744569][T13944] audit_log_d_path+0x8d/0x150 [ 215.744612][T13944] audit_log_d_path_exe+0x42/0x70 [ 215.744656][T13944] audit_log_task+0x1e9/0x250 [ 215.744689][T13944] audit_seccomp+0x61/0x100 [ 215.744725][T13944] ? __seccomp_filter+0x68c/0x10d0 [ 215.744749][T13944] __seccomp_filter+0x69d/0x10d0 [ 215.744783][T13944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.744829][T13944] ? vfs_write+0x75e/0x8e0 [ 215.744868][T13944] ? __rcu_read_unlock+0x4f/0x70 [ 215.744949][T13944] ? __fget_files+0x184/0x1c0 [ 215.744975][T13944] __secure_computing+0x82/0x150 [ 215.745004][T13944] syscall_trace_enter+0xcf/0x1e0 [ 215.745086][T13944] do_syscall_64+0xac/0x200 [ 215.745107][T13944] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.745141][T13944] ? clear_bhb_loop+0x40/0x90 [ 215.745168][T13944] ? clear_bhb_loop+0x40/0x90 [ 215.745275][T13944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.745302][T13944] RIP: 0033:0x7f85749de929 [ 215.745318][T13944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.745337][T13944] RSP: 002b:00007f8573047038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cd [ 215.745356][T13944] RAX: ffffffffffffffda RBX: 00007f8574c05fa0 RCX: 00007f85749de929 [ 215.745369][T13944] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 215.745445][T13944] RBP: 00007f8573047090 R08: 0000000000000000 R09: 0000000000000000 [ 215.745461][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.745506][T13944] R13: 0000000000000000 R14: 00007f8574c05fa0 R15: 00007ffd7b7694f8 [ 215.745526][T13944] [ 216.046656][T13953] loop4: detected capacity change from 0 to 1024 [ 216.085091][T13953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.124224][T13965] loop7: detected capacity change from 0 to 128 [ 216.189692][T13953] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 216.225091][T13970] loop5: detected capacity change from 0 to 1024 [ 216.241828][T11521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.298554][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 216.310034][T13970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.355641][T13980] loop6: detected capacity change from 0 to 512 [ 216.376826][T13980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.404586][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3744'. [ 216.418927][T13970] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 216.429944][T13980] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.451573][T13994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3746'. [ 216.481135][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.491765][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.523844][ T6155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.620171][T14020] loop4: detected capacity change from 0 to 128 [ 216.723562][T14036] loop4: detected capacity change from 0 to 1024 [ 216.736419][T14036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.841224][T14036] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 216.862409][T11521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.932714][T14053] xt_CT: No such helper "syz1" [ 217.014071][ T6812] usb 11-1: enqueue for inactive port 0 [ 217.020119][ T6812] usb 11-1: enqueue for inactive port 0 [ 217.118212][T14081] loop7: detected capacity change from 0 to 1024 [ 217.134667][ T6812] vhci_hcd: vhci_device speed not set [ 217.151716][T14081] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 217.238356][T14096] loop6: detected capacity change from 0 to 128 [ 217.248738][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x1 [ 217.256255][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.263785][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.271238][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.278715][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.286132][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x2 [ 217.293634][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.301114][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.308844][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.316356][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.323772][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.331271][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.338722][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.346183][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x2 [ 217.353599][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.361073][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.368508][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.376086][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.383526][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.390979][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.398585][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.406166][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.413607][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.421030][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.428817][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.436661][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.444127][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.451581][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.459022][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.466492][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.474112][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.481662][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.489404][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.497048][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.504589][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 217.514307][ T1035] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 218.009013][T14131] Cannot find del_set index 0 as target [ 218.019178][T14133] loop7: detected capacity change from 0 to 1024 [ 218.029384][ T5612] bio_check_eod: 251 callbacks suppressed [ 218.029401][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.029401][ T5612] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 218.058572][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.058572][ T5612] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 218.073453][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.073453][ T5612] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 218.085003][T14139] loop4: detected capacity change from 0 to 1024 [ 218.088695][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.088695][ T5612] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 218.109090][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.109090][ T5612] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 218.122892][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.122892][ T5612] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 218.139358][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.139358][ T5612] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 218.153036][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.153036][ T5612] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 218.168651][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.168651][ T5612] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 218.182539][ T5612] kworker/u8:28: attempt to access beyond end of device [ 218.182539][ T5612] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 218.213031][T14144] loop6: detected capacity change from 0 to 1024 [ 218.234857][T14133] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3778: Allocating blocks 497-513 which overlap fs metadata [ 218.309411][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 218.331359][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3782'. [ 218.353499][T14144] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 218.852799][T14139] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 218.965493][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 218.982137][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 219.056219][T14205] loop6: detected capacity change from 0 to 2048 [ 219.063584][T14205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.083965][T14205] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3791: bg 0: block 2: invalid block bitmap [ 219.099242][T14205] EXT4-fs (loop6): Remounting filesystem read-only [ 219.185770][T14158] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt. [ 219.217877][ T5612] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.301381][ T5612] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.393825][T14229] loop4: detected capacity change from 0 to 512 [ 219.412305][ T5612] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.432863][T14229] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.463708][T14229] EXT4-fs: Cannot change journaled quota options when quota turned on [ 219.482663][T14229] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3798: iget: bad i_size value: 2533274857506816 [ 219.499001][ T5612] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.616467][ T5612] bridge_slave_1: left allmulticast mode [ 219.622200][ T5612] bridge_slave_1: left promiscuous mode [ 219.628042][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.647634][ T5612] bridge_slave_0: left allmulticast mode [ 219.653383][ T5612] bridge_slave_0: left promiscuous mode [ 219.659193][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.757968][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 219.757983][ T29] audit: type=1326 audit(1751621415.159:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.3799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85749de929 code=0x0 [ 219.834072][ T5612] hsr_slave_0: left promiscuous mode [ 219.839826][ T5612] hsr_slave_1: left promiscuous mode [ 219.847454][ T5612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.854979][ T5612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.868809][ T29] audit: type=1400 audit(1751621415.264:9457): avc: denied { create } for pid=14255 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.888621][ T29] audit: type=1400 audit(1751621415.264:9458): avc: denied { setopt } for pid=14255 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.910148][ T5612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.917741][ T5612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.928317][ T29] audit: type=1400 audit(1751621415.327:9459): avc: denied { unmount } for pid=6155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 219.948547][ T29] audit: type=1400 audit(1751621415.327:9460): avc: denied { read } for pid=14277 comm="syz.0.3800" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.972287][ T29] audit: type=1400 audit(1751621415.327:9461): avc: denied { open } for pid=14277 comm="syz.0.3800" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.004968][ T5612] veth1_macvtap: left promiscuous mode [ 220.019668][ T5612] veth0_macvtap: left promiscuous mode [ 220.026329][ T5612] veth1_vlan: left promiscuous mode [ 220.033535][ T5612] veth0_vlan: left promiscuous mode [ 220.039098][ T29] audit: type=1400 audit(1751621415.411:9462): avc: denied { create } for pid=14280 comm="syz.5.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.058799][ T29] audit: type=1400 audit(1751621415.411:9463): avc: denied { getopt } for pid=14280 comm="syz.5.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.078585][ T29] audit: type=1400 audit(1751621415.411:9464): avc: denied { create } for pid=14280 comm="syz.5.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.098690][ T29] audit: type=1400 audit(1751621415.411:9465): avc: denied { mount } for pid=14280 comm="syz.5.3801" name="/" dev="configfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 220.123996][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3804'. [ 220.168533][T14291] loop6: detected capacity change from 0 to 764 [ 220.195318][ T5612] team0 (unregistering): Port device team_slave_1 removed [ 220.205336][ T5612] team0 (unregistering): Port device team_slave_0 removed [ 220.245299][T14288] FAULT_INJECTION: forcing a failure. [ 220.245299][T14288] name failslab, interval 1, probability 0, space 0, times 0 [ 220.258114][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.0.3804 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 220.258143][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.258237][T14288] Call Trace: [ 220.258245][T14288] [ 220.258254][T14288] __dump_stack+0x1d/0x30 [ 220.258283][T14288] dump_stack_lvl+0xe8/0x140 [ 220.258369][T14288] dump_stack+0x15/0x1b [ 220.258391][T14288] should_fail_ex+0x265/0x280 [ 220.258423][T14288] should_failslab+0x8c/0xb0 [ 220.258447][T14288] kmem_cache_alloc_noprof+0x50/0x310 [ 220.258520][T14288] ? getname_kernel+0x3c/0x1f0 [ 220.258552][T14288] getname_kernel+0x3c/0x1f0 [ 220.258582][T14288] do_file_open_root+0xc6/0x3f0 [ 220.258636][T14288] file_open_root+0xfd/0x130 [ 220.258674][T14288] kernel_read_file_from_path_initns+0xda/0x170 [ 220.258766][T14288] _request_firmware+0x958/0xbb0 [ 220.258808][T14288] request_firmware+0x36/0x50 [ 220.258869][T14288] reg_reload_regdb+0x57/0x250 [ 220.258906][T14288] nl80211_reload_regdb+0xe/0x20 [ 220.258943][T14288] genl_family_rcv_msg_doit+0x143/0x1b0 [ 220.259060][T14288] genl_rcv_msg+0x422/0x460 [ 220.259134][T14288] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 220.259163][T14288] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 220.259208][T14288] ? __pfx_nl80211_post_doit+0x10/0x10 [ 220.259318][T14288] netlink_rcv_skb+0x120/0x220 [ 220.259356][T14288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.259391][T14288] genl_rcv+0x28/0x40 [ 220.259412][T14288] netlink_unicast+0x5a1/0x670 [ 220.259524][T14288] netlink_sendmsg+0x58b/0x6b0 [ 220.259551][T14288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.259571][T14288] __sock_sendmsg+0x145/0x180 [ 220.259596][T14288] ____sys_sendmsg+0x31e/0x4e0 [ 220.259643][T14288] ___sys_sendmsg+0x17b/0x1d0 [ 220.259762][T14288] __x64_sys_sendmsg+0xd4/0x160 [ 220.259804][T14288] x64_sys_call+0x2999/0x2fb0 [ 220.259896][T14288] do_syscall_64+0xd2/0x200 [ 220.260034][T14288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.260068][T14288] ? clear_bhb_loop+0x40/0x90 [ 220.260105][T14288] ? clear_bhb_loop+0x40/0x90 [ 220.260132][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.260198][T14288] RIP: 0033:0x7f027844e929 [ 220.260217][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.260242][T14288] RSP: 002b:00007f0276ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.260267][T14288] RAX: ffffffffffffffda RBX: 00007f0278675fa0 RCX: 00007f027844e929 [ 220.260322][T14288] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000005 [ 220.260336][T14288] RBP: 00007f0276ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.260351][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.260367][T14288] R13: 0000000000000000 R14: 00007f0278675fa0 R15: 00007ffe88b850a8 [ 220.260392][T14288] [ 220.306025][T14234] chnl_net:caif_netlink_parms(): no params data found [ 220.339946][T14288] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -12 [ 220.439305][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3806'. [ 220.570990][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3806'. [ 220.616446][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.623860][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.632705][T14234] bridge_slave_0: entered allmulticast mode [ 220.639440][T14234] bridge_slave_0: entered promiscuous mode [ 220.646630][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.653988][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.661655][T14234] bridge_slave_1: entered allmulticast mode [ 220.668497][T14234] bridge_slave_1: entered promiscuous mode [ 220.698883][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.716186][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3810'. [ 220.720855][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.739932][ T5664] ================================================================== [ 220.748066][ T5664] BUG: KCSAN: data-race in copy_process / free_pid [ 220.754601][ T5664] [ 220.756958][ T5664] read-write to 0xffffffff86860860 of 4 bytes by task 14485 on cpu 1: [ 220.765121][ T5664] free_pid+0x77/0x180 [ 220.769204][ T5664] free_pids+0x7a/0xb0 [ 220.773289][ T5664] release_task+0x9a9/0xb60 [ 220.777817][ T5664] do_exit+0xd81/0x1590 [ 220.781999][ T5664] call_usermodehelper_exec_async+0x247/0x250 [ 220.788096][ T5664] ret_from_fork+0xda/0x150 [ 220.792616][ T5664] ret_from_fork_asm+0x1a/0x30 [ 220.797589][ T5664] [ 220.799927][ T5664] read to 0xffffffff86860860 of 4 bytes by task 5664 on cpu 0: [ 220.807489][ T5664] copy_process+0x148f/0x1fe0 [ 220.812195][ T5664] kernel_clone+0x16c/0x5b0 [ 220.816724][ T5664] user_mode_thread+0x7d/0xb0 [ 220.821426][ T5664] call_usermodehelper_exec_work+0x41/0x160 [ 220.827352][ T5664] process_scheduled_works+0x4cb/0x9d0 [ 220.832866][ T5664] worker_thread+0x582/0x770 [ 220.837479][ T5664] kthread+0x489/0x510 [ 220.841565][ T5664] ret_from_fork+0xda/0x150 [ 220.846085][ T5664] ret_from_fork_asm+0x1a/0x30 [ 220.850880][ T5664] [ 220.853223][ T5664] value changed: 0x80000100 -> 0x800000ff [ 220.858948][ T5664] [ 220.861278][ T5664] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.867449][ T5664] CPU: 0 UID: 0 PID: 5664 Comm: kworker/u8:66 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 220.880138][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.890210][ T5664] Workqueue: events_unbound call_usermodehelper_exec_work [ 220.897361][ T5664] ================================================================== [ 221.080315][ T5664] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.167074][ T5664] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.224380][ T5664] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.291386][ T5664] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.452056][ T5664] bond0 (unregistering): Released all slaves [ 221.508429][ T5664] tipc: Disabling bearer [ 221.513495][ T5664] tipc: Left network mode [ 221.520095][ T5664] hsr_slave_0: left promiscuous mode [ 221.525709][ T5664] hsr_slave_1: left promiscuous mode [ 221.534071][ T5664] veth1_macvtap: left promiscuous mode [ 221.539605][ T5664] veth0_macvtap: left promiscuous mode [ 221.545208][ T5664] veth1_vlan: left promiscuous mode [ 221.550579][ T5664] veth0_vlan: left promiscuous mode [ 221.930357][ T5664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.976769][ T5664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.043013][ T5664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.100853][ T5664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.151881][ T5664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.186312][ T5664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.234076][ T5664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.281456][ T5664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.359173][ T5664] bridge_slave_1: left allmulticast mode [ 222.364950][ T5664] bridge_slave_1: left promiscuous mode [ 222.370707][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.378639][ T5664] bridge_slave_0: left allmulticast mode [ 222.384392][ T5664] bridge_slave_0: left promiscuous mode [ 222.390177][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.399284][ T5664] bridge_slave_1: left allmulticast mode [ 222.405061][ T5664] bridge_slave_1: left promiscuous mode [ 222.410783][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.418784][ T5664] bridge_slave_0: left allmulticast mode [ 222.424513][ T5664] bridge_slave_0: left promiscuous mode [ 222.430253][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.440117][ T5664] bridge_slave_1: left allmulticast mode [ 222.445808][ T5664] bridge_slave_1: left promiscuous mode [ 222.451631][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.459207][ T5664] bridge_slave_0: left allmulticast mode [ 222.464906][ T5664] bridge_slave_0: left promiscuous mode [ 222.470691][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.671888][ T5664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.681734][ T5664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.691464][ T5664] bond0 (unregistering): Released all slaves [ 222.947633][ T5664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.957735][ T5664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.967144][ T5664] bond0 (unregistering): Released all slaves [ 223.024021][ T5664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.033649][ T5664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.043131][ T5664] bond0 (unregistering): Released all slaves [ 223.148744][ T5664] hsr_slave_0: left promiscuous mode [ 223.154445][ T5664] hsr_slave_1: left promiscuous mode [ 223.160123][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.167638][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.175243][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.182651][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.191644][ T5664] hsr_slave_0: left promiscuous mode [ 223.197434][ T5664] hsr_slave_1: left promiscuous mode [ 223.203188][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.210668][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.218338][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.225768][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.238161][ T5664] veth1_macvtap: left promiscuous mode [ 223.243696][ T5664] veth0_macvtap: left promiscuous mode [ 223.249268][ T5664] veth1_vlan: left promiscuous mode [ 223.254576][ T5664] veth0_vlan: left promiscuous mode [ 223.260334][ T5664] veth1_macvtap: left promiscuous mode [ 223.265844][ T5664] veth0_macvtap: left promiscuous mode [ 223.271432][ T5664] veth1_vlan: left promiscuous mode [ 223.276711][ T5664] veth0_vlan: left promiscuous mode [ 223.371427][ T5664] team0 (unregistering): Port device team_slave_1 removed [ 223.380814][ T5664] team0 (unregistering): Port device team_slave_0 removed [ 223.434861][ T5664] team0 (unregistering): Port device team_slave_1 removed [ 223.444691][ T5664] team0 (unregistering): Port device team_slave_0 removed [ 224.082595][ T5664] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.148894][ T5664] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.234305][ T5664] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.281791][ T5664] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.340947][ T5664] bridge_slave_1: left allmulticast mode [ 224.346660][ T5664] bridge_slave_1: left promiscuous mode [ 224.352356][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.360188][ T5664] bridge_slave_0: left allmulticast mode [ 224.366000][ T5664] bridge_slave_0: left promiscuous mode [ 224.371848][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.500554][ T5664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.510218][ T5664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.519653][ T5664] bond0 (unregistering): Released all slaves [ 224.568617][ T5664] hsr_slave_0: left promiscuous mode [ 224.574237][ T5664] hsr_slave_1: left promiscuous mode [ 224.579898][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.587309][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.594795][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.602213][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.612920][ T5664] veth1_macvtap: left promiscuous mode [ 224.618496][ T5664] veth0_macvtap: left promiscuous mode [ 224.624041][ T5664] veth1_vlan: left promiscuous mode [ 224.629281][ T5664] veth0_vlan: left promiscuous mode [ 224.689247][ T5664] team0 (unregistering): Port device team_slave_1 removed [ 224.700530][ T5664] team0 (unregistering): Port device team_slave_0 removed