last executing test programs: 1m25.711649233s ago: executing program 1 (id=1511): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x3e4, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2cc, 0x1, [@m_csum={0xd8, 0x19, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8000, 0xffffffffffffffff, 0xb8b8, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x4, 0x6, 0x1000, 0x101}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0xfffffffffffffff9, 0x9, 0x80000001}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x274bcf77, 0x5, 0x6, 0x8, 0x101}, 0x7d}}]}, {0x39, 0x6, "99599a989bd1b1fba50a4a29ffa7c682e6cfa07125a1335f6cc53bfcbdd0cec4b739e8072ad58b5153a6189bec7e227f7f9f2cb5c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x38, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb0e}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x104, 0x1, [@m_nat={0x100, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x10000001}}]}, {0x35, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f62768494"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m25.667037478s ago: executing program 1 (id=1522): r0 = creat(0x0, 0x75) r1 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='-/@@%@/%/%-\x00', r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYRES64=r2], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x3) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x66, 0x0, 0x0, 0x132, 0x3}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x7101}) syz_io_uring_setup(0x4b73, &(0x7f0000000000)={0x0, 0x3e1d, 0x4, 0x2, 0x23d}, &(0x7f0000000080), &(0x7f00000001c0)) socket(0x400000000010, 0x2, 0x1000) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000000)=0x6ab7, 0x4) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r10], &(0x7f0000000100)='GPL\x00', 0x67d2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCSSOFTCAR(r10, 0x5453, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') 1m25.630907771s ago: executing program 1 (id=1513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x128, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x4}, {0x110, 0x1, [@m_nat={0x10c, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x10000001}}]}, {0x41, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m25.610499553s ago: executing program 1 (id=1515): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x15, 0x8, "d5359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c0900010000000000ff0e03000000007639c2eb4b78c620e677df701905b1aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$cgroup_int(r0, 0x0, 0x0) 1m25.486313776s ago: executing program 1 (id=1518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="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", 0x281}], 0x1}}], 0x2, 0x8008800) 1m25.001411744s ago: executing program 1 (id=1524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1m24.986793555s ago: executing program 32 (id=1524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.184786381s ago: executing program 2 (id=3407): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x400011, 0x2, 0x3}, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0900006d617463680000002c00028014000300010007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c0008000103000014001400000045250fc0006700000529907800000000ffffffff55bec3267b3436ab6b1f05cc90158a3a0e95d2c5c5ee95724f672f120c7ee6ae2b214d48b2b36c76e1f422f6fe64b086ddb02e154c399939ec07c10fcba3fa2da13e1f4ab32d36796113e6977e03e68812b7bd12a9ba3278f2dd359e2d32c466b291a2888bce2ffc3de7cd25dca8169851baa1b6a5d63db2995cf0872711e9dc4a876685b2e2f020be745083f69fb2fcb50d89c6999f239ee7e4531c9e1f3e3af3cb83172760eea103a00a0beeddce11e817cb05a5a8eb4b6410473e25ce2635bf4153948c79468ba38a5fc20f8197e030419d43b77964f8c98bcd6c0c41373c1865750d3496641c8616dccfcb53e4e8e2847f542391bffaecac7de756aa4074353cfd210b77d0ffa71fa8917caf51b475e50db5aa258b33ad539a161990efffb37e1d52b8c7d00ca4660ff12b137e69ccc98640ab7e9686554e5f91ccadc86b7a6d310554ec5969967ea190e238e13945f18359fa813c54cf5e5ff382f8435b6c23eb76b7f781dc8f85dd4e95ae0f0fd63ec969e6bc4e7fddbf0f0071d26e5c19d4e7c3b87a6792d775d1d01ff00fed774039829aa74d23f64ff62646c3c445e666a9e007b874e04388ee9a028fac5a6923770432a1beff148e40a8a3ee20f5573c791c811e62f869b304362f0a273b58edad8652e135b1e71b355ca539d3c2253ab28c8bdf614cfe97ad1ed4501cceb80b288c7c5e3e88256ad7326c090088b129c6128a23b725e11c6677e81b0f72599181fdb187091211a1d050820b6e2e3c06a98d240484dc5e0711fe36a0e898fc960ac4cd5affefc7f58bb7800eabc76f45b46ba3d0680c23ee25ff85ac4f0ffcb0e94a5c5e53bdb86b259468550836f80818ff8e312da773d42bef080c3352f13ee9b0644d69d143be97e9cd7c5c3a3124877c1d5232307300b50e6422594c0c48ea34fd51b4549a98849d731a1db12b968aedb0d021ae36dce774292d4cd7fda378529a393167bd79261cccc7f55feb0cab03d3619dfce6e1b31c51ba8772aff9f31ef3bed0fc54593b2c4719e771c3bf7260694301f326379f2bfb583688d0af014c2baf7d493152b44b3d138b0f9a3b234fec6aff41283076c60f3b1be9a07d2e6bbb766e1b35295b8c450f51ceb3ac260d76f813ac9c7064e0d119eb9f70da49600788fd4d672c731d3f6ddd00fe71a33f5b31768506a4c4570b65f78d4bee99d8fc62ca55b9a0d67baac620854cfad1f4c22c5dfadc60fda144b9097d1c05bec3241964dbfa0dea4480f80be7d00e91a278355a0e3852b0c2fd4be52904b76432fbb4d9887fd39182bc2d8ed3ba3e4d3e2056ba4ad33c2867d5555462a2aef0846fec24f00d95d0696d6d88b8fbe91a304a1c15c0ec9ac7bccadbd6cc9eb47591c022e17bbbf6e225efc016a04796bdab995b50a771262a5b1d57065fb1fc410c08b666f7421c5de5efc09d1cef798f0805a08fc1d220ecb6dbea6df432124055f0ab6a14d068d819b430307325199aaf891d6fd8cf3a608a966c4aaabb613379eeabaafac7d1cc091aa5dc10da2366d53f69d5fbe4144b486d5b3c950c26fd209d99b99cf0ded631610beda9b6110124fbb488ac721f18be97ba387916cdf7837ccb3f6f9badb17fadb2e84683c593e2c7a8f6c3e20c0c20e56891087ddbd25efc77242103c40a31d1a812546eb922080363c0fc77a4d2172f0b3d8a83a388aa9c731473b6f8d090bcdd8b4c6bbbae7eb59c9497c43885d975a0bf79f7e5997f7db3ee597f83849538261608f0253092e4f252557b71044648490c22e831cbbafc4dafeb3ff6c39e753b0831f53beaf1dd29659dd4299187133b989bc068cc2a4236074d3af83cb97dd1495801de1614b78ea750f5848529d43ca3e06c18388d6e591ac4310b67a8a47edd0e692ec29cbcf09fd03166fdc861502dadbfdb6f9285bdb3064e9860895bf96bd6d12f76ea8a9ddbe1cc67a5e56c7cf48e26e57cbc9b6acfbed6cdab5dcde888ec263cdb6d7b8f77dcdf008d829998515820cd269a6bc5f65df056294c8dc2698f79211a2e8f72fd2bc5c71b1596c8365e4207921f6bceb8799d4d207ddd4f90898455984ad7fa6ef0d3b49a144ac65aa851297ed2981a778fa5af7d06d181878f87888712b4d7c126ac2f4681e11d4f1bbf55582b47bd7bd1280df3c074d61cc6603670eb11b7978327685d98f3ca9dabe0e6c059de01197233a492fff59bf39484da98164658f6f3e802b50694549ee80d7670d636980a6247d7aa75e9eadcea7729c4d1e8bf008bea5c6684ffaadd8f0baa3bca5223e8e1ed8f4cec89ff6d1d264fe47432147f85263a4f3b73c9ee9ee912856795f5b1ab4aa4815a169cf01aa7c09505d90a429ff8375742c91893444d59b6ca1925893faeac09a72776a92c7b86a2660341c0db723b9e97a8c95876b67741b8c7490eed0a9cf97c218471ed6f432c8ed3f37b2a99b60cb83715c9a7577bd8141517690a9e853347c7320dde6de50c457b8fde599bb2cf626f6289056b5ae68389d9f9c5ebb660172af472bed4e25d5b8f07baf276fb2422ccb160a06ae9e00d5f252a4d7bf7f91a767f1609668e6476f67299deabb87d089fb415ea791e5916ca35b176776c97ed2dab5c8e0d3e0955c989ed86d34b1ef2bef60dc51b42e3c01e98aa4082adfadcbf07dcd3caf59c18f4b8c0bc0b7e176027219b2d85f37926aa3961b97e62f3cc0cbd22ef7cff273df53d46a730d0ce5596b97d5c33df4e035ff3cf74ab60dffcc0a727fc7310f672bab8f6bba6ab756bf855236907ea192823b6470f74d2c4fa9013a02aa52c61cc55a22bdb55af8165f9161298d2ecffc8f8a3b152f74513daa1c001efe433e954a38df3490a2b07cddf198a2eab947f780a71ecceb0c4fe5d24d8f10226858876f68604bf8d06ccf7e06052b5c66702c82a47815840977802725c3be4f60233b807cd16fe01150c43e1d1276833e461fd916d013f8d28be4f8a27449c7200300dee8c5b5da5bdee790b7cc61ce4656a5012455b1693c70b93c8dbbd6efb8b2ef478b61bd1a9df46eea65db3bdb98b4f7a1a0d2af3619e7d0cfb1bb51f081e09c07ea12d49bb33688821aaa52f66edd65dd6009f8d7fda45b84073a3f486f7b137c2607fb9d011e4dea69e3632a7aeda4995a39ae34af398fe6b65734ab8eb5f4b3da23c6e49c30e37c37fb28a3c2b93f7c1074e7580d6099802e930ba5967f1d9d23b43aa894f87ddf234044f499afd037a2ccda1f514d32f44894506b54efa83b9cb4c5f0a4e5ca6277d4fa879673e4fbf05740e5b8683ed7b524dc2f8f2f5d6bca5721b0e4c50af183b049260ce1649cf70d8b483355dd475eeaf954d3f2adc8c6fc79cf15d8b2db2132daff65984bae7e751471406d5196d7d3b9bfe41c1f958cd37d111b8ead745297b2757dc988d19a30397c9a2fabd6dbd67194b1e0145ecb4ecd6acdfa71dc110062f3e6134d4f52f17a4b6532195347d39b36e6f42a0e6c48672d89ecc03ae4d38bf3769b8cfcf6da00167cbeea4e68371012743c7cf015560a6626253bf200693f83e32120a859f5cbad03d901bf5e66eaebc6468893407ae7e454e2c9f517f466399a76a51cda1b0ee0a684b47851a30785f400cb8bc70e7744d6a7fcb8568f24df0ce761d3a01dac032ce49edbac8a7f5d4db3493f2ebe0cabdddeb7c038eea1faef8baee7a6df769602226f16f192ae8c54a23b9d7c2bae2e08b033ced001c5b29ccb8354e793e7761efbab006a31653357fd07b40eba7de4de0feb579bf330102000aeb40da26776989ba5c34800e71298b94a05b30a105add6e5db8e95259afead1b92b2eef479ff6a2e314505ad792f6e6f2360518dbd62a5cc2c12fb9a1e19d8bf55e541da1a3ae43195de6cbb344b655e3085eb3e4ae1aeb9950199402a8c76bee2dc2c49c145df6e4fdbd6269b1747f290acb3e917ed39c6b1c69a15d51c60c13e8ad3942d598b066c12f573cc5a4ade2db14c5b8100ef46f2e6bb4cd8273a89a25b57533267e569ea31f8b3ab385019b3c0766f248440060d6c6c52e42068d2f59b406060a0c775ed6633484487a0d28d2abd1880b9e7ff192574697482c34d9de6a464aff6b3bb48c63306d1a9235072019bd948c6bd96e22d564c90bb73ce8f80b5fa0265d1cd7907c7822bf4f8d6c691b3f534c3b939d29738126e403fd4641133e4253b0aaa5bca3e2a72da288aa8027a8ae5d68a98e14572b5a4d2b428560bb198a1c437be39aa4d96985fdad118221c13ebd224bc76be5a931310e4f278d3898308ecdb6b275268b28c488ebcab97c902f5a1ecfd2f5fe10564fd4c1ce7c0c3589f6b0ecffa2f004e83445e00a80210466dcb268eb5b94bb5ab35131aae9b524ec24cee932c7657bd731cee098af8bbfdb595bba589f1c4f1f1dd4b5a9f531c304062145cfbf3db9bdd4889f206fd49bfa6afcd66c76dac97e1ecf2f19f2fdaac22e9052f843356ecc9b48f7b090dce18b11a767f40b0b880f79f20418a73dc5c0b1710aa50aad54b206cf007c17a607fb7df514ed107f2e73024aee65034881c5556e9aba9ecc221d8b964f9ab26cb16c4b13f47985ce699543f925ed82241f2ecd5913b9f845cc6eb23a22f6942b290e681c2ec38f9dd4f999869c612f248947d758d81f1f6cdccbd9ea5844da8758f30ded2b7fabd7703b13a64206f998b420160d01e42350c5a35d36d6f7c384d81ba45383be2f5c91e675c04b4e6eadc2a8051fdbb6c21757f00109443a09ada9c3071068394c6b78149eadad1e6b7417d4395030a805f185f0839cfdb06523c341e7928c6229609b0b73d09c77cda92771831b53979bce178f22cca20a3ec8b5bac1130f815407f2e13033d32d760610180968460b1386363b947b9d40101e200e04b1d1d17bcfdb96b883fe5a202dbc1207f553eb4054f376ed0f63c110e4c09d63d5603d01d5637a49b0601df508b7b0c786c870dcb62b843778f045f74fb8ab9a96b7369f5d1ed815ef232af1f3cb5f6b74f3cf4007b0943926f3057c5e77d5837ae60192a093c0cfd730996818c9bcb3a892e8139e7eaddd9c40c23e92471198cf8b164b5ebb12de9fcc47a2ed1ef45f10472e6308c627e422d1cd702fec8fda50e747ac7b5898fe5020c172a1de2890cdc2ed5fd7943cad7a68668afb9371e3093336a62647c5d5455b79ccaaadc9f2d4922f622e48df5163eb2ca8c21ff433fc06af3c4718cae054779bbf53b4da89ba55c6e6cfdf24b020dc82a925e17963c3b0e527529544104a259271d312362f5a71910f257da02f57b45e3ecc18270ede51cab619c312360c2966cebba6ff3db6ddb36270a1feb3417100ead693c9682f8ad37c54c5a5863b91a783cd006a1c954bb1e3e40f15a7166b3ad109ff49447062143e7e7ac2ef279c064e0e23dd442e2574ddb4be2f571f71e306197514c0a81218a68d33c2970389d2e65dc1046aac79836c17bd6d4d01966062dbfb77107de3d6cc47f26fbe808400e20977b3d8a26ff6b48937327346a50b58db94ec15cc3d7eb4d002a7d2ef8151ff4f2ba97ef4fd66977bd9a50cac3d1f0ea4c6521d8692b18c0414ce9f9cb249ca7b6a15140fb2d8c6843729c4349e81495926bbfae1f392325ee47dd25d3f47f6c10a2ac9a47bc6d6ad5328e11e0a9ab6352509c8bbccaaf"], 0xfce) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0x3f00}}}, 0x24}}, 0x0) 2.082171592s ago: executing program 4 (id=3409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) sendmsg(0xffffffffffffffff, 0x0, 0x4040005) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000c80)=[{&(0x7f00000006c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="04", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x10) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000) 2.016427848s ago: executing program 4 (id=3411): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = eventfd(0x1ff) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x3, 0x7, 0x3, 0xce0, 0x9}) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x2, 0x45, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) write$P9_RWRITE(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='0\x00', 0x2) socket(0x10, 0x80000, 0xfffffff9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) 1.835933637s ago: executing program 4 (id=3413): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x2a, &(0x7f00000003c0)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.762220834s ago: executing program 4 (id=3416): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xe, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) fcntl$setflags(r1, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x9f, 0x101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001008794d431364bd4d6d53891634acc07cd0000000000f6ffffffffff0964000000060a0b0400000000000000000200000038000480340001800a000100696e6e6572000000240002800800024000000084080003400000000a080004400000c0ad08000140000000000900010073797a300000000000001400"/140], 0x8c}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.581721772s ago: executing program 4 (id=3419): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {&(0x7f0000000e00)=""/172, 0xac}], 0x3}, 0x8000}], 0x1, 0x40000000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 1.2002039s ago: executing program 2 (id=3423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x8000000) syz_io_uring_setup(0x5c6, 0x0, 0x0, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000049500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[], 0x154}}, 0x40000) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x30}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x5}, 0x18) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000010005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) pause() setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd30, 0x25dfdbec, {0x0, 0x0, 0x74, r2, {0xfff3, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x0) 1.152883655s ago: executing program 3 (id=3425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x7fff}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x35, 0x4000004) 1.136764776s ago: executing program 3 (id=3427): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.104371099s ago: executing program 3 (id=3428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xcca, 0x8, 0xbd6dead1, 0x1010, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) write$binfmt_elf32(r7, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r6, 0x0, r8, 0x0, 0x200002, 0x0) 1.076017563s ago: executing program 5 (id=3429): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a312", 0xa6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x28b}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1835a9037d94fdb5777403217fb9cd018ee14185b10e413a1095995d75f8c23e88f9e6026228f9516745e87f63b7cc0f59573b3fd06bd33f1879451a9d20e0832163bcdfa", 0xc5}], 0x2}}], 0x3, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.069963843s ago: executing program 3 (id=3430): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) 1.061460304s ago: executing program 5 (id=3431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000000805000000000000000000070000070900010073797a3100000000050003000600000004000480060002"], 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000020801020000000000000000020000030900010073797a31"], 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x84) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000280)={"8d0ffe45733b7d69ad836f79904a4672", 0x0, 0x0, {0xffffffffffff6718, 0x80000000}, {0x2, 0x7}, 0x1, [0x7fffffffffffffff, 0xff, 0xc90, 0xe95d, 0x7, 0x2, 0xc, 0x5, 0xfffffffffffffffc, 0x9, 0x6, 0x4, 0xe5d, 0x9, 0x19, 0x9e85]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) 1.038506716s ago: executing program 3 (id=3432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000b00)={0x0, 0x5, 0x7da, 0x9, 0x0, 0x8, 0x0}) 1.035967916s ago: executing program 3 (id=3433): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x400011, 0x2, 0x3}, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0900006d617463680000002c00028014000300010007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$tun(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xfce) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0x3f00}}}, 0x24}}, 0x0) 1.031954017s ago: executing program 5 (id=3434): geteuid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r2}}, 0x20) 1.014385929s ago: executing program 5 (id=3435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x6, 0x800) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000004c0)=@usbdevfs_disconnect={0x8}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xfffc}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x0, 0x8, 0x8}, @TCA_FQ_CODEL_QUANTUM={0x0, 0x6, 0x5932}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x0, 0xa, 0x80}, @TCA_FQ_CODEL_ECN={0x0, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x0, 0x7, 0x9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x0, 0x8, 0x10000}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x0, 0xb, 0x4}, @TCA_FQ_CODEL_QUANTUM={0x0, 0x6, 0x4}]}}]}, 0xfffffe0d}, 0x1, 0x0, 0x0, 0x20040031}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000580)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r7) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c061}, 0x4008000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000180)={0x100, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/60, 0x3c}], &(0x7f0000000140)=[0x2, 0x3, 0x5, 0x7, 0x6, 0x1, 0x1], 0x1}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbabbbb86dd608a020000002c00fe8000000000000000000000000000bbfee8"], 0x0) r9 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000340)='sockfs\x00\xf4\xbe\xff\xa0\xe3\xc7\x84\x1b*\xda\b\n\xc6\x04\xaa\xf3%\xdb\x10\x93\x80y_\f\xe3UB\xdb5\b\xae\x9a\xbcU\xdfx\x11\"\x81', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000380)=0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r6, 0x0, 0x0, 0x10c6a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000010885ca4a40a30eb00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r5, &(0x7f00000008c0)="45a14749362819d7f3a4ce6ab89873b0f4ccdd71c56768370663420a9abbacf350c23544d89950e04f701e5feb443835d6c5cca65aee5d676c7be1d8893eeb4b21dc14a7be6c7c9591cac722ef76a52c142e37e079312262706a8b0678668f8f7d", 0x61, 0x20040001, &(0x7f0000000940)=@can, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0xff1f, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 811.997409ms ago: executing program 0 (id=3441): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x203, 0x6, 0x8, 0x8100000000000009, 0x8000000000000000, 0x1000, 0x64d, 0x8, 0x9657, 0x8001, 0x2, 0xe7d4, 0x8, 0x200000b, 0x5, 0xcc4, 0x2efa, 0x800, 0xfffffffffffffffe, 0x4, 0x3, 0x6, 0xe, 0xfffffffffffffff7, 0x1, 0x2000008000000}) 775.557832ms ago: executing program 0 (id=3442): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4) (async) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000300)=""/174, 0xae}], 0x3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) writev(r3, &(0x7f0000001900)=[{&(0x7f0000000440)="391f815730aa8ebcae2e8f79324d0c8862268547af543a3c090fe4a6b02c966761a16c143ef69a3fae49786b6ead92fd72b36bb403fb675677ab01b7d24821d984fd6707c3b539ba876ec090dadccef40b0f9d457d28f41752399d6750d53bb28a2c26d415277881f6d4943842baf6a1a0d1512b0586e058b0f4d68424680ced2ceb244b40dba0ab1200d0991f1463f4bf07f95be246172c742bcbe1d943a5889bbbee766bff9305ecb5066e44954dd6b3d54cdd203e6daaf7dd3c8a24e49813dc6e04a72718a699", 0xc8}, {&(0x7f0000000540)="57432a790c50fc8c67b8826d42a39a1438c1600cbfcb6ddd51797d05434be4633f2ad1440247cf7175f0885e78010b56df19449d452f24525f5a30f932919922972aaa7fe38571b70ee1f74494e83328f1812665e27128d86e37e192f598c5fd9c8e7d900ef52e837bc578377ddcaa052d6c889ecf0e25f09ed1dfdad2d65142103e1247c2555edf06044d06d67e82d895937c06e91a529c802289ffd7", 0x9d}, {&(0x7f0000000600)="401bc97a939ad2ef4b9ea50b420fc9ec3c25ac5232378584788a0e1b4d11fb17eb486af54e5bf68ec90067763c4c6f5b77c265fdef317ffb29dd59d9c5e62e529d03333d3dfe61ac165fc110bb7a51e44a255e6c5c8ad7176f29a30ce3507e79c8ebb2fc8c37b14f91ad7a0fbfa7af10880e2a0bf21cb06fa0967ca536e94a5a21a4119248d4927430ddffd4be8adec482bd094f0d4e985cfa7dabcddb449ae0ae618869c5504398", 0xa8}, {&(0x7f00000006c0)="232a776c667cb94088cc0277bd1265d89c21bf3450e4835008af3676cea131f6ae29e447e8775903e264b83b5e9aaaf78e05f7143399a61a460fbbf8c5715cc266c89e382425e8b5db80e1d7b50fb09309b4050efb0be2a005680f9f9a4cd55cc608e78a55586cb131dc3507e62d4138e4b98b87345beab7", 0x78}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)='r', 0x1}, {&(0x7f0000001780)="4922b011cf03f3b4c461d83770f75d7486a1a0b7b3bc95eea5e26879c901d8ef926859f53b46b2df372677d146ab1d78d457fe6a45b41af887a8238bba49fd546abf9af7ab7ce7209de476d5cf2ab6562a0b", 0x52}, {&(0x7f0000001800)="ad09dad0f471a63e33ddeee8e0723fff30a7d1bc82c7386bb24abc3f46fb98a667a7263a543c983920b3d41182876b64754bbadc3723b6b8f716de9132690c1b2204b9a6979cf99f1c6ba74af0fc8c2b73c37d2208add7ccca12ab3d55704cd93a62a6ea20545b2a5e79748b032fa4c909ed3184ec84926b51ae3c48d731fa973995dd4055d8af031c4870f351a053c007d434159eed506449c00beb0e9e07824e7879e8e2291695d1ae97d218621aedc7b4234023e5601f8d0176c19376f1e8d992c1983b97f2c54a44970ee07d5e9a969a7cbe9a656e55440a4d5fde03591d52b11860b5ca991630be7568f9bfe4a900524f0a2f26fe85", 0xf8}], 0x8) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001980)={0x0, 0x69, "45691b7a472165fab0f0b5fd41db04dd32d33c404884b6b1f66a166a2e4227b3e885a9ec1a1b4364cf4fbc9a33074c42378314822d9bfa23afee915b8c7aa7384a5824996f6af4c515ac7ac2e322fc7643a5573d54b2ffb1d5fb1b512e53c02c2989aa81b1d7e79905"}, &(0x7f0000001a00)=0x71) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001a40)=@assoc_value={r5, 0x8}, &(0x7f0000001a80)=0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001bc0)={'gretap0\x00', &(0x7f0000001b00)={'sit0\x00', 0x0, 0x7800, 0x20, 0x6, 0x0, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x65, 0x0, 0x86, 0x2f, 0x0, @local, @remote, {[@cipso={0x86, 0x4f, 0x3, [{0x0, 0x11, "6179e95307a266f69faec2e5d863c3"}, {0x6, 0xe, "ddc9090423d60f4eec4105c3"}, {0x7, 0x7, "da411e4794"}, {0x7, 0x7, "91444c447b"}, {0x1, 0xc, "ff349afa5e4f54324432"}, {0x7, 0xe, "58c82228c6ed5922d795922d"}, {0x5, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x94, [@rand_addr=0x64010102, @rand_addr=0x64010100, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x41, [@multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c00)={'gre0\x00', 0x0, 0x7800, 0x20, 0x5, 0xc8, {{0x1f, 0x4, 0x2, 0x1, 0x7c, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x4c, 0xc5, 0x3, 0x7, [{@private=0xa010101, 0x1}, {@private=0xa010102, 0x8001}, {@broadcast, 0x4}, {@private=0x8000, 0xffffffff}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xfffff800}, {@rand_addr=0x64010100, 0x11}, {@remote, 0x1}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x0, 0x3, "10"}]}, @noop, @ssrr={0x89, 0xf, 0xbf, [@loopback, @loopback, @multicast1]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'gre0\x00', &(0x7f0000001d40)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x2, 0x5, {{0x43, 0x4, 0x3, 0x3, 0x10c, 0x66, 0x0, 0x8, 0x0, 0x0, @local, @empty, {[@ssrr={0x89, 0x13, 0x6e, [@loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x43}, @remote]}, @noop, @ssrr={0x89, 0xf, 0xe1, [@local, @loopback, @multicast1]}, @cipso={0x86, 0x24, 0x2, [{0x3, 0x11, "a14fd84de6549300753e6d663281b5"}, {0x1, 0xd, "d9d01a5a11493f8ca241e2"}]}, @timestamp_prespec={0x44, 0x34, 0x10, 0x3, 0x3, [{@remote, 0x9}, {@rand_addr=0x64010102, 0x8}, {@remote, 0x80000000}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@broadcast, 0x4}]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0x1, [{@loopback, 0x3}, {@private=0xa010100, 0x5}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@rand_addr=0x64010100, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0x1d, 0x1, 0xc, [{@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x7}, {@local, 0x7}, {@multicast1, 0x10001}, {@remote}, {@multicast2}]}, @timestamp={0x44, 0xc, 0x86, 0x0, 0xa, [0x4000000, 0x2]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001ec0)=0x0, &(0x7f0000001f00)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000002000)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x5c, 0x0, 0x110, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0xdd) openat$cgroup_type(r3, &(0x7f0000002080), 0x2, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r12, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x800) (async) r14 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000002240)) accept4$nfc_llcp(r14, &(0x7f0000002280), &(0x7f0000002300)=0x60, 0x800) (async) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002380), r6) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x40, r15, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x14}}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r16}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r17}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4088010) (async) write$binfmt_elf32(r2, &(0x7f0000002480)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x1, 0x0, 0x7, 0x3, 0x3, 0x9, 0x18, 0x38, 0x30d, 0x6, 0x7, 0x20, 0x2, 0x7ff, 0x7f, 0x87f}, [{0x7, 0xffff, 0x3ccac119, 0x8, 0x200, 0xd9, 0x5, 0x1}, {0x2, 0x5f15579b, 0x8, 0x10000, 0x95, 0x0, 0x7fc5a75e, 0x10001}], "ab25002a12bdac3516382dec0bb9e79b794b53b4b4c762b60724371293d6370f2e882b27318596e669e41c973d3a4bf8320ea842031736c078762867115972e59f004385e37cb85a3bad91537b10a908cb8d221c04aca1742c15ed01d471861177dfbad391977cede55f880904b33285945929c5b4bca03559afdc211dd3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7f6) 774.674312ms ago: executing program 5 (id=3443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001cc0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x40000000000000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) 442.603736ms ago: executing program 0 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000000805000000000000000000070000070900010073797a3100000000050003000600000004000480060002"], 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000020801020000000000000000020000030900010073797a31"], 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x84) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000280)={"8d0ffe45733b7d69ad836f79904a4672", 0x0, 0x0, {0xffffffffffff6718, 0x80000000}, {0x2, 0x7}, 0x1, [0x7fffffffffffffff, 0xff, 0xc90, 0xe95d, 0x7, 0x2, 0xc, 0x5, 0xfffffffffffffffc, 0x9, 0x6, 0x4, 0xe5d, 0x9, 0x19, 0x9e85]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) 437.888906ms ago: executing program 4 (id=3445): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xf8, 0x582, &(0x7f0000001f80)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000008001000000080001", @ANYRES32=r3, @ANYBLOB="4400028040000100240001007072696f726994790000000000000000000000000000000000000000f0ff0000050003000e"], 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) chdir(0x0) r5 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x79) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x30, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xb5d9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @exit, @generic={0x6, 0xe, 0x6, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x73, &(0x7f00000002c0)=""/115, 0x41000, 0x18, '\x00', r8, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4aca}, 0x10, 0x0, r9, 0x3, &(0x7f0000000980)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x3, 0xa, 0xb}, {0x4, 0x3, 0xe, 0xb}, {0x3, 0x1, 0xe, 0xb}], 0x10, 0x40}, 0x94) 274.868493ms ago: executing program 2 (id=3446): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2f0, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x1d0, 0x1, [@m_csum={0x68, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x39, 0x6, "99599a989bd1b1fba50a4a29ffa7c682e6cfa07125a1335f6cc53bfcbdd0cec4b739e8072ad58b5153a6189bec7e227f7f9f2cb5c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xc4, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb0e}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x10c, 0x1, [@m_nat={0x108, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x10000001}}]}, {0x3d, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b569"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 231.100227ms ago: executing program 2 (id=3447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x2f, 0x13, 0x8, 0x1b, 0x7, 0x7, 0x5, 0x2e, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$getown(r2, 0x9) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='wchan\x00') pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) fsmount(r1, 0x1, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x511a01, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 205.18203ms ago: executing program 0 (id=3448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 38.434067ms ago: executing program 0 (id=3449): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x2000000000000000, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffff8001}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) 36.334657ms ago: executing program 2 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="30d7e88b7e1a89248cbe96fa60e3aa658b848c34b60d221b47faa425408774ccb71ea1fa398e581c2dfb0c563ae9e0179d98b1dcce10430d6aeea68db5b0e19e3a18c41ddd8964c127983aaa9808f00958eb84e5f6ad7cf6da5d1c91a1ca244531d9d1e03d0cdf08801cfa3144c8c973a4af2adb11b537a30414e7268b844618a1a6468378f196dc2c94b1d5880655a657aaf29227ec5691ab941dac2bb42722601cdc3fd713d2029386f3ec77d7cac4921e2c06865201ca5a3d76f218c6a72ab5af528b604869e9dbab560430e94d8ef41ad7015d7847a16dc02b6307f3029200d82f197a5ad42b08733b48c48b7cf18e52"], 0x10, 0x7f4, &(0x7f0000001580)="$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") 657.73µs ago: executing program 5 (id=3451): openat(0xffffffffffffff9c, 0x0, 0x8020e0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) close(0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x8c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x35}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWRULE={0x108, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xc5, 0x7, 0x1, 0x0, "2c0947b2f7db3896731f30effb9a67612a5acc4c8166982a5f1fc08ab984f0243d5e3df2604d29a2c219fb9b0e813baf27b9e2040b1f75f067f2e90237a9eda08e5903da1857fb0592ab186421ee049e01c48f3dc936cfdfb04351ebd8eb31a5790365ffff49ecea1eec8590952a0b263427d52d1d9b57e2f272fb5ad2256a949e6bf1c1287220b920e17ed8bc1cd4028144dc0a7b70e5429921c7fb6927899a7b0bf6f4c604aac9426b768a94c1fc4242ab4e8606ba99dafc6f4278fb2ebed964"}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x264, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "043d95edbef8b22b8a22533fcf7a95396747e42e6da46ab1130010fcb50e8b5bf4704c84a5d2ab42d0d7a123b22904706a13dd9fc78ed95229cf95743e28906ea1488821c2f4756ef7a81300adda08241e89daf71eb5b029199df78605d18cf98473328e55857214bacb7827b9a2b7e85eaa790dcc77fa7c0da0cb6da789e5e0b7909a279818cafc212f66d6e1c29901e2c748ba6a327e88efb83281ec8d2236334bfd6733bcefe09cfdc45c8244b3512a0b8668deb330900bd3bf10e82c06026f8854bfa543ac63a3f63840c078f29313ecbabfc3000bdd11bc2afaab380a489b87"}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "81cd60f53d010f5d3851bfb3e5ee50077b58600ca6b6386b4c36a0eead2b202ae84ac74bceb8c17256296ed9ef9e2b2eef215389bc64b426ecd87a5978cb9ed8e92e2e970cf07ecdefca1eaa0f6749aec299ca96d3e22451e9ec9abc9c915a9605da11e5246b29906943f1494b8ef17aed9cd90457a34a9095146fb91bf8f3d56824fe409fac8869c7ec2ebc145ed655dda28b0efd105a79d5f80eb4f5407b2850b3ff7090311b5d66a096e1df2e62932f14581cce05287efb46492e31db"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x8e, 0x6, "a6068aa0439b3b6d6c8df714e661d9cd81ac2728fc1ba6deb6747c38cad77f7c15c8b460351c1dfeb3599f55242b132f44a21cc1409f763abed8bdc5458f30029982529118d2f328a86ec207ce376df8ff9318e87b5d20884bd09bf60e9d2f5712eb26f5550ce8432b8e7fc2e3f17895395579a31d62c94d30bb0f3ef0381dfb0cb932d56a672cbef63e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x570}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0xc08, 0x3, 0x458, 0x330, 0x5002004a, 0xb, 0x330, 0xea13, 0x3c0, 0x3c8, 0x3c8, 0x3c0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {0x0, 0x7}, {0x0, 0x0, 0x5e}, {}, {}, {0xffff}, {}, {}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {0x0, 0x0, 0x0, 0x4}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {}, {0x0, 0x0, 0x40}, {0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {0x80, 0x0, 0xfd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x71c6, 0x0, 0x9661, '\x00', 'syz1\x00', {0xa73}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xeff9, "66c5aff8a6eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x401}, 0x11) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) 0s ago: executing program 2 (id=3452): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x203, 0x6, 0x8, 0x8100000000000009, 0x8000000000000000, 0x1000, 0x64d, 0x8, 0x9657, 0x8001, 0x2, 0xe7d4, 0x8, 0x200000b, 0x5, 0xcc4, 0x2efa, 0x800, 0xfffffffffffffffe, 0x4, 0x3, 0x6, 0xe, 0xfffffffffffffff7, 0x1, 0x2000008000000}) kernel console output (not intermixed with test programs): =10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.242369][ T29] audit: type=1326 audit(1763329939.444:19335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.284242][ T29] audit: type=1326 audit(1763329939.554:19336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.307979][ T29] audit: type=1326 audit(1763329939.554:19337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.331582][ T29] audit: type=1326 audit(1763329939.554:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.355267][ T29] audit: type=1326 audit(1763329939.554:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.378845][ T29] audit: type=1326 audit(1763329939.554:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10747 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecba0f6c9 code=0x7ffc0000 [ 126.393085][T10752] loop5: detected capacity change from 0 to 512 [ 126.430883][T10752] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 126.458805][T10752] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.487916][T10752] EXT4-fs (loop5): mount failed [ 126.553692][T10684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.811193][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2846'. [ 126.857923][T10769] lo speed is unknown, defaulting to 1000 [ 126.864164][T10769] wg1 speed is unknown, defaulting to 1000 [ 126.960927][T10684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.031442][T10684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.091251][T10684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.184642][T10684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.193433][T10684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.202366][T10684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.211594][T10684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.250454][T10684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.262220][T10684] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.273128][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.280315][ T9681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.347617][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.354701][ T9672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.396631][T10684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.451743][T10804] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2855'. [ 127.505550][T10812] loop5: detected capacity change from 0 to 2048 [ 127.531552][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.553555][T10812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.573512][T10822] tap0: tun_chr_ioctl cmd 1074025677 [ 127.579335][T10812] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.590526][T10822] tap0: linktype set to 774 [ 127.661528][T10828] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2857: bg 0: block 345: padding at end of block bitmap is not set [ 127.690012][T10828] EXT4-fs (loop5): Remounting filesystem read-only [ 127.696620][ T9663] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 127.761567][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.851569][T10843] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 127.864176][T10684] veth0_vlan: entered promiscuous mode [ 127.876218][T10684] veth1_vlan: entered promiscuous mode [ 127.885411][T10849] FAULT_INJECTION: forcing a failure. [ 127.885411][T10849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.898605][T10849] CPU: 1 UID: 0 PID: 10849 Comm: syz.5.2866 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.898694][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.898834][T10849] Call Trace: [ 127.898840][T10849] [ 127.898868][T10849] __dump_stack+0x1d/0x30 [ 127.898893][T10849] dump_stack_lvl+0xe8/0x140 [ 127.898916][T10849] dump_stack+0x15/0x1b [ 127.898935][T10849] should_fail_ex+0x265/0x280 [ 127.898970][T10849] should_fail+0xb/0x20 [ 127.899000][T10849] should_fail_usercopy+0x1a/0x20 [ 127.899054][T10849] _copy_from_user+0x1c/0xb0 [ 127.899081][T10849] ___sys_sendmsg+0xc1/0x1d0 [ 127.899115][T10849] __x64_sys_sendmsg+0xd4/0x160 [ 127.899140][T10849] x64_sys_call+0x191e/0x3000 [ 127.899194][T10849] do_syscall_64+0xd2/0x200 [ 127.899215][T10849] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.899279][T10849] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.899313][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.899337][T10849] RIP: 0033:0x7fca6844f6c9 [ 127.899353][T10849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.899373][T10849] RSP: 002b:00007fca66eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.899420][T10849] RAX: ffffffffffffffda RBX: 00007fca686a5fa0 RCX: 00007fca6844f6c9 [ 127.899435][T10849] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 127.899448][T10849] RBP: 00007fca66eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.899534][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.899548][T10849] R13: 00007fca686a6038 R14: 00007fca686a5fa0 R15: 00007ffde71e8278 [ 127.899572][T10849] [ 128.106364][T10851] netlink: 'syz.5.2867': attribute type 10 has an invalid length. [ 128.110338][T10684] veth0_macvtap: entered promiscuous mode [ 128.125424][T10851] team0: Device veth0_macvtap failed to register rx_handler [ 128.136894][T10684] veth1_macvtap: entered promiscuous mode [ 128.143151][T10853] netlink: 'syz.0.2868': attribute type 10 has an invalid length. [ 128.164669][T10684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.197608][T10859] loop5: detected capacity change from 0 to 2048 [ 128.207126][T10684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.230057][ T9688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.239246][ T9688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.248091][ T9688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.264814][ T9688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.279511][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 128.293300][T10859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.306154][T10859] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.358501][T10877] FAULT_INJECTION: forcing a failure. [ 128.358501][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 128.371235][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.4.2822 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.371264][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.371276][T10877] Call Trace: [ 128.371282][T10877] [ 128.371289][T10877] __dump_stack+0x1d/0x30 [ 128.371385][T10877] dump_stack_lvl+0xe8/0x140 [ 128.371407][T10877] dump_stack+0x15/0x1b [ 128.371427][T10877] should_fail_ex+0x265/0x280 [ 128.371476][T10877] should_failslab+0x8c/0xb0 [ 128.371502][T10877] kmem_cache_alloc_noprof+0x50/0x480 [ 128.371531][T10877] ? getname_flags+0x80/0x3b0 [ 128.371594][T10877] getname_flags+0x80/0x3b0 [ 128.371620][T10877] user_path_at+0x28/0x130 [ 128.371699][T10877] do_sys_truncate+0x5c/0x130 [ 128.371725][T10877] __x64_sys_truncate+0x31/0x40 [ 128.371747][T10877] x64_sys_call+0x1a2f/0x3000 [ 128.371767][T10877] do_syscall_64+0xd2/0x200 [ 128.371835][T10877] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.371865][T10877] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.371907][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.371933][T10877] RIP: 0033:0x7f9ae4faf6c9 [ 128.371948][T10877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.371964][T10877] RSP: 002b:00007f9ae3a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 128.371993][T10877] RAX: ffffffffffffffda RBX: 00007f9ae5205fa0 RCX: 00007f9ae4faf6c9 [ 128.372004][T10877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 128.372034][T10877] RBP: 00007f9ae3a17090 R08: 0000000000000000 R09: 0000000000000000 [ 128.372047][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.372061][T10877] R13: 00007f9ae5206038 R14: 00007f9ae5205fa0 R15: 00007ffd6a116678 [ 128.372082][T10877] [ 128.595506][T10878] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2871: bg 0: block 345: padding at end of block bitmap is not set [ 128.627499][T10878] EXT4-fs (loop5): Remounting filesystem read-only [ 128.632513][T10889] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2882'. [ 128.643278][ T9672] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 128.760915][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.815035][T10905] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2885'. [ 128.913705][T10917] loop5: detected capacity change from 0 to 512 [ 128.942989][T10917] EXT4-fs (loop5): 1 orphan inode deleted [ 128.958445][ T9672] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 1 [ 128.970652][T10917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.997310][T10917] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.044599][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.056685][T10904] loop4: detected capacity change from 0 to 32768 [ 129.081478][T10904] loop4: p1 p3 < p5 > [ 129.099106][ T9043] bond0: (slave syz_tun): Releasing backup interface [ 129.113943][T10930] loop5: detected capacity change from 0 to 764 [ 129.122413][T10930] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 129.170207][T10921] lo speed is unknown, defaulting to 1000 [ 129.176254][T10921] wg1 speed is unknown, defaulting to 1000 [ 129.211780][T10941] loop4: detected capacity change from 0 to 2048 [ 129.229983][T10943] loop5: detected capacity change from 0 to 512 [ 129.236931][T10941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.249742][T10941] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.270924][T10943] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.288669][T10921] chnl_net:caif_netlink_parms(): no params data found [ 129.295735][T10943] EXT4-fs (loop5): mount failed [ 129.346079][T10950] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2898: bg 0: block 345: padding at end of block bitmap is not set [ 129.361757][T10950] EXT4-fs (loop4): Remounting filesystem read-only [ 129.369758][ T9672] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 129.402968][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.410140][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.410581][T10958] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2901'. [ 129.417925][T10921] bridge_slave_0: entered allmulticast mode [ 129.432915][T10921] bridge_slave_0: entered promiscuous mode [ 129.440225][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.447341][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.454602][T10921] bridge_slave_1: entered allmulticast mode [ 129.461112][T10921] bridge_slave_1: entered promiscuous mode [ 129.487890][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.489016][T10684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.498094][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.529858][T10964] loop5: detected capacity change from 0 to 512 [ 129.536816][T10964] EXT4-fs: Ignoring removed bh option [ 129.538826][T10921] team0: Port device team_slave_0 added [ 129.558794][T10921] team0: Port device team_slave_1 added [ 129.580208][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.580221][T10964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.587181][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.619709][T10964] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.625586][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.650938][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.657886][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.669618][T10964] IPv6: Can't replace route, no match found [ 129.683805][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.731084][T10921] hsr_slave_0: entered promiscuous mode [ 129.737205][T10921] hsr_slave_1: entered promiscuous mode [ 129.757176][T10921] debugfs: 'hsr0' already exists in 'hsr' [ 129.763002][T10921] Cannot create hsr debugfs directory [ 129.771584][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.791182][T10975] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.836967][T10982] netlink: 'syz.4.2910': attribute type 10 has an invalid length. [ 129.876651][T10982] team0: Device veth0_macvtap failed to register rx_handler [ 129.902558][T10986] can0: slcan on ttyS3. [ 129.950406][T10921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.968484][T10986] can0 (unregistered): slcan off ttyS3. [ 129.997435][T10997] loop4: detected capacity change from 0 to 128 [ 130.004786][T10997] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 130.015732][T10997] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 130.023868][T10997] FAT-fs (loop4): Filesystem has been set read-only [ 130.032563][T10997] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 130.043413][T10921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.080868][T10921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.134901][T11009] netlink: 'syz.4.2923': attribute type 10 has an invalid length. [ 130.144083][T11011] loop5: detected capacity change from 0 to 512 [ 130.145479][T11009] team0: Device veth0_macvtap failed to register rx_handler [ 130.150955][T11011] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.164309][T11011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.172057][T11011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.180551][T11011] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.191003][T10921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.208055][T11011] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2924: Allocating blocks 41-42 which overlap fs metadata [ 130.222086][T11011] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2924: Allocating blocks 41-42 which overlap fs metadata [ 130.236053][T11011] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2924: Failed to acquire dquot type 1 [ 130.247619][T11011] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 130.263607][T11011] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.2924: corrupted inode contents [ 130.291486][T11011] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #12: comm syz.5.2924: mark_inode_dirty error [ 130.303143][T11011] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.2924: corrupted inode contents [ 130.304037][T10921] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.318602][T11011] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2924: mark_inode_dirty error [ 130.334207][T11011] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.2924: corrupted inode contents [ 130.335069][T10921] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.353330][T11011] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 130.365677][T11021] can0: slcan on ttyS3. [ 130.370165][T10921] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.377001][T11011] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.2924: corrupted inode contents [ 130.389990][T11011] EXT4-fs error (device loop5): ext4_truncate:4637: inode #12: comm syz.5.2924: mark_inode_dirty error [ 130.391666][T10921] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.408494][T11011] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 130.421573][T11011] EXT4-fs (loop5): 1 truncate cleaned up [ 130.428921][T11011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.446270][T11011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.458343][T11021] can0 (unregistered): slcan off ttyS3. [ 130.490084][T10921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.503145][T10921] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.512594][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.519745][ T9688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.535500][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.542587][ T9688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.558496][T11034] 9pnet_fd: Insufficient options for proto=fd [ 130.566651][T11031] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2929'. [ 130.576785][T11031] netlink: zone id is out of range [ 130.581994][T11031] netlink: zone id is out of range [ 130.587314][T11031] netlink: zone id is out of range [ 130.592686][T11031] netlink: zone id is out of range [ 130.597851][T11031] netlink: zone id is out of range [ 130.602982][T11031] netlink: zone id is out of range [ 130.608748][T11031] netlink: zone id is out of range [ 130.614495][T11031] netlink: zone id is out of range [ 130.619720][T11031] netlink: zone id is out of range [ 130.624083][T10921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.624823][T11031] netlink: zone id is out of range [ 130.736825][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 130.747052][T11050] loop5: detected capacity change from 0 to 512 [ 130.753141][T10921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.766024][T11051] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2934'. [ 130.775138][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 130.807335][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 130.817507][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2934'. [ 130.844778][T11050] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2930: EA inode hash validation failed [ 130.899512][T11051] hsr_slave_0 (unregistering): left promiscuous mode [ 130.907524][T11050] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2930: corrupted inode contents [ 130.966027][T11050] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.2930: mark_inode_dirty error [ 130.987373][T10921] veth0_vlan: entered promiscuous mode [ 131.010232][T11050] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2930: corrupted inode contents [ 131.010866][T10921] veth1_vlan: entered promiscuous mode [ 131.032317][T11050] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.2930: mark_inode_dirty error [ 131.074290][T11050] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.2930: mark inode dirty (error -117) [ 131.085017][T10921] veth0_macvtap: entered promiscuous mode [ 131.103098][T10921] veth1_macvtap: entered promiscuous mode [ 131.108509][T11050] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 131.125880][T11050] EXT4-fs (loop5): 1 orphan inode deleted [ 131.138215][T10921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.143565][T11050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.160939][T10921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.193871][ T9671] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.211796][ T9671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.236063][ T9671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.258779][ T9671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.292699][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 131.292747][ T29] audit: type=1326 audit(1763329944.574:19874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf39456567 code=0x7ffc0000 [ 131.332936][ T29] audit: type=1326 audit(1763329944.604:19875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf393fb789 code=0x7ffc0000 [ 131.356576][ T29] audit: type=1326 audit(1763329944.604:19876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf39456567 code=0x7ffc0000 [ 131.380098][ T29] audit: type=1326 audit(1763329944.604:19877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf393fb789 code=0x7ffc0000 [ 131.403832][ T29] audit: type=1326 audit(1763329944.604:19878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3945f6c9 code=0x7ffc0000 [ 131.427645][ T29] audit: type=1326 audit(1763329944.604:19879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3945f6c9 code=0x7ffc0000 [ 131.451368][ T29] audit: type=1326 audit(1763329944.604:19880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fcf3945f6c9 code=0x7ffc0000 [ 131.475268][ T29] audit: type=1326 audit(1763329944.604:19881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3945f6c9 code=0x7ffc0000 [ 131.498861][ T29] audit: type=1326 audit(1763329944.604:19882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3945f6c9 code=0x7ffc0000 [ 131.522508][ T29] audit: type=1326 audit(1763329944.604:19883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11070 comm="syz.2.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf3945f6c9 code=0x7ffc0000 [ 131.636578][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.673394][T11091] netlink: 'syz.4.2943': attribute type 10 has an invalid length. [ 131.681937][T11091] team0: Device veth0_macvtap failed to register rx_handler [ 131.792961][T11107] loop5: detected capacity change from 0 to 1024 [ 131.799702][T11107] EXT4-fs: Ignoring removed orlov option [ 131.819992][T11107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.839537][T11111] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 131.847917][T11111] team0: Device veth0_macvtap failed to register rx_handler [ 131.867235][T11113] netlink: 'syz.4.2951': attribute type 10 has an invalid length. [ 131.876810][T11113] team0: Device veth0_macvtap failed to register rx_handler [ 131.922674][T11119] netlink: 'syz.4.2954': attribute type 12 has an invalid length. [ 131.931366][T11119] FAULT_INJECTION: forcing a failure. [ 131.931366][T11119] name failslab, interval 1, probability 0, space 0, times 0 [ 131.944152][T11119] CPU: 0 UID: 0 PID: 11119 Comm: syz.4.2954 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.944225][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.944233][T11119] Call Trace: [ 131.944237][T11119] [ 131.944241][T11119] __dump_stack+0x1d/0x30 [ 131.944255][T11119] dump_stack_lvl+0xe8/0x140 [ 131.944267][T11119] dump_stack+0x15/0x1b [ 131.944331][T11119] should_fail_ex+0x265/0x280 [ 131.944351][T11119] should_failslab+0x8c/0xb0 [ 131.944372][T11119] kmem_cache_alloc_noprof+0x50/0x480 [ 131.944389][T11119] ? dst_alloc+0xbd/0x100 [ 131.944407][T11119] dst_alloc+0xbd/0x100 [ 131.944489][T11119] ? ip_route_input_rcu+0x602/0x1cd0 [ 131.944544][T11119] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 131.944571][T11119] ip_route_output_flow+0x65/0x110 [ 131.944587][T11119] arp_req_dev+0xd6/0x1e0 [ 131.944632][T11119] arp_req_delete+0x2d/0x190 [ 131.944646][T11119] arp_ioctl+0x242/0x2c0 [ 131.944736][T11119] inet_ioctl+0x2ad/0x3a0 [ 131.944752][T11119] sock_do_ioctl+0x73/0x220 [ 131.944840][T11119] sock_ioctl+0x41b/0x610 [ 131.944853][T11119] ? __pfx_sock_ioctl+0x10/0x10 [ 131.944865][T11119] __se_sys_ioctl+0xce/0x140 [ 131.944877][T11119] __x64_sys_ioctl+0x43/0x50 [ 131.944889][T11119] x64_sys_call+0x1816/0x3000 [ 131.944926][T11119] do_syscall_64+0xd2/0x200 [ 131.944938][T11119] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.944954][T11119] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.945028][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.945041][T11119] RIP: 0033:0x7f9ae4faf6c9 [ 131.945120][T11119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.945134][T11119] RSP: 002b:00007f9ae3a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.945147][T11119] RAX: ffffffffffffffda RBX: 00007f9ae5205fa0 RCX: 00007f9ae4faf6c9 [ 131.945154][T11119] RDX: 0000200000000180 RSI: 0000000000008953 RDI: 0000000000000005 [ 131.945161][T11119] RBP: 00007f9ae3a17090 R08: 0000000000000000 R09: 0000000000000000 [ 131.945202][T11119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.945210][T11119] R13: 00007f9ae5206038 R14: 00007f9ae5205fa0 R15: 00007ffd6a116678 [ 131.945220][T11119] [ 132.187401][T11122] capability: warning: `syz.4.2955' uses deprecated v2 capabilities in a way that may be insecure [ 132.215843][T11124] loop4: detected capacity change from 0 to 764 [ 132.223274][T11124] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.247441][T11126] loop4: detected capacity change from 0 to 764 [ 132.254498][T11126] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.276910][T11128] bridge_slave_1: left allmulticast mode [ 132.282658][T11128] bridge_slave_1: left promiscuous mode [ 132.288274][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.296250][T11128] bridge_slave_0: left allmulticast mode [ 132.301939][T11128] bridge_slave_0: left promiscuous mode [ 132.307629][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.369045][ T3420] infiniband syb2: ib_query_port failed (-19) [ 132.583777][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.684316][T11166] syz.4.2974 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.699889][T11166] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 132.759344][T11170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11170 comm=syz.4.2974 [ 132.803565][T11177] loop4: detected capacity change from 0 to 128 [ 133.074335][T11205] FAULT_INJECTION: forcing a failure. [ 133.074335][T11205] name failslab, interval 1, probability 0, space 0, times 0 [ 133.087069][T11205] CPU: 1 UID: 0 PID: 11205 Comm: syz.2.2990 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.087121][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.087134][T11205] Call Trace: [ 133.087141][T11205] [ 133.087149][T11205] __dump_stack+0x1d/0x30 [ 133.087173][T11205] dump_stack_lvl+0xe8/0x140 [ 133.087195][T11205] dump_stack+0x15/0x1b [ 133.087257][T11205] should_fail_ex+0x265/0x280 [ 133.087292][T11205] should_failslab+0x8c/0xb0 [ 133.087354][T11205] kmem_cache_alloc_noprof+0x50/0x480 [ 133.087439][T11205] ? alloc_empty_file+0x76/0x200 [ 133.087472][T11205] alloc_empty_file+0x76/0x200 [ 133.087505][T11205] alloc_file_pseudo+0xc6/0x160 [ 133.087528][T11205] anon_inode_getfile_fmode+0xa5/0x140 [ 133.087630][T11205] do_eventfd+0x116/0x1b0 [ 133.087656][T11205] __x64_sys_eventfd2+0x2d/0x40 [ 133.087750][T11205] x64_sys_call+0x2ecc/0x3000 [ 133.087774][T11205] do_syscall_64+0xd2/0x200 [ 133.087796][T11205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.087827][T11205] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.087886][T11205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.087916][T11205] RIP: 0033:0x7fcf3945f6c9 [ 133.087933][T11205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.087952][T11205] RSP: 002b:00007fcf37ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 133.088004][T11205] RAX: ffffffffffffffda RBX: 00007fcf396b5fa0 RCX: 00007fcf3945f6c9 [ 133.088017][T11205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 133.088031][T11205] RBP: 00007fcf37ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.088044][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.088058][T11205] R13: 00007fcf396b6038 R14: 00007fcf396b5fa0 R15: 00007ffcad7a0d68 [ 133.088098][T11205] [ 133.537564][T11237] loop4: detected capacity change from 0 to 512 [ 133.545939][T11237] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2993: EA inode hash validation failed [ 133.559354][T11237] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2993: corrupted inode contents [ 133.571506][T11237] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.2993: mark_inode_dirty error [ 133.583192][T11237] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2993: corrupted inode contents [ 133.597601][T11237] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.2993: mark_inode_dirty error [ 133.610226][T11237] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.2993: mark inode dirty (error -117) [ 133.624534][T11237] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 133.629546][T11236] __nla_validate_parse: 5 callbacks suppressed [ 133.629561][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 133.635591][T11237] EXT4-fs (loop4): 1 orphan inode deleted [ 133.699602][T11237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.702053][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'. [ 133.728960][T11249] netlink: 'syz.5.3007': attribute type 10 has an invalid length. [ 133.755867][T11249] team0: Device veth0_macvtap failed to register rx_handler [ 133.885967][T10684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.896588][T11266] lo speed is unknown, defaulting to 1000 [ 133.908776][T11266] wg1 speed is unknown, defaulting to 1000 [ 134.048165][T11274] loop4: detected capacity change from 0 to 1024 [ 134.060100][T11274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.073068][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 134.129665][T10684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.134213][T11280] warn_alloc: 3 callbacks suppressed [ 134.134226][T11280] syz.2.3019: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 134.158430][T11280] CPU: 1 UID: 0 PID: 11280 Comm: syz.2.3019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.158456][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.158467][T11280] Call Trace: [ 134.158473][T11280] [ 134.158480][T11280] __dump_stack+0x1d/0x30 [ 134.158561][T11280] dump_stack_lvl+0xe8/0x140 [ 134.158584][T11280] dump_stack+0x15/0x1b [ 134.158600][T11280] warn_alloc+0x12b/0x1a0 [ 134.158630][T11280] ? bpf_trace_run3+0xfd/0x1d0 [ 134.158682][T11280] ? bpf_trace_run3+0x12c/0x1d0 [ 134.158711][T11280] __vmalloc_node_range_noprof+0x9d/0xed0 [ 134.158779][T11280] ? kmem_cache_free+0xe4/0x3d0 [ 134.158812][T11280] ? __rcu_read_unlock+0x4f/0x70 [ 134.158839][T11280] ? avc_has_perm_noaudit+0x1b1/0x200 [ 134.158857][T11280] ? should_fail_ex+0x30/0x280 [ 134.158899][T11280] ? xskq_create+0x36/0xe0 [ 134.158954][T11280] vmalloc_user_noprof+0x7d/0xb0 [ 134.158989][T11280] ? xskq_create+0x80/0xe0 [ 134.159088][T11280] xskq_create+0x80/0xe0 [ 134.159113][T11280] xsk_init_queue+0x95/0xf0 [ 134.159138][T11280] xsk_setsockopt+0x3f5/0x640 [ 134.159159][T11280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 134.159306][T11280] __sys_setsockopt+0x184/0x200 [ 134.159341][T11280] ? __secure_computing+0x82/0x150 [ 134.159371][T11280] __x64_sys_setsockopt+0x64/0x80 [ 134.159401][T11280] x64_sys_call+0x20ec/0x3000 [ 134.159426][T11280] do_syscall_64+0xd2/0x200 [ 134.159481][T11280] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.159507][T11280] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.159543][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.159585][T11280] RIP: 0033:0x7fcf3945f6c9 [ 134.159599][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.159616][T11280] RSP: 002b:00007fcf37ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.159637][T11280] RAX: ffffffffffffffda RBX: 00007fcf396b5fa0 RCX: 00007fcf3945f6c9 [ 134.159652][T11280] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 134.159711][T11280] RBP: 00007fcf394e1f91 R08: 0000000000000004 R09: 0000000000000000 [ 134.159723][T11280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.159749][T11280] R13: 00007fcf396b6038 R14: 00007fcf396b5fa0 R15: 00007ffcad7a0d68 [ 134.159769][T11280] [ 134.159776][T11280] Mem-Info: [ 134.392138][T11280] active_anon:23533 inactive_anon:12 isolated_anon:0 [ 134.392138][T11280] active_file:19467 inactive_file:2332 isolated_file:0 [ 134.392138][T11280] unevictable:0 dirty:260 writeback:0 [ 134.392138][T11280] slab_reclaimable:3588 slab_unreclaimable:48861 [ 134.392138][T11280] mapped:32393 shmem:19582 pagetables:1116 [ 134.392138][T11280] sec_pagetables:0 bounce:0 [ 134.392138][T11280] kernel_misc_reclaimable:0 [ 134.392138][T11280] free:1828634 free_pcp:13601 free_cma:0 [ 134.437470][T11280] Node 0 active_anon:94132kB inactive_anon:48kB active_file:77868kB inactive_file:9328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129572kB dirty:1040kB writeback:0kB shmem:78328kB kernel_stack:5488kB pagetables:4464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.464901][T11280] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.494530][T11280] lowmem_reserve[]: 0 2881 7859 7859 [ 134.499846][T11280] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 134.530967][T11280] lowmem_reserve[]: 0 0 4978 4978 [ 134.535983][T11280] Node 0 Normal free:4352448kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94132kB inactive_anon:48kB active_file:77868kB inactive_file:9328kB unevictable:0kB writepending:924kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:50876kB local_pcp:31308kB free_cma:0kB [ 134.568987][T11280] lowmem_reserve[]: 0 0 0 0 [ 134.573569][T11280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.586280][T11280] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 134.602404][T11280] Node 0 Normal: 26*4kB (E) 2*8kB (ME) 88*16kB (UM) 24*32kB (UME) 146*64kB (UME) 99*128kB (UME) 51*256kB (UME) 22*512kB (UME) 61*1024kB (UME) 49*2048kB (UME) 1011*4096kB (UM) = 4352504kB [ 134.621032][T11280] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 134.630307][T11280] 41381 total pagecache pages [ 134.635017][T11280] 2 pages in swap cache [ 134.639154][T11280] Free swap = 124896kB [ 134.643355][T11280] Total swap = 124996kB [ 134.647482][T11280] 2097051 pages RAM [ 134.651288][T11280] 0 pages HighMem/MovableOnly [ 134.655947][T11280] 81087 pages reserved [ 134.692422][T11292] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3020'. [ 134.692914][T11294] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.703571][T11296] netlink: 'syz.3.3023': attribute type 10 has an invalid length. [ 134.837315][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 134.847277][T11310] bridge_slave_1: left allmulticast mode [ 134.853017][T11310] bridge_slave_1: left promiscuous mode [ 134.858766][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.872772][T11314] loop4: detected capacity change from 0 to 512 [ 134.879437][T11314] EXT4-fs: Ignoring removed oldalloc option [ 134.886461][T11310] bridge_slave_0: left allmulticast mode [ 134.892179][T11310] bridge_slave_0: left promiscuous mode [ 134.898021][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.907411][T11314] EXT4-fs (loop4): 1 truncate cleaned up [ 134.914808][T11314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.978321][ T3420] infiniband syb2: ib_query_port failed (-19) [ 135.322201][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.365899][T11331] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3036'. [ 135.381794][T11333] loop4: detected capacity change from 0 to 764 [ 135.394939][T11333] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 135.444578][T11342] loop5: detected capacity change from 0 to 128 [ 135.453257][T11342] FAT-fs (loop5): bogus number of reserved sectors [ 135.459861][T11342] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 135.469257][T11342] FAT-fs (loop5): Can't find a valid FAT filesystem [ 135.575383][T11359] FAULT_INJECTION: forcing a failure. [ 135.575383][T11359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.588503][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.5.3046 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.588610][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.588624][T11359] Call Trace: [ 135.588631][T11359] [ 135.588667][T11359] __dump_stack+0x1d/0x30 [ 135.588687][T11359] dump_stack_lvl+0xe8/0x140 [ 135.588705][T11359] dump_stack+0x15/0x1b [ 135.588721][T11359] should_fail_ex+0x265/0x280 [ 135.588751][T11359] should_fail+0xb/0x20 [ 135.588793][T11359] should_fail_usercopy+0x1a/0x20 [ 135.588816][T11359] _copy_from_user+0x1c/0xb0 [ 135.588843][T11359] kstrtouint_from_user+0x69/0xf0 [ 135.588862][T11359] ? 0xffffffff81000000 [ 135.588914][T11359] ? selinux_file_permission+0x1e4/0x320 [ 135.588997][T11359] proc_fail_nth_write+0x50/0x160 [ 135.589074][T11359] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.589107][T11359] vfs_write+0x269/0x960 [ 135.589129][T11359] ? vfs_read+0x4e6/0x770 [ 135.589201][T11359] ? __rcu_read_unlock+0x4f/0x70 [ 135.589229][T11359] ? __fget_files+0x184/0x1c0 [ 135.589336][T11359] ksys_write+0xda/0x1a0 [ 135.589359][T11359] __x64_sys_write+0x40/0x50 [ 135.589384][T11359] x64_sys_call+0x2802/0x3000 [ 135.589415][T11359] do_syscall_64+0xd2/0x200 [ 135.589439][T11359] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.589494][T11359] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 135.589538][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.589560][T11359] RIP: 0033:0x7fca6844e17f [ 135.589573][T11359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 135.589589][T11359] RSP: 002b:00007fca66eb7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 135.589606][T11359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca6844e17f [ 135.589618][T11359] RDX: 0000000000000001 RSI: 00007fca66eb70a0 RDI: 0000000000000003 [ 135.589704][T11359] RBP: 00007fca66eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.589717][T11359] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 135.589730][T11359] R13: 00007fca686a6038 R14: 00007fca686a5fa0 R15: 00007ffde71e8278 [ 135.589750][T11359] [ 135.871957][T11365] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3048'. [ 135.894289][T11371] FAULT_INJECTION: forcing a failure. [ 135.894289][T11371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.907393][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.2.3052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.907447][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.907460][T11371] Call Trace: [ 135.907467][T11371] [ 135.907475][T11371] __dump_stack+0x1d/0x30 [ 135.907531][T11371] dump_stack_lvl+0xe8/0x140 [ 135.907605][T11371] dump_stack+0x15/0x1b [ 135.907698][T11371] should_fail_ex+0x265/0x280 [ 135.907726][T11371] should_fail+0xb/0x20 [ 135.907755][T11371] should_fail_usercopy+0x1a/0x20 [ 135.907780][T11371] _copy_from_user+0x1c/0xb0 [ 135.907847][T11371] __sys_bpf+0x183/0x7c0 [ 135.907871][T11371] __x64_sys_bpf+0x41/0x50 [ 135.907902][T11371] x64_sys_call+0x2aee/0x3000 [ 135.907958][T11371] do_syscall_64+0xd2/0x200 [ 135.907979][T11371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.908005][T11371] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 135.908033][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.908058][T11371] RIP: 0033:0x7fcf3945f6c9 [ 135.908073][T11371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.908093][T11371] RSP: 002b:00007fcf37ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.908115][T11371] RAX: ffffffffffffffda RBX: 00007fcf396b5fa0 RCX: 00007fcf3945f6c9 [ 135.908129][T11371] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 135.908168][T11371] RBP: 00007fcf37ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 135.908181][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.908192][T11371] R13: 00007fcf396b6038 R14: 00007fcf396b5fa0 R15: 00007ffcad7a0d68 [ 135.908209][T11371] [ 136.241153][T11393] FAULT_INJECTION: forcing a failure. [ 136.241153][T11393] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.254473][T11393] CPU: 0 UID: 0 PID: 11393 Comm: syz.4.3057 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.254503][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.254514][T11393] Call Trace: [ 136.254563][T11393] [ 136.254570][T11393] __dump_stack+0x1d/0x30 [ 136.254594][T11393] dump_stack_lvl+0xe8/0x140 [ 136.254654][T11393] dump_stack+0x15/0x1b [ 136.254670][T11393] should_fail_ex+0x265/0x280 [ 136.254701][T11393] should_fail_alloc_page+0xf2/0x100 [ 136.254804][T11393] __alloc_frozen_pages_noprof+0xff/0x360 [ 136.254842][T11393] alloc_pages_mpol+0xb3/0x260 [ 136.254882][T11393] vma_alloc_folio_noprof+0x1aa/0x300 [ 136.254902][T11393] handle_mm_fault+0xec2/0x2be0 [ 136.254925][T11393] ? vma_start_read+0x141/0x1f0 [ 136.255037][T11393] do_user_addr_fault+0x630/0x1080 [ 136.255077][T11393] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.255132][T11393] exc_page_fault+0x62/0xa0 [ 136.255164][T11393] asm_exc_page_fault+0x26/0x30 [ 136.255243][T11393] RIP: 0033:0x7f9ae4f5cbbb [ 136.255258][T11393] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 136.255273][T11393] RSP: 002b:00007f9ae39f3e10 EFLAGS: 00010246 [ 136.255288][T11393] RAX: 00007f9ae39f5f30 RBX: 00007f9ae51d7640 RCX: 0000000000000000 [ 136.255374][T11393] RDX: 00007f9ae39f5f78 RSI: 00007f9ae500edf8 RDI: 00007f9ae39f3e30 [ 136.255393][T11393] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 136.255407][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.255420][T11393] R13: 00007f9ae5206128 R14: 00007f9ae5206090 R15: 00007ffd6a116678 [ 136.255439][T11393] [ 136.255450][T11393] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 136.439162][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 136.439176][ T29] audit: type=1326 audit(1763330462.726:20487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.469165][ T29] audit: type=1326 audit(1763330462.726:20488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.525372][ T29] audit: type=1326 audit(1763330462.726:20489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.548985][ T29] audit: type=1326 audit(1763330462.726:20490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.572540][ T29] audit: type=1326 audit(1763330462.726:20491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.587609][T11406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11406 comm=syz.2.3066 [ 136.596445][ T29] audit: type=1326 audit(1763330462.726:20492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.632777][ T29] audit: type=1326 audit(1763330462.756:20493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.636938][T11407] loop5: detected capacity change from 0 to 1024 [ 136.656371][ T29] audit: type=1326 audit(1763330462.756:20494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.656400][ T29] audit: type=1326 audit(1763330462.756:20495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.656423][ T29] audit: type=1326 audit(1763330462.756:20496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9adaddf6c9 code=0x7ffc0000 [ 136.710841][T11407] EXT4-fs: Ignoring removed orlov option [ 136.773158][T11413] loop4: detected capacity change from 0 to 1024 [ 136.781766][T11413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.807363][T10684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.818232][T11407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.841249][T11407] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3068'. [ 136.852926][T11407] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3068: bg 0: block 232: padding at end of block bitmap is not set [ 136.898876][T11407] EXT4-fs (loop5): Remounting filesystem read-only [ 136.905499][T11407] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 136.940132][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3078'. [ 136.950202][T11429] netlink: 'syz.0.3078': attribute type 10 has an invalid length. [ 136.958028][T11429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3078'. [ 136.967957][T11429] net_ratelimit: 40 callbacks suppressed [ 136.967970][T11429] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 137.012002][T11435] IPv6: Can't replace route, no match found [ 137.028890][T11440] netlink: 'syz.3.3082': attribute type 10 has an invalid length. [ 137.289126][T11465] FAULT_INJECTION: forcing a failure. [ 137.289126][T11465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.302272][T11465] CPU: 1 UID: 0 PID: 11465 Comm: syz.0.3091 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.302403][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.302476][T11465] Call Trace: [ 137.302483][T11465] [ 137.302493][T11465] __dump_stack+0x1d/0x30 [ 137.302517][T11465] dump_stack_lvl+0xe8/0x140 [ 137.302539][T11465] dump_stack+0x15/0x1b [ 137.302559][T11465] should_fail_ex+0x265/0x280 [ 137.302618][T11465] should_fail+0xb/0x20 [ 137.302663][T11465] should_fail_usercopy+0x1a/0x20 [ 137.302686][T11465] _copy_from_user+0x1c/0xb0 [ 137.302713][T11465] ___sys_sendmsg+0xc1/0x1d0 [ 137.302747][T11465] __x64_sys_sendmsg+0xd4/0x160 [ 137.302771][T11465] x64_sys_call+0x191e/0x3000 [ 137.302904][T11465] do_syscall_64+0xd2/0x200 [ 137.302927][T11465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.302957][T11465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.302992][T11465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.303031][T11465] RIP: 0033:0x7f9adaddf6c9 [ 137.303047][T11465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.303066][T11465] RSP: 002b:00007f9ad9847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.303088][T11465] RAX: ffffffffffffffda RBX: 00007f9adb035fa0 RCX: 00007f9adaddf6c9 [ 137.303102][T11465] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 137.303135][T11465] RBP: 00007f9ad9847090 R08: 0000000000000000 R09: 0000000000000000 [ 137.303147][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.303159][T11465] R13: 00007f9adb036038 R14: 00007f9adb035fa0 R15: 00007ffd3588dff8 [ 137.303178][T11465] [ 137.490826][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.560851][T11473] loop5: detected capacity change from 0 to 1024 [ 137.595201][T11473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.620845][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.772570][T11487] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 137.799075][T11496] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 137.805626][T11496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.813296][T11496] vhci_hcd vhci_hcd.0: Device attached [ 137.820271][T11497] usbip_core: unknown command [ 137.825041][T11497] vhci_hcd: unknown pdu 2852385976 [ 137.830178][T11497] usbip_core: unknown command [ 137.844112][T11496] syzkaller0: entered allmulticast mode [ 137.849844][ T68] vhci_hcd: stop threads [ 137.854157][ T68] vhci_hcd: release socket [ 137.858409][T11496] syzkaller0: entered promiscuous mode [ 137.858728][ T68] vhci_hcd: disconnect device [ 137.871287][T11496] syzkaller0 (unregistering): left allmulticast mode [ 137.877986][T11496] syzkaller0 (unregistering): left promiscuous mode [ 137.921047][T11501] FAULT_INJECTION: forcing a failure. [ 137.921047][T11501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.934195][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.2.3105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.934223][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.934273][T11501] Call Trace: [ 137.934278][T11501] [ 137.934315][T11501] __dump_stack+0x1d/0x30 [ 137.934337][T11501] dump_stack_lvl+0xe8/0x140 [ 137.934362][T11501] dump_stack+0x15/0x1b [ 137.934381][T11501] should_fail_ex+0x265/0x280 [ 137.934411][T11501] should_fail+0xb/0x20 [ 137.934436][T11501] should_fail_usercopy+0x1a/0x20 [ 137.934499][T11501] strncpy_from_user+0x25/0x230 [ 137.934525][T11501] ? kmem_cache_alloc_noprof+0x242/0x480 [ 137.934568][T11501] ? getname_flags+0x80/0x3b0 [ 137.934597][T11501] getname_flags+0xae/0x3b0 [ 137.934678][T11501] io_renameat_prep+0x105/0x1b0 [ 137.934703][T11501] io_submit_sqes+0x5ef/0x1060 [ 137.934734][T11501] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 137.934809][T11501] ? 0xffffffff81000000 [ 137.934821][T11501] ? __rcu_read_unlock+0x4f/0x70 [ 137.934847][T11501] ? get_pid_task+0x96/0xd0 [ 137.934867][T11501] ? proc_fail_nth_write+0x13b/0x160 [ 137.934959][T11501] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.934984][T11501] ? vfs_write+0x7e8/0x960 [ 137.935004][T11501] ? __rcu_read_unlock+0x4f/0x70 [ 137.935025][T11501] ? __fget_files+0x184/0x1c0 [ 137.935165][T11501] ? fput+0x8f/0xc0 [ 137.935233][T11501] __x64_sys_io_uring_enter+0x78/0x90 [ 137.935301][T11501] x64_sys_call+0x2df0/0x3000 [ 137.935320][T11501] do_syscall_64+0xd2/0x200 [ 137.935339][T11501] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.935441][T11501] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.935567][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.935589][T11501] RIP: 0033:0x7fcf3945f6c9 [ 137.935661][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.935677][T11501] RSP: 002b:00007fcf37ebf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 137.935695][T11501] RAX: ffffffffffffffda RBX: 00007fcf396b5fa0 RCX: 00007fcf3945f6c9 [ 137.935768][T11501] RDX: 0000000000000483 RSI: 000000000000351e RDI: 0000000000000005 [ 137.935780][T11501] RBP: 00007fcf37ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 137.935792][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.935824][T11501] R13: 00007fcf396b6038 R14: 00007fcf396b5fa0 R15: 00007ffcad7a0d68 [ 137.935841][T11501] [ 138.293069][T11518] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 138.310119][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.318473][T11522] netlink: 'syz.0.3115': attribute type 10 has an invalid length. [ 138.328516][ T3312] bond0: (slave syz_tun): Releasing backup interface [ 138.335480][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.411133][T11523] lo speed is unknown, defaulting to 1000 [ 138.417278][T11523] wg1 speed is unknown, defaulting to 1000 [ 138.505539][T11523] chnl_net:caif_netlink_parms(): no params data found [ 138.549756][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.556836][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.564208][T11523] bridge_slave_0: entered allmulticast mode [ 138.571213][T11523] bridge_slave_0: entered promiscuous mode [ 138.578087][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.585403][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.593295][T11523] bridge_slave_1: entered allmulticast mode [ 138.599960][T11523] bridge_slave_1: entered promiscuous mode [ 138.618397][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.629346][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.651353][T11523] team0: Port device team_slave_0 added [ 138.658074][T11523] team0: Port device team_slave_1 added [ 138.675825][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.682865][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.708785][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.720904][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.727843][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.753800][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.782292][T11523] hsr_slave_0: entered promiscuous mode [ 138.788390][T11523] hsr_slave_1: entered promiscuous mode [ 138.796015][T11523] debugfs: 'hsr0' already exists in 'hsr' [ 138.801769][T11523] Cannot create hsr debugfs directory [ 138.840306][T11562] netlink: 'syz.5.3126': attribute type 10 has an invalid length. [ 138.860933][T11562] team0: Device veth0_macvtap failed to register rx_handler [ 138.977336][T11572] __nla_validate_parse: 2 callbacks suppressed [ 138.977350][T11572] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.3130'. [ 139.010272][T11572] netlink: zone id is out of range [ 139.015485][T11572] netlink: zone id is out of range [ 139.038559][T11572] netlink: del zone limit has 8 unknown bytes [ 139.080350][T11577] FAULT_INJECTION: forcing a failure. [ 139.080350][T11577] name failslab, interval 1, probability 0, space 0, times 0 [ 139.093039][T11577] CPU: 1 UID: 0 PID: 11577 Comm: syz.0.3132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.093090][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.093156][T11577] Call Trace: [ 139.093163][T11577] [ 139.093171][T11577] __dump_stack+0x1d/0x30 [ 139.093196][T11577] dump_stack_lvl+0xe8/0x140 [ 139.093265][T11577] dump_stack+0x15/0x1b [ 139.093281][T11577] should_fail_ex+0x265/0x280 [ 139.093309][T11577] should_failslab+0x8c/0xb0 [ 139.093335][T11577] kmem_cache_alloc_noprof+0x50/0x480 [ 139.093393][T11577] ? getname_flags+0x80/0x3b0 [ 139.093423][T11577] getname_flags+0x80/0x3b0 [ 139.093451][T11577] do_sys_openat2+0x60/0x110 [ 139.093531][T11577] __x64_sys_openat+0xf2/0x120 [ 139.093552][T11577] x64_sys_call+0x2eab/0x3000 [ 139.093650][T11577] do_syscall_64+0xd2/0x200 [ 139.093673][T11577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.093697][T11577] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.093735][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.093810][T11577] RIP: 0033:0x7f9adaddf6c9 [ 139.093826][T11577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.093881][T11577] RSP: 002b:00007f9ad9847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.093902][T11577] RAX: ffffffffffffffda RBX: 00007f9adb035fa0 RCX: 00007f9adaddf6c9 [ 139.093914][T11577] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 139.093925][T11577] RBP: 00007f9ad9847090 R08: 0000000000000000 R09: 0000000000000000 [ 139.093936][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.093947][T11577] R13: 00007f9adb036038 R14: 00007f9adb035fa0 R15: 00007ffd3588dff8 [ 139.093981][T11577] [ 139.274446][T11578] loop5: detected capacity change from 0 to 1024 [ 139.298975][T11578] EXT4-fs: Ignoring removed orlov option [ 139.319071][T11578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.329777][T11523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.340535][T11523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.341920][T11578] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3131'. [ 139.360081][T11523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.372373][T11523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.438681][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.454370][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.462350][T11609] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.471578][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.478655][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.500325][T11609] rdma_rxe: rxe_newlink: failed to add bond0 [ 139.512052][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.519233][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.595199][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.681705][T11523] veth0_vlan: entered promiscuous mode [ 139.690141][T11523] veth1_vlan: entered promiscuous mode [ 139.715471][T11523] veth0_macvtap: entered promiscuous mode [ 139.726711][T11523] veth1_macvtap: entered promiscuous mode [ 139.738226][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.752009][T11523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.766136][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.783108][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.809089][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.829644][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.911132][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.930074][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3155'. [ 140.048713][T11661] netlink: 'syz.2.3157': attribute type 4 has an invalid length. [ 140.056474][T11661] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3157'. [ 140.112623][T11661] .`: renamed from bond0 (while UP) [ 140.311981][T11669] lo speed is unknown, defaulting to 1000 [ 140.348122][T11669] wg1 speed is unknown, defaulting to 1000 [ 140.421608][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3163'. [ 140.442112][T11693] netlink: 'syz.2.3165': attribute type 10 has an invalid length. [ 140.473539][T11693] team0: Device veth0_macvtap failed to register rx_handler [ 140.492762][T11669] chnl_net:caif_netlink_parms(): no params data found [ 140.538068][T11703] FAULT_INJECTION: forcing a failure. [ 140.538068][T11703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.551496][T11703] CPU: 1 UID: 0 PID: 11703 Comm: syz.5.3169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.551557][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.551571][T11703] Call Trace: [ 140.551578][T11703] [ 140.551585][T11703] __dump_stack+0x1d/0x30 [ 140.551744][T11703] dump_stack_lvl+0xe8/0x140 [ 140.551767][T11703] dump_stack+0x15/0x1b [ 140.551787][T11703] should_fail_ex+0x265/0x280 [ 140.551858][T11703] should_fail_alloc_page+0xf2/0x100 [ 140.551891][T11703] __alloc_frozen_pages_noprof+0xff/0x360 [ 140.551928][T11703] alloc_pages_mpol+0xb3/0x260 [ 140.551991][T11703] folio_alloc_mpol_noprof+0x39/0x80 [ 140.552015][T11703] shmem_get_folio_gfp+0x3cf/0xd60 [ 140.552050][T11703] shmem_write_begin+0xa8/0x190 [ 140.552124][T11703] generic_perform_write+0x184/0x490 [ 140.552198][T11703] shmem_file_write_iter+0xc5/0xf0 [ 140.552290][T11703] iter_file_splice_write+0x666/0xa60 [ 140.552327][T11703] ? __pfx_iter_file_splice_write+0x10/0x10 [ 140.552352][T11703] do_splice+0x972/0x10b0 [ 140.552385][T11703] ? pipe_clear_nowait+0x39/0xf0 [ 140.552488][T11703] __se_sys_splice+0x26c/0x3a0 [ 140.552522][T11703] __x64_sys_splice+0x78/0x90 [ 140.552545][T11703] x64_sys_call+0x28a7/0x3000 [ 140.552565][T11703] do_syscall_64+0xd2/0x200 [ 140.552627][T11703] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.552663][T11703] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 140.552723][T11703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.552838][T11703] RIP: 0033:0x7fca6844f6c9 [ 140.552854][T11703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.552871][T11703] RSP: 002b:00007fca66eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 140.552889][T11703] RAX: ffffffffffffffda RBX: 00007fca686a5fa0 RCX: 00007fca6844f6c9 [ 140.552901][T11703] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 140.552964][T11703] RBP: 00007fca66eb7090 R08: 0000000000200002 R09: 0000000000000000 [ 140.552978][T11703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.552990][T11703] R13: 00007fca686a6038 R14: 00007fca686a5fa0 R15: 00007ffde71e8278 [ 140.553074][T11703] [ 140.846858][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.854019][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.862001][T11669] bridge_slave_0: entered allmulticast mode [ 140.871693][T11669] bridge_slave_0: entered promiscuous mode [ 140.885673][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.892846][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.909648][T11669] bridge_slave_1: entered allmulticast mode [ 140.918588][T11669] bridge_slave_1: entered promiscuous mode [ 140.964488][T11724] loop5: detected capacity change from 0 to 1764 [ 140.973086][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.984388][T11730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3181'. [ 140.987157][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.025144][T11669] team0: Port device team_slave_0 added [ 141.032212][T11669] team0: Port device team_slave_1 added [ 141.048632][T11715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.049030][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.064238][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.071710][T11715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.090369][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.111670][T11739] FAULT_INJECTION: forcing a failure. [ 141.111670][T11739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.118653][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.124760][T11739] CPU: 1 UID: 0 PID: 11739 Comm: syz.2.3185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.124790][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.124834][T11739] Call Trace: [ 141.124841][T11739] [ 141.124848][T11739] __dump_stack+0x1d/0x30 [ 141.124871][T11739] dump_stack_lvl+0xe8/0x140 [ 141.124891][T11739] dump_stack+0x15/0x1b [ 141.124909][T11739] should_fail_ex+0x265/0x280 [ 141.125017][T11739] should_fail+0xb/0x20 [ 141.125046][T11739] should_fail_usercopy+0x1a/0x20 [ 141.125109][T11739] _copy_from_user+0x1c/0xb0 [ 141.125134][T11739] ___sys_sendmsg+0xc1/0x1d0 [ 141.125164][T11739] __x64_sys_sendmsg+0xd4/0x160 [ 141.125186][T11739] x64_sys_call+0x191e/0x3000 [ 141.125233][T11739] do_syscall_64+0xd2/0x200 [ 141.125261][T11739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.125289][T11739] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.125321][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.125344][T11739] RIP: 0033:0x7fcf3945f6c9 [ 141.125430][T11739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.125468][T11739] RSP: 002b:00007fcf37ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.125522][T11739] RAX: ffffffffffffffda RBX: 00007fcf396b5fa0 RCX: 00007fcf3945f6c9 [ 141.125535][T11739] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 141.125629][T11739] RBP: 00007fcf37ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 141.125641][T11739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.125654][T11739] R13: 00007fcf396b6038 R14: 00007fcf396b5fa0 R15: 00007ffcad7a0d68 [ 141.125672][T11739] [ 141.301458][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.301553][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.336666][T11742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11742 comm=syz.2.3186 [ 141.356246][T11748] rdma_rxe: rxe_newlink: failed to add bond0 [ 141.370050][T11669] hsr_slave_0: entered promiscuous mode [ 141.376370][T11669] hsr_slave_1: entered promiscuous mode [ 141.397753][T11669] debugfs: 'hsr0' already exists in 'hsr' [ 141.403589][T11669] Cannot create hsr debugfs directory [ 141.403690][T11755] loop5: detected capacity change from 0 to 1024 [ 141.418588][T11755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.441423][T11757] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 141.454705][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.466079][T11757] rdma_rxe: rxe_newlink: failed to add bond0 [ 141.501471][T11669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.511843][T11669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.560885][T11669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.571188][T11669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.592906][ T29] kauditd_printk_skb: 946 callbacks suppressed [ 141.592920][ T29] audit: type=1326 audit(1763330467.876:21443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.622997][ T29] audit: type=1326 audit(1763330467.876:21444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.646630][ T29] audit: type=1326 audit(1763330467.876:21445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.670352][T11774] loop5: detected capacity change from 0 to 512 [ 141.670940][T11774] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.676855][ T29] audit: type=1326 audit(1763330467.876:21446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.687950][T11774] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, [ 141.713188][ T29] audit: type=1326 audit(1763330467.876:21447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.713220][ T29] audit: type=1326 audit(1763330467.876:21448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.713265][ T29] audit: type=1326 audit(1763330467.876:21449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.713293][ T29] audit: type=1326 audit(1763330467.876:21450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11763 comm="syz.5.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6844f6c9 code=0x7ffc0000 [ 141.715142][ T29] audit: type=1400 audit(1763330467.946:21451): avc: denied { shutdown } for pid=11773 comm="syz.5.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.722052][T11774] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 141.845928][T11774] EXT4-fs (loop5): 1 truncate cleaned up [ 141.852103][T11774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.865164][T11669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.875505][T11669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.916761][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.942742][ T29] audit: type=1326 audit(1763330468.226:21452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11784 comm="syz.4.3202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae4faf6c9 code=0x7ffc0000 [ 141.967921][ T9710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.979537][ T9710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.992522][ T9710] bond0 (unregistering): Released all slaves [ 142.002725][ T9710] bond1 (unregistering): Released all slaves [ 142.021658][T11669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.032102][T11669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.095273][T11800] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.120837][ T9710] hsr_slave_0: left promiscuous mode [ 142.138340][ T9710] hsr_slave_1: left promiscuous mode [ 142.163936][T11807] rdma_rxe: rxe_newlink: failed to add bond0 [ 142.178671][T11806] loop5: detected capacity change from 0 to 764 [ 142.188793][T11799] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 142.196252][T11806] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 142.196717][T11669] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.220455][T11669] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.229526][T11669] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.241456][T11669] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.280218][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.293376][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.306484][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.313693][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.336115][T11669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.346558][T11669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.380623][T11826] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3214'. [ 142.389682][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3214'. [ 142.408973][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3214'. [ 142.420595][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.427740][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.470859][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3214'. [ 142.485292][ T9710] IPVS: stop unused estimator thread 0... [ 142.543286][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.751658][T11669] veth0_vlan: entered promiscuous mode [ 142.767990][T11669] veth1_vlan: entered promiscuous mode [ 142.807727][T11669] veth0_macvtap: entered promiscuous mode [ 142.815594][T11669] veth1_macvtap: entered promiscuous mode [ 142.828667][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.877453][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.901233][ T9692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.930953][ T9692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.944083][ T9692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.953231][ T9692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.089375][T11854] FAULT_INJECTION: forcing a failure. [ 143.089375][T11854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.102632][T11854] CPU: 0 UID: 0 PID: 11854 Comm: syz.3.3220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.102662][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.102755][T11854] Call Trace: [ 143.102760][T11854] [ 143.102767][T11854] __dump_stack+0x1d/0x30 [ 143.102834][T11854] dump_stack_lvl+0xe8/0x140 [ 143.102853][T11854] dump_stack+0x15/0x1b [ 143.102914][T11854] should_fail_ex+0x265/0x280 [ 143.102947][T11854] should_fail+0xb/0x20 [ 143.102983][T11854] should_fail_usercopy+0x1a/0x20 [ 143.103003][T11854] _copy_from_user+0x1c/0xb0 [ 143.103026][T11854] __sys_bpf+0x183/0x7c0 [ 143.103049][T11854] __x64_sys_bpf+0x41/0x50 [ 143.103152][T11854] x64_sys_call+0x2aee/0x3000 [ 143.103177][T11854] do_syscall_64+0xd2/0x200 [ 143.103200][T11854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.103228][T11854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.103264][T11854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.103284][T11854] RIP: 0033:0x7f2b136af6c9 [ 143.103319][T11854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.103337][T11854] RSP: 002b:00007f2b12117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.103373][T11854] RAX: ffffffffffffffda RBX: 00007f2b13905fa0 RCX: 00007f2b136af6c9 [ 143.103384][T11854] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 143.103445][T11854] RBP: 00007f2b12117090 R08: 0000000000000000 R09: 0000000000000000 [ 143.103457][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.103471][T11854] R13: 00007f2b13906038 R14: 00007f2b13905fa0 R15: 00007ffd0bd182d8 [ 143.103490][T11854] [ 143.104799][T11856] loop4: detected capacity change from 0 to 1024 [ 143.311056][T11856] EXT4-fs: inline encryption not supported [ 143.344931][T11856] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 143.367014][T11871] netlink: 'syz.0.3223': attribute type 39 has an invalid length. [ 143.465005][T11878] vhci_hcd: invalid port number 96 [ 143.470263][T11878] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 143.615772][T11897] bridge_slave_0: default FDB implementation only supports local addresses [ 143.619200][T11899] loop5: detected capacity change from 0 to 512 [ 144.433988][T11914] FAULT_INJECTION: forcing a failure. [ 144.433988][T11914] name failslab, interval 1, probability 0, space 0, times 0 [ 144.446666][T11914] CPU: 1 UID: 0 PID: 11914 Comm: syz.4.3241 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.446711][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.446781][T11914] Call Trace: [ 144.446824][T11914] [ 144.446832][T11914] __dump_stack+0x1d/0x30 [ 144.446854][T11914] dump_stack_lvl+0xe8/0x140 [ 144.446873][T11914] dump_stack+0x15/0x1b [ 144.446891][T11914] should_fail_ex+0x265/0x280 [ 144.446982][T11914] ? v9fs_mount+0x51/0x5c0 [ 144.447001][T11914] should_failslab+0x8c/0xb0 [ 144.447031][T11914] __kmalloc_cache_noprof+0x4c/0x4a0 [ 144.447064][T11914] v9fs_mount+0x51/0x5c0 [ 144.447083][T11914] ? selinux_capable+0x31/0x40 [ 144.447106][T11914] ? __pfx_v9fs_mount+0x10/0x10 [ 144.447172][T11914] legacy_get_tree+0x78/0xd0 [ 144.447197][T11914] vfs_get_tree+0x57/0x1d0 [ 144.447219][T11914] do_new_mount+0x24d/0x660 [ 144.447240][T11914] ? security_capable+0x83/0x90 [ 144.447301][T11914] path_mount+0x4a5/0xb70 [ 144.447394][T11914] ? user_path_at+0x109/0x130 [ 144.447413][T11914] __se_sys_mount+0x28c/0x2e0 [ 144.447498][T11914] ? fput+0x8f/0xc0 [ 144.447553][T11914] __x64_sys_mount+0x67/0x80 [ 144.447574][T11914] x64_sys_call+0x2b51/0x3000 [ 144.447594][T11914] do_syscall_64+0xd2/0x200 [ 144.447612][T11914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.447639][T11914] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.447728][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.447749][T11914] RIP: 0033:0x7f9ae4faf6c9 [ 144.447845][T11914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.447863][T11914] RSP: 002b:00007f9ae3a17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.447880][T11914] RAX: ffffffffffffffda RBX: 00007f9ae5205fa0 RCX: 00007f9ae4faf6c9 [ 144.447894][T11914] RDX: 0000200000000640 RSI: 0000200000000000 RDI: 0000000000000000 [ 144.447907][T11914] RBP: 00007f9ae3a17090 R08: 0000200000000200 R09: 0000000000000000 [ 144.447921][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.447932][T11914] R13: 00007f9ae5206038 R14: 00007f9ae5205fa0 R15: 00007ffd6a116678 [ 144.448002][T11914] [ 144.710137][T11923] netlink: 'syz.4.3246': attribute type 10 has an invalid length. [ 144.735947][T11923] team0: Device veth0_macvtap failed to register rx_handler [ 144.774948][T11933] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 144.782557][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.793928][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.835892][T11936] __nla_validate_parse: 6 callbacks suppressed [ 144.835906][T11936] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3248'. [ 144.887426][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3256'. [ 144.888145][T11945] loop5: detected capacity change from 0 to 512 [ 144.903789][T11945] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 144.915222][T11945] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.922258][T11945] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3255: Block bitmap for bg 0 marked uninitialized [ 144.935832][T11945] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 144.944923][T11945] EXT4-fs (loop5): 1 orphan inode deleted [ 144.951336][T11945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.966360][T11945] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 144.976073][T11945] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 144.985472][T11945] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3255: Block bitmap for bg 0 marked uninitialized [ 145.004864][T11945] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3255: Block bitmap for bg 0 marked uninitialized [ 145.018492][T11945] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3255: Block bitmap for bg 0 marked uninitialized [ 145.032004][T11945] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3255: Block bitmap for bg 0 marked uninitialized [ 145.046839][T11945] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.3255: path /363/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 145.075068][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.149163][T11963] loop5: detected capacity change from 0 to 764 [ 145.158653][T11963] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.198168][T11969] loop5: detected capacity change from 0 to 1024 [ 145.205013][T11969] EXT4-fs: inline encryption not supported [ 145.221082][T11969] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 145.392020][T11989] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3276'. [ 145.445816][T11997] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.454990][T11997] rdma_rxe: rxe_newlink: failed to add bond0 [ 145.661059][T12019] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.669070][T12019] rdma_rxe: rxe_newlink: failed to add bond0 [ 145.748483][T12028] FAULT_INJECTION: forcing a failure. [ 145.748483][T12028] name failslab, interval 1, probability 0, space 0, times 0 [ 145.758798][T12030] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.761133][T12028] CPU: 1 UID: 0 PID: 12028 Comm: syz.3.3292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.761159][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.761171][T12028] Call Trace: [ 145.761177][T12028] [ 145.761184][T12028] __dump_stack+0x1d/0x30 [ 145.761206][T12028] dump_stack_lvl+0xe8/0x140 [ 145.761227][T12028] dump_stack+0x15/0x1b [ 145.761243][T12028] should_fail_ex+0x265/0x280 [ 145.761274][T12028] should_failslab+0x8c/0xb0 [ 145.761300][T12028] kmem_cache_alloc_noprof+0x50/0x480 [ 145.761327][T12028] ? vm_area_alloc+0x2c/0xb0 [ 145.761355][T12028] vm_area_alloc+0x2c/0xb0 [ 145.761382][T12028] mmap_region+0xa99/0x1620 [ 145.761422][T12028] do_mmap+0x9b3/0xbe0 [ 145.761442][T12028] vm_mmap_pgoff+0x17a/0x2e0 [ 145.761471][T12028] ksys_mmap_pgoff+0xc2/0x310 [ 145.761488][T12028] ? __x64_sys_mmap+0x49/0x70 [ 145.761512][T12028] x64_sys_call+0x14a3/0x3000 [ 145.761533][T12028] do_syscall_64+0xd2/0x200 [ 145.761552][T12028] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.761579][T12028] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.761608][T12028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.761629][T12028] RIP: 0033:0x7f2b136af703 [ 145.761643][T12028] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 145.761660][T12028] RSP: 002b:00007f2b12116e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 145.761679][T12028] RAX: ffffffffffffffda RBX: 000000000000024a RCX: 00007f2b136af703 [ 145.761691][T12028] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 145.761703][T12028] RBP: 0000200000000502 R08: 00000000ffffffff R09: 0000000000000000 [ 145.761722][T12028] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 145.761734][T12028] R13: 00007f2b12116ef0 R14: 00007f2b12116eb0 R15: 0000200000000a00 [ 145.761751][T12028] [ 145.990479][T12039] warn_alloc: 2 callbacks suppressed [ 145.990493][T12039] syz.0.3297: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 146.010406][T12039] CPU: 0 UID: 0 PID: 12039 Comm: syz.0.3297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.010423][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.010431][T12039] Call Trace: [ 146.010437][T12039] [ 146.010442][T12039] __dump_stack+0x1d/0x30 [ 146.010456][T12039] dump_stack_lvl+0xe8/0x140 [ 146.010468][T12039] dump_stack+0x15/0x1b [ 146.010478][T12039] warn_alloc+0x12b/0x1a0 [ 146.010503][T12039] ? bpf_trace_run3+0xfd/0x1d0 [ 146.010553][T12039] ? bpf_trace_run3+0x12c/0x1d0 [ 146.010573][T12039] __vmalloc_node_range_noprof+0x9d/0xed0 [ 146.010591][T12039] ? __list_del_entry_valid_or_report+0x65/0x130 [ 146.010653][T12039] ? kmem_cache_free+0xe4/0x3d0 [ 146.010704][T12039] ? __rcu_read_unlock+0x4f/0x70 [ 146.010721][T12039] ? avc_has_perm_noaudit+0x1b1/0x200 [ 146.010733][T12039] ? should_fail_ex+0x30/0x280 [ 146.010849][T12039] ? xskq_create+0x36/0xe0 [ 146.010901][T12039] vmalloc_user_noprof+0x7d/0xb0 [ 146.010919][T12039] ? xskq_create+0x80/0xe0 [ 146.010931][T12039] xskq_create+0x80/0xe0 [ 146.010950][T12039] xsk_init_queue+0x95/0xf0 [ 146.010963][T12039] xsk_setsockopt+0x3f5/0x640 [ 146.011045][T12039] ? __pfx_xsk_setsockopt+0x10/0x10 [ 146.011058][T12039] __sys_setsockopt+0x184/0x200 [ 146.011170][T12039] ? __secure_computing+0x82/0x150 [ 146.011187][T12039] __x64_sys_setsockopt+0x64/0x80 [ 146.011204][T12039] x64_sys_call+0x20ec/0x3000 [ 146.011217][T12039] do_syscall_64+0xd2/0x200 [ 146.011241][T12039] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.011256][T12039] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.011316][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.011369][T12039] RIP: 0033:0x7f0d2978f6c9 [ 146.011379][T12039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.011390][T12039] RSP: 002b:00007f0d281f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.011423][T12039] RAX: ffffffffffffffda RBX: 00007f0d299e5fa0 RCX: 00007f0d2978f6c9 [ 146.011430][T12039] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 146.011437][T12039] RBP: 00007f0d29811f91 R08: 0000000000000004 R09: 0000000000000000 [ 146.011444][T12039] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.011504][T12039] R13: 00007f0d299e6038 R14: 00007f0d299e5fa0 R15: 00007ffeea8fff98 [ 146.011514][T12039] [ 146.011518][T12039] Mem-Info: [ 146.097626][T12047] tipc: New replicast peer: 255.255.255.255 [ 146.101388][T12039] active_anon:4181 inactive_anon:12 isolated_anon:0 [ 146.101388][T12039] active_file:19551 inactive_file:2334 isolated_file:0 [ 146.101388][T12039] unevictable:0 dirty:489 writeback:4 [ 146.101388][T12039] slab_reclaimable:3660 slab_unreclaimable:22000 [ 146.101388][T12039] mapped:29604 shmem:258 pagetables:1207 [ 146.101388][T12039] sec_pagetables:0 bounce:0 [ 146.101388][T12039] kernel_misc_reclaimable:0 [ 146.101388][T12039] free:1878378 free_pcp:9082 free_cma:0 [ 146.106495][T12047] tipc: Enabled bearer , priority 10 [ 146.110759][T12039] Node 0 active_anon:16724kB inactive_anon:48kB active_file:78204kB inactive_file:9336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118416kB dirty:1956kB writeback:16kB shmem:1032kB kernel_stack:5776kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 146.110881][T12039] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.120916][T12047] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3300'. [ 146.124316][T12039] lowmem_reserve[]: 0 2881 7859 7859 [ 146.129751][T12047] 0X: renamed from caif0 [ 146.134361][T12039] [ 146.134369][T12039] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 146.171934][T12048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50437 sclass=netlink_route_socket pid=12048 comm=syz.5.3300 [ 146.175658][T12039] lowmem_reserve[]: 0 0 4978 4978 [ 146.175689][T12039] Node 0 Normal free:4551424kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16724kB inactive_anon:48kB active_file:78204kB inactive_file:9336kB unevictable:0kB writepending:1972kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32776kB local_pcp:5788kB free_cma:0kB [ 146.466995][T12039] lowmem_reserve[]: 0 0 0 0 [ 146.471574][T12039] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.484205][T12039] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 146.500313][T12039] Node 0 Normal: 27*4kB (UE) 138*8kB (UME) 163*16kB (UME) 428*32kB (UME) 312*64kB (UME) 295*128kB (UME) 131*256kB (UME) 53*512kB (UME) 58*1024kB (UME) 49*2048kB (UME) 1039*4096kB (UM) = 4551404kB [ 146.507724][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3303'. [ 146.519631][T12039] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 146.519653][T12039] 22091 total pagecache pages [ 146.519660][T12039] 4 pages in swap cache [ 146.519667][T12039] Free swap = 124888kB [ 146.519674][T12039] Total swap = 124996kB [ 146.519682][T12039] 2097051 pages RAM [ 146.519688][T12039] 0 pages HighMem/MovableOnly [ 146.519694][T12039] 81087 pages reserved [ 146.566190][T12066] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.577010][T12047] 0X: entered allmulticast mode [ 146.582371][T12047] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 146.634917][T12073] loop4: detected capacity change from 0 to 1024 [ 146.641880][T12073] EXT4-fs: Ignoring removed orlov option [ 146.649608][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.657047][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.664655][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.681019][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.688641][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.688973][T12073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.696017][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.716038][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.723463][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.730866][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.738277][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.746230][ T3372] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 146.755983][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 146.755994][ T29] audit: type=1400 audit(1763330473.026:21880): avc: denied { listen } for pid=12075 comm="syz.5.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.792559][T12084] lo speed is unknown, defaulting to 1000 [ 146.799275][T12084] wg1 speed is unknown, defaulting to 1000 [ 146.806310][T10684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.844169][ T9692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.854516][ T9692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.877809][T12095] FAULT_INJECTION: forcing a failure. [ 146.877809][T12095] name failslab, interval 1, probability 0, space 0, times 0 [ 146.885515][ T29] audit: type=1326 audit(1763330473.156:21881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae4faf6c9 code=0x7ffc0000 [ 146.890564][T12095] CPU: 1 UID: 0 PID: 12095 Comm: syz.4.3316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.890588][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.890598][T12095] Call Trace: [ 146.890603][T12095] [ 146.890618][T12095] __dump_stack+0x1d/0x30 [ 146.890642][T12095] dump_stack_lvl+0xe8/0x140 [ 146.890728][T12095] dump_stack+0x15/0x1b [ 146.890746][T12095] should_fail_ex+0x265/0x280 [ 146.890779][T12095] should_failslab+0x8c/0xb0 [ 146.890862][T12095] kmem_cache_alloc_noprof+0x50/0x480 [ 146.890891][T12095] ? audit_log_start+0x342/0x720 [ 146.890913][T12095] audit_log_start+0x342/0x720 [ 146.890934][T12095] ? kstrtouint+0x76/0xc0 [ 146.891042][T12095] audit_seccomp+0x48/0x100 [ 146.891072][T12095] ? __seccomp_filter+0x82d/0x1250 [ 146.891100][T12095] __seccomp_filter+0x83e/0x1250 [ 146.891127][T12095] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.891219][T12095] ? vfs_write+0x7e8/0x960 [ 146.891259][T12095] ? __rcu_read_unlock+0x4f/0x70 [ 146.891284][T12095] ? __fget_files+0x184/0x1c0 [ 146.891313][T12095] __secure_computing+0x82/0x150 [ 146.891393][T12095] syscall_trace_enter+0xcf/0x1e0 [ 146.891514][T12095] do_syscall_64+0xac/0x200 [ 146.891534][T12095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.891561][T12095] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.891593][T12095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.891687][T12095] RIP: 0033:0x7f9ae4faf6c9 [ 146.891702][T12095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.891720][T12095] RSP: 002b:00007f9ae3a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 146.891769][T12095] RAX: ffffffffffffffda RBX: 00007f9ae5205fa0 RCX: 00007f9ae4faf6c9 [ 146.891783][T12095] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffffffffffff [ 146.891795][T12095] RBP: 00007f9ae3a17090 R08: 0000000000000000 R09: 0000000000000000 [ 146.891808][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.891820][T12095] R13: 00007f9ae5206038 R14: 00007f9ae5205fa0 R15: 00007ffd6a116678 [ 146.891838][T12095] [ 146.891845][T12095] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 146.914148][ T29] audit: type=1326 audit(1763330473.156:21882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae4faf6c9 code=0x7ffc0000 [ 146.914173][ T29] audit: type=1326 audit(1763330473.156:21883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ae4fadf10 code=0x7ffc0000 [ 146.914195][ T29] audit: type=1326 audit(1763330473.156:21884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9ae4fae17f code=0x7ffc0000 [ 147.202074][T12095] audit: out of memory in audit_log_start [ 147.202827][ T29] audit: type=1326 audit(1763330473.496:21885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9ae4fae0dc code=0x7ffc0000 [ 147.231295][ T29] audit: type=1326 audit(1763330473.496:21886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9ae4fae17f code=0x7ffc0000 [ 147.254735][ T29] audit: type=1326 audit(1763330473.496:21887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9ae4fae32a code=0x7ffc0000 [ 147.278216][ T3394] tipc: Node number set to 1269740510 [ 147.287761][T12100] netlink: 'syz.3.3318': attribute type 13 has an invalid length. [ 147.331051][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.338313][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.383344][T12100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.394817][T12100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.501353][ T9692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.511762][ T9692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.521963][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3330'. [ 147.530378][T12126] 9pnet: Could not find request transport: fd [ 149.851491][T12245] __dump_stack+0x1d/0x30 [ 149.851514][T12245] dump_stack_lvl+0xe8/0x140 [ 149.851532][T12245] dump_stack+0x15/0x1b [ 149.851548][T12245] should_fail_ex+0x265/0x280 [ 149.851610][T12245] should_fail+0xb/0x20 [ 149.851640][T12245] should_fail_usercopy+0x1a/0x20 [ 149.851666][T12245] _copy_from_user+0x1c/0xb0 [ 149.851700][T12245] __copy_msghdr+0x244/0x300 [ 149.851753][T12245] ___sys_sendmsg+0x109/0x1d0 [ 149.851785][T12245] __x64_sys_sendmsg+0xd4/0x160 [ 149.851809][T12245] x64_sys_call+0x191e/0x3000 [ 149.851833][T12245] do_syscall_64+0xd2/0x200 [ 149.851854][T12245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.851926][T12245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 149.851954][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.851975][T12245] RIP: 0033:0x7fca6844f6c9 [ 149.852008][T12245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.852024][T12245] RSP: 002b:00007fca66eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.852043][T12245] RAX: ffffffffffffffda RBX: 00007fca686a5fa0 RCX: 00007fca6844f6c9 [ 149.852056][T12245] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 149.852069][T12245] RBP: 00007fca66eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.852147][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.852160][T12245] R13: 00007fca686a6038 R14: 00007fca686a5fa0 R15: 00007ffde71e8278 [ 149.852179][T12245] [ 150.049431][T12253] loop5: detected capacity change from 0 to 764 [ 150.056614][T12253] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 150.168892][T12265] __nla_validate_parse: 2 callbacks suppressed [ 150.168908][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3388'. [ 150.205443][T12267] rdma_rxe: rxe_newlink: failed to add bond0 [ 150.234132][T12272] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 150.373145][T12291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3400'. [ 150.411520][ T9692] IPVS: stop unused estimator thread 0... [ 150.451290][T12296] loop5: detected capacity change from 0 to 2048 [ 150.473605][T12296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.510977][ T7134] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 150.527334][ T7134] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 150.552155][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.591947][T12307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3407'. [ 150.600999][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3407'. [ 150.616230][T12311] rdma_rxe: rxe_newlink: failed to add bond0 [ 150.632287][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'. [ 151.005328][T12329] rdma_rxe: rxe_newlink: failed to add bond0 [ 151.071600][T12335] loop5: detected capacity change from 0 to 764 [ 151.112817][T12335] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.286030][T12342] loop5: detected capacity change from 0 to 2048 [ 151.328827][T12342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.357386][T12342] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.441246][T12347] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3421: bg 0: block 345: padding at end of block bitmap is not set [ 151.456626][T12347] EXT4-fs (loop5): Remounting filesystem read-only [ 151.468527][ T9685] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 151.545079][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.563702][T12356] netlink: 'syz.3.3427': attribute type 10 has an invalid length. [ 151.572080][T12356] team0: Device veth0_macvtap failed to register rx_handler [ 151.580949][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3423'. [ 151.648869][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 151.734282][T12381] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3433'. [ 151.743366][T12381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3433'. [ 151.758363][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 151.758377][ T29] audit: type=1326 audit(1763330478.046:22785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 151.764701][T12385] FAULT_INJECTION: forcing a failure. [ 151.764701][T12385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.801512][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.0.3438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.801541][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.801554][T12385] Call Trace: [ 151.801616][T12385] [ 151.801624][T12385] __dump_stack+0x1d/0x30 [ 151.801647][T12385] dump_stack_lvl+0xe8/0x140 [ 151.801715][T12385] dump_stack+0x15/0x1b [ 151.801731][T12385] should_fail_ex+0x265/0x280 [ 151.801759][T12385] should_fail+0xb/0x20 [ 151.801788][T12385] should_fail_usercopy+0x1a/0x20 [ 151.801918][T12385] strncpy_from_user+0x25/0x230 [ 151.801945][T12385] path_setxattrat+0xeb/0x310 [ 151.802021][T12385] __x64_sys_lsetxattr+0x71/0x90 [ 151.802051][T12385] x64_sys_call+0x287b/0x3000 [ 151.802093][T12385] do_syscall_64+0xd2/0x200 [ 151.802116][T12385] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.802144][T12385] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.802276][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.802299][T12385] RIP: 0033:0x7f0d2978f6c9 [ 151.802313][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.802331][T12385] RSP: 002b:00007f0d281f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 151.802350][T12385] RAX: ffffffffffffffda RBX: 00007f0d299e5fa0 RCX: 00007f0d2978f6c9 [ 151.802363][T12385] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000000 [ 151.802452][T12385] RBP: 00007f0d281f7090 R08: 0000000000000003 R09: 0000000000000000 [ 151.802464][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.802516][T12385] R13: 00007f0d299e6038 R14: 00007f0d299e5fa0 R15: 00007ffeea8fff98 [ 151.802532][T12385] [ 151.818955][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'. [ 151.956673][T12395] loop5: detected capacity change from 0 to 512 [ 151.994014][ T29] audit: type=1326 audit(1763330478.076:22786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.017649][ T29] audit: type=1326 audit(1763330478.086:22787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.041336][ T29] audit: type=1326 audit(1763330478.086:22788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.064914][ T29] audit: type=1326 audit(1763330478.086:22789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.088540][ T29] audit: type=1326 audit(1763330478.086:22790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.112111][ T29] audit: type=1326 audit(1763330478.096:22791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.135768][ T29] audit: type=1326 audit(1763330478.106:22792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.159338][ T29] audit: type=1326 audit(1763330478.156:22793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.182902][ T29] audit: type=1326 audit(1763330478.156:22794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.2.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf39491f85 code=0x7ffc0000 [ 152.212038][T12395] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.226419][T12395] EXT4-fs (loop5): 1 truncate cleaned up [ 152.232699][T12395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.404036][T12406] loop4: detected capacity change from 0 to 1024 [ 152.411770][T12406] EXT4-fs: Ignoring removed orlov option [ 152.424514][T12395] FAULT_INJECTION: forcing a failure. [ 152.424514][T12395] name failslab, interval 1, probability 0, space 0, times 0 [ 152.437215][T12395] CPU: 0 UID: 0 PID: 12395 Comm: syz.5.3443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.437241][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.437253][T12395] Call Trace: [ 152.437259][T12395] [ 152.437299][T12395] __dump_stack+0x1d/0x30 [ 152.437394][T12395] dump_stack_lvl+0xe8/0x140 [ 152.437416][T12395] dump_stack+0x15/0x1b [ 152.437435][T12395] should_fail_ex+0x265/0x280 [ 152.437500][T12395] should_failslab+0x8c/0xb0 [ 152.437529][T12395] kmem_cache_alloc_noprof+0x50/0x480 [ 152.437599][T12395] ? getname_kernel+0x3c/0x1f0 [ 152.437631][T12395] getname_kernel+0x3c/0x1f0 [ 152.437760][T12395] kern_path+0x23/0x130 [ 152.437821][T12395] create_local_trace_uprobe+0x53/0x2c0 [ 152.437853][T12395] perf_uprobe_init+0xc0/0x150 [ 152.437878][T12395] perf_uprobe_event_init+0xc4/0x140 [ 152.437904][T12395] perf_try_init_event+0xd9/0x540 [ 152.437997][T12395] ? perf_event_alloc+0xb1c/0x1740 [ 152.438081][T12395] perf_event_alloc+0xb27/0x1740 [ 152.438112][T12395] __se_sys_perf_event_open+0x615/0x11c0 [ 152.438141][T12395] ? __rcu_read_unlock+0x4f/0x70 [ 152.438214][T12395] __x64_sys_perf_event_open+0x67/0x80 [ 152.438238][T12395] x64_sys_call+0x7bd/0x3000 [ 152.438261][T12395] do_syscall_64+0xd2/0x200 [ 152.438324][T12395] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.438383][T12395] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.438434][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.438459][T12395] RIP: 0033:0x7fca6844f6c9 [ 152.438517][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.438582][T12395] RSP: 002b:00007fca66eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 152.438603][T12395] RAX: ffffffffffffffda RBX: 00007fca686a5fa0 RCX: 00007fca6844f6c9 [ 152.438617][T12395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 152.438630][T12395] RBP: 00007fca66eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.438680][T12395] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 152.438693][T12395] R13: 00007fca686a6038 R14: 00007fca686a5fa0 R15: 00007ffde71e8278 [ 152.438709][T12395] [ 152.663342][T12406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.678427][ T7134] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.687969][T12415] loop9: detected capacity change from 0 to 7 [ 152.694767][T12415] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.703054][T12415] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.711271][T12415] loop9: unable to read partition table [ 152.716953][T12415] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.716953][T12415] ) failed (rc=-5) [ 152.748321][ C0] ================================================================== [ 152.756434][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 152.763642][ C0] [ 152.765956][ C0] read-write to 0xffff88810107c0b8 of 8 bytes by interrupt on cpu 1: [ 152.774011][ C0] wq_worker_tick+0x60/0x230 [ 152.778606][ C0] sched_tick+0x11a/0x270 [ 152.782926][ C0] update_process_times+0x15f/0x190 [ 152.788109][ C0] tick_nohz_handler+0x249/0x2d0 [ 152.793038][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 152.798225][ C0] hrtimer_interrupt+0x21a/0x460 [ 152.803154][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 152.809040][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 152.814666][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.820631][ C0] slab_update_freelist+0x6c/0x100 [ 152.825727][ C0] __slab_free+0x77/0x270 [ 152.830039][ C0] kfree+0x2d3/0x400 [ 152.833923][ C0] io_alloc_cache_free+0xc0/0xe0 [ 152.838851][ C0] io_free_alloc_caches+0x2f/0x70 [ 152.843862][ C0] io_ring_ctx_free+0x78/0x3a0 [ 152.848616][ C0] io_ring_exit_work+0x529/0x560 [ 152.853541][ C0] process_scheduled_works+0x4ce/0x9d0 [ 152.858993][ C0] worker_thread+0x582/0x770 [ 152.863562][ C0] kthread+0x489/0x510 [ 152.867616][ C0] ret_from_fork+0x122/0x1b0 [ 152.872193][ C0] ret_from_fork_asm+0x1a/0x30 [ 152.876942][ C0] [ 152.879244][ C0] read-write to 0xffff88810107c0b8 of 8 bytes by interrupt on cpu 0: [ 152.887287][ C0] wq_worker_tick+0x60/0x230 [ 152.891865][ C0] sched_tick+0x11a/0x270 [ 152.896180][ C0] update_process_times+0x15f/0x190 [ 152.901362][ C0] tick_nohz_handler+0x249/0x2d0 [ 152.906292][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 152.911478][ C0] hrtimer_interrupt+0x21a/0x460 [ 152.916403][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 152.922297][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 152.927922][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.933887][ C0] kcsan_setup_watchpoint+0x415/0x430 [ 152.939248][ C0] page_counter_uncharge+0x2e/0x60 [ 152.944352][ C0] memcg1_account_kmem+0x32/0x40 [ 152.949275][ C0] uncharge_batch+0x95/0x190 [ 152.953850][ C0] __mem_cgroup_uncharge_folios+0x86/0xb0 [ 152.959553][ C0] folios_put_refs+0x26e/0x2d0 [ 152.964299][ C0] release_pages+0x2a8/0x2f0 [ 152.968871][ C0] io_free_region+0x7b/0x160 [ 152.973445][ C0] io_ring_ctx_free+0x1ed/0x3a0 [ 152.978284][ C0] io_ring_exit_work+0x529/0x560 [ 152.983209][ C0] process_scheduled_works+0x4ce/0x9d0 [ 152.988663][ C0] worker_thread+0x582/0x770 [ 152.993235][ C0] kthread+0x489/0x510 [ 152.997299][ C0] ret_from_fork+0x122/0x1b0 [ 153.001875][ C0] ret_from_fork_asm+0x1a/0x30 [ 153.006624][ C0] [ 153.008929][ C0] value changed: 0x000000000013af10 -> 0x000000000013d620 [ 153.016015][ C0] [ 153.018318][ C0] Reported by Kernel Concurrency Sanitizer on: [ 153.024451][ C0] CPU: 0 UID: 0 PID: 9701 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.034419][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.044460][ C0] Workqueue: iou_exit io_ring_exit_work [ 153.049997][ C0] ================================================================== [ 153.099334][T10684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.