last executing test programs: 4m12.093991727s ago: executing program 2 (id=190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$binfmt_elf64(r2, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xf7, 0xa, 0x4, 0x1d, 0x0, 0x3e, 0x3, 0x348, 0x40, 0x15a, 0x80, 0x7f, 0x38, 0x1, 0x7, 0xc2, 0x461a}, [{0x2, 0xb6d, 0x6, 0xff, 0x1, 0x33, 0x2, 0x5}], "9a89f793103a"}, 0x7e) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 4m12.052094731s ago: executing program 2 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket(0x15, 0x5, 0x0) socket(0x18, 0x5, 0x86b0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 4m11.032297121s ago: executing program 2 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000f80)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010010}, 0x4004000) 4m10.866815567s ago: executing program 2 (id=212): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@nodelalloc}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r1, 0x0, r1, &(0x7f0000000500)=0xffff, 0x9, 0x0) 4m10.570852336s ago: executing program 2 (id=215): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = syz_io_uring_complete(0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[], 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x4004) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES8=r2, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m9.936270958s ago: executing program 2 (id=226): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) 3m54.859160329s ago: executing program 32 (id=226): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$eJzs28tvG0UYAPBv7SQlfZBQlUfTAoGCiHgkTVpKD1xAIHEACQkO5RiStAp1G9QEiVYRBITKEVXijjgi8RdwggsCTkhc4Y4qVSiXFk5Ga+8mtmOneThxW/9+0iYzu+PMfN4de2YnG0DXGk5/JBH7I+LPiBioZusLDFd/3VpenPp3eXEqiXL5nX+SSrmby4tTedH8dfvyTE9E4YskjjSpd/7ylfOTpdLMpSw/tnDhw7H5y1demL0weW7m3MzFidOnT54Yf+nUxIttiTON6+bQJ3NHD7/x3rW3ps5ce//X75M8/oY42mR4vYNPl8ttrq6zDtSkk54ONoRNKVa7afRW+v9AFGP15A3E65/n6b5ONRDYMeVyufxQ68NLZeAelkSnWwB0Rv5Fn85/822Xhh53hBuvVCdAady3sq16pCcKWZnehvltOw1HxJml/75Jt9iZ+xAAAHV+TMc/zzcb/xWi9r7Q/dkaymBEPBARByPiVEQciogHIyplH46IRzZZf+MiydrxT+H6lgLboHT893K2tlU//stHfzFYzHIHKvH3JmdnSzPHs/dkJHr3pPnxder46bU/vmp1rHb8l25p/flYMGvH9Z499a+ZnlyY3E7MtW58FjHU0yz+ZGUlIImIwxExtMU6Zp/97mirY7ePfx1tWGcqfxvxTPX8L0VD/LlktaZm65Nj90Vp5vhYflWs9dvvV99uVf+24m+D9PzvbXr9r8Q/mNSu185vvo6rf33Zck6z1eu/L3m3bt/HkwsLl8Yj+pI3q42u3T/RUG5itXwa/8ix5v3/YKy+E0ciIr2IH42IxyLi8aztT0TEkxFxbJ34f3n1qQ+2Hv/OSuOf3tT5X030ReOe5oni+Z9/qKt0cDPxp+f/ZCU1ku3ZyOffRtq1tasZAAAA7j6FiNgfSWF0JV0ojI5W/4f/UOwtlObmF547O/fRxenqMwKD0VvI73QN1NwPHc+m9Xl+oiF/Irtv/HWxv5IfnZorTXc6eOhy+1r0/9TfxU63DthxnteC7qX/Q/fS/6F76f/QvZr0//5OtAPYfc2+/z/tQDuA3dfQ/y37QRcx/4fupf9D99L/oSvN98ftH5KXkFiTiMId0Yx7J5EkEdv/O0m0qT2d/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8DAAD//7Pm4aw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) 2m23.253052968s ago: executing program 1 (id=1532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 2m23.197150013s ago: executing program 1 (id=1537): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m23.157598787s ago: executing program 1 (id=1539): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m22.252013896s ago: executing program 1 (id=1549): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m22.21764314s ago: executing program 1 (id=1550): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = syz_io_uring_complete(0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[], 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x4004) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES8=r2, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, 0x0, 0x94) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m22.116989399s ago: executing program 1 (id=1552): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) prctl$PR_SET_ENDIAN(0x14, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20064841}, 0x40000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000940)=""/4096, 0x1000) ustat(0x8000000000000001, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0xc201}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0x49, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_io_uring_complete(0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)="708f4781ffffffff0000000073f084e9050d67b80739c63d845307b0c4f40194bdc83af53561b55b47e8e5718c1335bd763dbd1a67cf661f1c455cf28a55f6fbf2f70e1dc5377c83c48175ff3a5708cb78759bc50fa84a0013101dbf5f", &(0x7f0000000040), 0x81, r5, 0x4}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x40, 0x0, 0x80000000, 0x0, 0xfffffff7, 0xffffff01, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x40, 0x6, 0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x6c, 0x9, 0x2, 0x5, 0xfffd, 0x7, 0x18ea]}}, {{0x1c, 0x1, {0x64, 0x1, 0x9, 0x80000000, 0x3, 0x9, 0x9, 0x3}}, {0xa, 0x2, [0xa, 0xfffb, 0x7]}}, {{0x1c, 0x1, {0x37, 0x9, 0x1456, 0xfb, 0x1, 0x46c, 0x101, 0x8}}, {0x14, 0x2, [0x79, 0x5, 0x4, 0xfffd, 0x24, 0x2, 0xfeff, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0xdc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x22, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r5, r5, r5, r5, r5, r5], &(0x7f00000003c0)=[{0x3, 0x3, 0xd, 0x9}, {0x1, 0x5, 0x8, 0xb}], 0x10, 0xa300}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2m18.169241498s ago: executing program 5 (id=1590): request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010825bd7000fedbdf2501eb000004922381501468ec604047931e17b44e456d3bc150d15ab6cf72f9d258b668c574841651087d0f1a5c1e88f379611051338cb5d4278f8f31a52aa2627ce6aafb4003afeebb48557f129ed1a3fde157e29e63eb1b87e72e6654cc09f24e95811400000000a88055a83cddfa076109b14a0ed1a25c6840d1b9baa0065d60423661719a06374eeff961745e537d963de49d162dc97f4ebb6478720596cbc966ca0964c62ebe9185bd9ec1ca5b48e6c6ab0a8567f2158b3d40af4f204ece6a8dfac0f82c0b8aa804e6307a181fe1bd5f6906ce556604b6d2ce41fb759423e4a150487906dc5646cd"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000081) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @fastopen={0x22, 0x8, "074f0c3aad8a"}]}}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000780)={'ah\x00'}, &(0x7f00000007c0)=0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) rseq(0x0, 0x0, 0xffffffffffff9bff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000001c0)=[0x0, 0x2], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0xe}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0xffd}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x28040000) r10 = getpid() syz_pidfd_open(r10, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) 2m18.050797949s ago: executing program 5 (id=1592): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) 2m17.945552079s ago: executing program 5 (id=1596): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc41, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) 2m17.605135163s ago: executing program 5 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x12160) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) semop(0x0, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5, 0x800}, {0x4, 0x6f, 0x800}], 0x3) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 2m17.354019267s ago: executing program 5 (id=1601): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = syz_io_uring_complete(0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[], 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x4004) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES8=r2, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x94) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m17.238937699s ago: executing program 5 (id=1604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x3, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}]}, 0x58) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x128, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf9, 0x6, "f35be1f34605aec345f76c3e077e67af259f17fa6863c8c324fa075d049e6876c7e78f86cb222fb8ae976659eef3587229a504651f6839a370b7a9e6e9e7c850d6526b132b8e60d2d167d12e170525e360b64d0f4f883ca5062348aaf66fb1373b819e6ff4c07ed2afea35ff9664b2563322c9626da3a7fa9a4ce54a032cbf7703122acf8cfb36b9d75bc9dbde53ecbafdb5bec8d6c534dd3f40272bac70f4e835faf55c7d3205777c8fb800312f9952fda743ce23c294ee386a38da8586aae749f925ec4e6d9a5a4d25fd8156625fe2cde48eff248db53ba03b614798c5424850d696fa6c550f3f7b8c27391511cb15186ae15361"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x379c}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x158, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x124, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5"}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "0123ca0eabf275c372fd0593dfb89f8fd7d614adf730414a0bf603966972db79f73c815a350706dcb77203c06ab295b771"}, @NFTA_DATA_VALUE={0x29, 0x1, "9de7be959e6e7437c81f7ed781af99819ec479d87d3319b9ef87f8145a4b4bbc95353196cb"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r1) 2m6.750616959s ago: executing program 33 (id=1552): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) prctl$PR_SET_ENDIAN(0x14, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20064841}, 0x40000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000940)=""/4096, 0x1000) ustat(0x8000000000000001, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0xc201}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0x49, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_io_uring_complete(0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)="708f4781ffffffff0000000073f084e9050d67b80739c63d845307b0c4f40194bdc83af53561b55b47e8e5718c1335bd763dbd1a67cf661f1c455cf28a55f6fbf2f70e1dc5377c83c48175ff3a5708cb78759bc50fa84a0013101dbf5f", &(0x7f0000000040), 0x81, r5, 0x4}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x40, 0x0, 0x80000000, 0x0, 0xfffffff7, 0xffffff01, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x40, 0x6, 0x9, 0x5, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x6c, 0x9, 0x2, 0x5, 0xfffd, 0x7, 0x18ea]}}, {{0x1c, 0x1, {0x64, 0x1, 0x9, 0x80000000, 0x3, 0x9, 0x9, 0x3}}, {0xa, 0x2, [0xa, 0xfffb, 0x7]}}, {{0x1c, 0x1, {0x37, 0x9, 0x1456, 0xfb, 0x1, 0x46c, 0x101, 0x8}}, {0x14, 0x2, [0x79, 0x5, 0x4, 0xfffd, 0x24, 0x2, 0xfeff, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0xdc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x22, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r5, r5, r5, r5, r5, r5], &(0x7f00000003c0)=[{0x3, 0x3, 0xd, 0x9}, {0x1, 0x5, 0x8, 0xb}], 0x10, 0xa300}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r10, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 2m1.570989458s ago: executing program 34 (id=1604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x3, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}]}, 0x58) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x128, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf9, 0x6, "f35be1f34605aec345f76c3e077e67af259f17fa6863c8c324fa075d049e6876c7e78f86cb222fb8ae976659eef3587229a504651f6839a370b7a9e6e9e7c850d6526b132b8e60d2d167d12e170525e360b64d0f4f883ca5062348aaf66fb1373b819e6ff4c07ed2afea35ff9664b2563322c9626da3a7fa9a4ce54a032cbf7703122acf8cfb36b9d75bc9dbde53ecbafdb5bec8d6c534dd3f40272bac70f4e835faf55c7d3205777c8fb800312f9952fda743ce23c294ee386a38da8586aae749f925ec4e6d9a5a4d25fd8156625fe2cde48eff248db53ba03b614798c5424850d696fa6c550f3f7b8c27391511cb15186ae15361"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x379c}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x158, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x124, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "8ce1677e3343e241f994522eb45a68aaf79e7c7d4c53c8f6b14e057a1a59f45accda398dc8b9fe8577c19abbf63d7590c64fd0dc726aca8c5f47b2d01c610d80acad066f2cc9606f81fa225e0c7d9c8d1c3241d7016b5681d4b0bd62982d527c7cb8a2df458af54ca5"}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "0123ca0eabf275c372fd0593dfb89f8fd7d614adf730414a0bf603966972db79f73c815a350706dcb77203c06ab295b771"}, @NFTA_DATA_VALUE={0x29, 0x1, "9de7be959e6e7437c81f7ed781af99819ec479d87d3319b9ef87f8145a4b4bbc95353196cb"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r1) 8.172118517s ago: executing program 3 (id=3075): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x401, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.152296549s ago: executing program 3 (id=3076): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x1c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004}) 8.113697113s ago: executing program 3 (id=3077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 8.073844327s ago: executing program 3 (id=3078): request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000081) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @fastopen={0x22, 0x8, "074f0c3aad8a"}]}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) rseq(0x0, 0x0, 0xffffffffffff9bff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000001c0)=[0x0, 0x2], 0x2) process_mrelease(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0xe}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xffd}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x28040000) r8 = getpid() syz_pidfd_open(r8, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) 3.593903457s ago: executing program 3 (id=3133): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 3.417351594s ago: executing program 3 (id=3134): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000038c0)={0xfffffffffffffffb, r1, 'id1\x00'}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000003940)={&(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x40}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x80000001, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) sendmsg(r0, &(0x7f0000003e00)={&(0x7f0000003980)=@isdn={0x22, 0x6, 0x4, 0x48, 0xb}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003a00)="b610d8dbe3f53d716a63000e90a482f214b6ce51edea45a30dab6cb3d99e9642b21734c716390d249aa10e2d148ab5c0ada0065b2c7f90e3d8528d30c172e49f304a4a057b21dc8088a3290d03622af4713f4acff08af59543ea26a6072161eccfb6581b511aa9170ec532956e5219e963977dd7a01396a7a787b6eaf3ca210c8a9f51c692fe3d941398866da739d09739f37a170658566f67d301a87fed3dc030499a4b4ca3fa0bc6200be418ce3106de718d68e4a5abb9fd356ddbd21d59f10f3e8b0092bc7d382caa2c45804b737720", 0xd1}], 0x1, &(0x7f0000003b40)=[{0x100, 0x11, 0x2, "ef06cd9fddf45d65d1f0b3f52d5b85222aa58a01e3949d14c3a4221acf6d3d537371a9a345dbcdadbd1672102100eccb0c1bb66bce31a423d19202edbab6c599181f64885861319037a2758f39ce79e77eaac59097023af50daa56b8d59674a673fbbe6f0c7624f93eb2f1ea38584272e3cb045bf897a5c8335839baf7bc4f0554d95d3a8f5d35e494ca615286a2825493fa9a19ad5cbcd1d17112ccbec74c50c7d7533d69ee4084e579f9e928547edf2f100a7ac6eef07443fa8a4fd1df1ea238ab3a57ee57b110d75c4eeb6bce72949b5f9f18d5ffaeb4ca7f8e388e2f96019369a97eeb74faf62fe4647bb0"}, {0x98, 0x113, 0x7, "121dae29d78910debce540377651c72e3faec7e48a8f422edc1361cf47c91650214a370bafd8d1cbe6c35bce62deb9c77d2f8b748838529b05e33cd6475cad5e0cb6a8fdfe39a4dcd22f52482f8af4c5d3d625cfc748c497f0c406209a9f1d8e4f0b126b6521af22458dc46b4fdf962acf8235b5a83d00a81d4d05bbbc1e2d2b37b301f77a"}, {0xf8, 0x0, 0x1000, "3a9ebc3ac98761d1f8688f2b8b7c487b88a175cd055f4019974612cee1c495c9f56b1320fad352021175775a99956dd167bdcc8619e9c6627f5f5a55804110ccf5cb9db35dd4424897a9eb8427dee2a7a61b47749173efd4816a16f834261a58ccd944c0cefd81b0eaf70127558c87909ed66b1a66a3c0ee229fcadd26047ec3a63146af443049af531e33b18e572084af159ae5330f306c9d43aa6a9215b94b2c10581694f19ffdeca1cc5bcac35f73362cc1e2630a6ff5f6f27b6247ef6adb45e3522a44baef4f494f9f7fd32016e3b36aff085626b187f691a5fd8efc825f3f"}], 0x290}, 0x4000010) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x190da) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) sendmmsg$sock(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f00000002c0)="3206418f142256e9dcf44fd2b6b37288a383e676cf48fa70c1fefc5c8a334f99f996cff7adf7de9d614386dc755ebc7a9f5066dbfe810154309f3ed01e2fe95964711e812859117578bfc05248755ecf1eeabe562a2b360370a3d18ca5de8502ca62f23deebb8d36f1089819155058032148b039860f01d63679f948bdb532fe67c001c84b21fdbf04f3b773d0ccf9b3b592bcffcce54d690396047ac6e84fe59a62da029953626f99430762e646b6313b07eb441e59c253431d6d330383402ffc", 0xc1}, {&(0x7f00000000c0)="3ab357352913fe8fa8d25a3d9c0a07846b301d32137a0f76513639e98a14183f9e8da711db19f4b61572969a9ae25a45cebd3276e4392b9ba6a38fc37926b60b63e107076ea1d897e73e971366505b5c132469a5640ca8d30d518ec1ef23a6d4583c816d2f67a752e365f84dcd0f42ccee5c087c064c0204754a5ab796a80a300c7aece1fc352f7076a313ce112a738b73bce217249115c57f800e343fa9e82b6f85cea9c8ae650b1ee6da4170065910d9bc61", 0xb3}, {&(0x7f00000003c0)="91d65130d8f73c0ca782d8009be263da0ce229413924fe9fcbe97f6778815e07f6686338727b9ff9732b64454a1ffd001429d31654aee51cd1749e00872c77654f22d2a36a3435bb8c769cd8a2623ca0220c69f014a3a607761c71c4c938441a1809883a9ea7", 0x66}, {&(0x7f0000000440)="7ab3220b00de983e256ee882377943b46ccc49e8167f386e72110c236f2bc96b1b5a40b2a6450c6d7ec7197c98aa62e461a4fbf9e49dd9697c79d2360f9f48f72f6a0c8b94b1293426a63b72f43326250611d3d61f62ed30e8438c6a009449d0d8952d26698dea9598ee6899d5b2c62bd5d95e59ccf1ed3e6890a86545d453ba87aec9a5be0b7464cc79f109b1b7251fb77469f68fa8c50af03e6d7fd4d73ffe0608b85ac3", 0xa5}, {&(0x7f0000000500)="07350daa7847a2e7a604da55cb82a2aa2b12129b9d961c21f34290ddf0411f593eddc10890655e509e579b49bac3ce8dba0858181e10d85abf2f2b367934107f65722a", 0x43}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000000580)="2f2a2ea7965a6d72b1708fb618c35bdf9ea5e0ddb1094df022f8350ed4e3884b2e4ead80d2a6ad7391277e43b558bceededb2dbb3a3bb2f5585741ec2674cbee66c59a59932cbe154c39b56000e6b8e7146ca3ee65d16e6e4c6b6057c2888625a7ff8298dc04d205490ac69faf4751ea3dc71fd19115b603f0fef7ed6c63292370e9901756dce5dae0b330f74a676e438e9f014f7bf71977db086d9ad9d3c4193b0165ba0f02270412ee3ca6808307703897d64b5c531b3151ba410436608f", 0xbf}, {&(0x7f0000000640)="135b90c9f147ed7cdc25ae990a80d47aa44d2423d98d23269b01e5887e17cb0ef14577f2b4b2703f55ffe2bac82d3bc0299f0bf606ba04f17208003f7ee777488e9fb6a64e863c9e630e6c924e26c4149c8ba2a67445c06d6a0822eaeb6c5f9c6d79ac14e2f4c38bed1a96fad0531b53c039a9f2b3669ec0bc06fbca2751d5fadbbf10e829e4", 0x86}], 0x9, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)="7daf1fb03a0a1f087e4cf6528bbddd883bff7c83b95fdc6ff358dbf347617edbd72ffdcc6413830214", 0x29}], 0x1, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x90}}, {{&(0x7f0000000940)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x5, 0x5, "1f3eab3359223a3b7e6f6af8a5dcd46ab1132aeb686502e6c315e55aa9a637bd36cbff9dac3e638c32c77498ae2ef405397cd74ea9542578e8c492f60557a1", 0xa}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000009c0)="634650f5327e8c7d1e7b9de7150db71f04e5ce640fc341f44d74071a0a138dfade34f3468401513cde7f02187e7d37ea09decc030d3ed20ca4541773d72855b72d236ded87cd1c06d4c442673c9dc288192219a0a755bf0eeda753ac9ba4d25e638b", 0x62}], 0x1, &(0x7f0000001b40)=[@mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000001bc0)=@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001c40)="8ed553bfcb2fd1fff01b219f991aff1ad14a264e972bbe402cdc502c0641a2a87899264ca08a5eadd1d56aa51a77e7c23c8bfa66847080e541058ae6ef05a36767a0d3170d5fbc947363b64e07", 0x4d}, {&(0x7f0000001cc0)="39d78f1b90c9ffe9360a70dd675720da39d4788e843df3d47d93daab1ba15c03da6556863dd3731cce7f72069c9269f506522e12b8983ea465c223ae15a243da33b299f0e4eff837f70a517c5d667a610c1ded91576409a2714c3f9ff27adb8873b4f75ea2682e5af1d63ff1bf31a203a9166e9cfc16dd2b956f5509bdfb6f005bde7b5116f19a8de401c239dfea33cc0fc8bf6ac615bffbfc04cbe3ccfbeb28ce2a1d73b652f89cae8f7605515093b4f189ab23850a182dc3f9e6166a2393bed94bb3dbfacbab54b950f79093f1f5f36232c80225c7", 0xd6}, {&(0x7f0000001dc0)="405f5241edfeb08dc716cb3626530a4f73d75960c84cd05873788496a1fff030a55601ab3d11e0dd2299fc9f018a3806cbace6105abf5d6b72b8b6e9d2feeecc00e78d0e2640a1aaa98f280c7eded1f4bb3f0e053edb98824ad04f2c19a8decde1aa5e6e02944fb91b3888bb5fcffcda30c1c15a5406cf0dfb27319e13e4fd7073e2a025b18bf349d1b0e397af0577ce835e60277bb1f3bad6173eae989bace76ff4ba8f", 0xa4}], 0x3, &(0x7f0000002f00)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}}, {{&(0x7f0000002f80)=@phonet={0x23, 0xf5, 0xc9, 0xf3}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003000)="3b48b88c317679a3ce3d25b26eecd2e78d6a17be379138af3ed6c8f2a51b280790ee6525ffa1e4cff9d3544d684430c8ae44bc995518054351856de6d117f1fb91302fe3c5a8527cd37d132beeb73e912d9d178ba0b631e1642b70017a53286a45000f", 0x63}, {&(0x7f0000003080)="92c050e1a8122bca1d2cedceb1cfb83bd0f630b26b2cafa75e615985ed0118247cb054bfadffe9e358c89963116afcf08c3345e878f4435f907fc9cf402a3fa79c17b8fa9efd1a08e05149f7458bc5c7c25f34218a83830ba92f7a01847f8c58115d541222b4692b5a75914df89c4d02e9dbd3ecaa048b629038d26d54b239352746a19f3c946da6319d3ca8b65976cdf08b2802406b944a0da89c9ad5c846c775e4f9aa0fffcb", 0xa7}, {&(0x7f0000003140)="236cebbb3547e5169fe41a5148de41dba589da181a160d89c6307056d6a7de62e67b213234c7614e960e924f4a6d0f1395a92fe467803679faa37e0994608df64ce2c3e4d44e547601de9640eee89d55fb5130d665ec690cdc2fd6c5bacb4ab8fe37f602d7c47094e6180b33b76b2a6f6edacc615d80519c2d5706757b227eb7c122d1be598c9c0147f6be9d2f8e395973d775f2481f8989d34772b0fa0e0b768f238f9d96b2", 0xa6}, {&(0x7f0000003200)}], 0x4, &(0x7f0000003280)=[@timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000032c0)="4ab734b9dd1c01d62861896dba00814bd6b8e494e14856693b729632bca6debc245193267323bf355d59e5b5833a05e188d2c3ed33aaa2477dd422d808b83a", 0x3f}, {&(0x7f0000003300)="d0174bc9831cdeb3939145bbe63a91b335cab39b76fe623981000abbbed29b0cec7c8e5da670d2becd23a60c35f7861f9edee4d1362e98ff865f31901d54162f0ed57c4262edd7785b9e7d44c249c4c83f056ef55b4ef122b32790042cc0d02bbf130f68679d9ba8e3a4227ce1", 0x6d}, {&(0x7f0000003380)="a7645cf5a4bb9469683a667377e834d8b32a73227a63c4a2219a3dd78d6d1e10e7f1059666ac08707f5a21ad546e1f67f78a6215a87900edb54349ed03237951779f9920452872b034a89d2458e647dc3c113ff0220665889dd7e0ae03d6a0a43d21baf6417e867c20366ca3e4d9136f1bf6fede38e29c815a0e27ff066f3bed20d350b3cb5b4c155484b29e42e633d1c90979f97165a7b2f5ad5b8cc3e447226f5497d721957932c5b546afe740b023002d67009e5fd936262c04951d4f0a6d79402fc893cdb7745e0ab714b36795c2c755385b9f26bac101c7cb", 0xdb}], 0x3}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000034c0)="9ec20ad7d1d1226b9d48e1baefe7352ac1a43d40659107ce79d9e26e9c75b49a2b297e752662d853fbf823bf45ba57c89691bd050a2a77fb8ab0e086fbca82e30fdba2b1ddbe46a0a3d2381a646bf2abd6d9e5ba220a4f159b0f95f2c31bb82861c7021185dd1d8c0904b84ddc78886ea170e5b5bd59c83fdc55908256b6b608739d7174a293dfa34d5cd1828e62c60edf1482dd7fcd73dfd39c321d33874691e846fdc16c70c9ccbf210e12e5cb11b071e7652bae4d9f4d127cb93254934201f1af68c94f1365f409d4cb0e9b7cdb4c7199ad4af603a080b6c7fabdf994b7e275bd6ad9", 0xe4}, {&(0x7f00000035c0)="e3d2e35142a09e93ec64eefef0279d29e245bdf63b3959b0fbffdaa21dfadd99097f06de8398ccca15ad21dee88b646368278482726e24b2e8c537a3a07ae791118938ab7d7a89f243f7d19a5133f4857f6030f0aadfe3983c99ccc05504908aa98ca804f6b5099ffe", 0x69}], 0x2, &(0x7f0000003680)=[@timestamping={{0x14, 0x1, 0x25, 0xffffff89}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}], 0x7, 0x4800) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 3.315342014s ago: executing program 6 (id=3136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.825166252s ago: executing program 4 (id=3141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000340)={'wg2\x00'}) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2082}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x6}}], 0x10}, 0x1c7a50772457362a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="2bad7b266840cc541fd3cb8eb6ab9630d237312bb1744699eb3ed0d07326daa510ab69ded7977008e7201590267b6c1e629bddb039a7dfaef5220f3b1cb3a4b1735356573225a75484090f81381588e9b43322355aabfa4074d941c7c174", @ANYRES64=r6, @ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x6) ioctl$TCSBRKP(r10, 0x5425, 0x80000000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r11, &(0x7f00000000c0)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) 2.518616702s ago: executing program 7 (id=3149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) 2.274466706s ago: executing program 7 (id=3151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.263954287s ago: executing program 0 (id=3152): ioprio_set$uid(0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x34, 0x7, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x20, 0x80, 0x4, 0x8}}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0xd4}, 0x18) set_tid_address(0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='svcrdma_decode_short_err\x00'}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x9, &(0x7f0000000240)=@raw=[@exit, @alu={0x7, 0x0, 0x6, 0x2, 0x7, 0x80, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x0, 0x2, 0x2, 0x9, 0xffffffffffffffc0, 0x10}, @ldst={0x3, 0x1, 0x4, 0x6, 0x3, 0x10, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x1, 0x2, 0xd, 0xfffffffffffffff4, 0x8}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000300)=""/5, 0x41000, 0x43, '\x00', r3, @sk_reuseport=0x28, r4, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x8, 0xb, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r9, r10, 0xffffffffffffffff, r11], &(0x7f0000000680)=[{0x0, 0x4, 0xb, 0xc}], 0x10, 0x20000}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12, 0x0, 0x7}, 0x18) 2.187724945s ago: executing program 6 (id=3153): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000009006000000000000000500000a38000000090a0000000000000000000000000009080003400000008900000a4000000002080005400000002e08000a4000000003140000001100010000000000000000000084000ade7339f0f593c871bdad263f2db1d7c045a7f9ae9da049fb10ba69047b08aa25544650c9f9dcc2b8e387d391948d280611bd932f8f82d263981ccb74fba0aa52d8dce44651d447dc4f81b1a1e32127fb2528c0176073dac3d066a4b0ddacdbb8c659869acc875705f1259ca97c0e7e30f5"], 0x60}}, 0x810) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x910}, 0x4814) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf250e00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900c30300003d00000080000e80760003002cc887bf7bfdf1ad28ab57240291ba8802fff08870dd52b9fc649d1fa5054aa80df866f28e063efa69c2636d9b2e06e7164233281ce6af47394c9d098c691640e9537d9c2ca734b4cb76481cb6048d2dd8216944e5dc9cd46c6c030000004cb5a793cb2188ae0a8dac5c000004000100eb002a0026b6080809b07903724b5665a6b63f5f7b8fa12cda3ae3ca476000319689720d56fedf05876c646d495f929c6b08e86e3fe4ae15c784d9c27ec5b5be6f406f247ce4514a8733ca85450099a1714476a3640acf3f208a5957c1c0ea107f3eb88d7cdf018a6165995349ecab7d357acd77bbf848cabeaacadd13db83eba12badfa1a41eb480e8f5c063d8f922c8f030200a86e29b37023eda3e473b5dfecef3cd915f22786e79b00071a5dedc6ba591e27f63ac4fa9af4d9c70106240086b00bc80022135fbfcd1ca788d6a3ebd07c660c469a31ecb24e88ab9ca145360671bbf6bbfb99950301070096ec5a3822a6d33e02e21af8556e765a60627e47fe0700e9ad96be4ef84c56bb3657be975d8896bd834a0e6705d9fa0d712f88202c66c3853fe7e79e812469ee8016b66d3b64af41ed9d79bd98ee6a650876dba9e2dee7c7a5d1c525950a6b3c485af8bfa7767ecd587107b52c55700ad2fcdfa4c66592c4e2892fa7ae918177665d947bea775380dff53ec9dbd7edf5fb8416426f987d91063eb7642ca07e3dedf00768be40d0bee23fc34dbc8c945a8c6ab7a2d57815794075ee1185fc6681e9d7f5eebd005b9a12bbcf"], 0x194}, 0x1, 0x0, 0x0, 0x40015}, 0x1) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="7f0000007000fb080000002200000000030056", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 2.170553116s ago: executing program 4 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x22, 0x2, 0x4) getsockname$packet(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x15, "ef909a5c0d"}, 0x7, 0x2) 2.13900753s ago: executing program 6 (id=3155): unshare(0x6a040000) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = inotify_init1(0x800) r1 = inotify_add_watch(r0, &(0x7f0000000a00)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100080c) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="81e7d3b501affb704f271d8b1a4825effaaa5eb76425c72e35152eb05c2b95dd8b9c02c77fafbf1fb6e8f67cd624612bfb78d19d20faab83c4e1921e9afe05d8a28855dcf0dbc4b8fd6db86a57f6354e3049e0a4284a514cdf6776e39be261bf9ebccc6f", @ANYRES16=r0, @ANYRES64=r2, @ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB="0842d4426675d0f30334d867"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='target_sequencer_start\x00', r3, 0x0, 0xb1}, 0x18) syz_usbip_server_init(0x4) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x65a2c000) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000023) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x39) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095", @ANYBLOB="292c446074ba490bc4e0fc0a1da74dbd232d827a0acb100bb7214c274354b66cb8bc2019d4f8986ce3ecb5c504404f6e69bcb28d4e6d2ef8b318f84fade0e703a31f24b1b3788477a197822ece69452f9d7add8e48068b9ea659ae0c64f78bb746c3a816f119549ae9f2d983f97e299b884a094f1f180b86e785ad9d5499ed18122db46537787e0124f090ec3731f33d40762b765d997b4e1531852f73ce3d482141c5a1cfab2981b8a4c8c01c750b44a9af05948ec42be2e7851f817e2e6c5fd859af0999a109ccc523f6aa342e0c33cc50e025562148b79485d62343fbced590a019e4286745adeeb72ca5"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x2, 0x20, 0x5, 0x0, 0x100, 0x12c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x6}, 0x0, 0x64, 0xfffffffc, 0x4, 0xffffffff, 0x0, 0xec7b, 0x0, 0x60039397, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES64=r7, @ANYRES8=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.064630337s ago: executing program 4 (id=3156): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x1, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pause() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_size', 0x943002, 0xad5ceed63eb7d24) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000540)={0x4, &(0x7f0000000240)=[{0x9, 0xc9ca}, {0x1f60, 0x9}, {0x8, 0x5}, {0x8, 0x652}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x0, @perf_config_ext={0x6f, 0x3fff8001}, 0x0, 0x35, 0x43a1bd76, 0x7, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x2, 0x0, @empty, 0x9}, 0x1c) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 1.816246291s ago: executing program 0 (id=3157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x1a027, 0x4005, 0x4, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.533909939s ago: executing program 0 (id=3158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (fail_nth: 10) 1.192814582s ago: executing program 0 (id=3159): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x21, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006c00000076000000000401002700efffffe900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xd, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a000100"], 0x565c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r5, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x68, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0x1e, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000380)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f00000016c0)=""/4096, 0x41100, 0x40, '\x00', r2, @fallback=0x27, r3, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r6, 0x3, &(0x7f0000000880)=[r1, r1, r1, r1], &(0x7f00000008c0)=[{0x0, 0x5, 0x3, 0x9}, {0x3, 0x4, 0xf, 0xb0f7d2317f36cdd4}, {0x1, 0x3, 0x8, 0x3}], 0x10, 0x4d7}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r12 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r12, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x1f, 0x1003, 0x62}, 0x2c) 1.11675821s ago: executing program 4 (id=3160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c", 0xc8}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1.109183531s ago: executing program 7 (id=3161): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xc}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 1.053871106s ago: executing program 0 (id=3162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x3cc0, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_LABELS_MASK={0x18, 0x17, [0x2, 0x5, 0x8, 0x7, 0x1]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x81}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xff}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x49}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44840}, 0x82ec411c58328d8a) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000b00)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}}, 0x0) socket(0x23, 0x80000, 0x400) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.035961708s ago: executing program 7 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) (fail_nth: 10) 934.672838ms ago: executing program 7 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 245.983765ms ago: executing program 6 (id=3165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0xfd, 0x6, @tick=0x4, {0x3}, {}, @addr={0x9, 0xf}}, {0x0, 0x2, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {0x4}, @quote={{0x1, 0xd}, 0x9, &(0x7f0000000640)={0x9, 0x6, 0x3d, 0x2, @time={0x1, 0x1e}, {0x7, 0x6}, {0x5, 0x5}, @control={0x8, 0x2, 0xeb}}}}], 0x38) readv(r6, &(0x7f0000000540)=[{&(0x7f0000000880)=""/147, 0x93}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="20f0e8a4000000", @ANYRES16=r8, @ANYBLOB="8b330000000000000000050000000c0099004000000000000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7a7}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9ed}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x6, 0x8d50, 0x8, 0x4, 0x5, 0x81, 0x8, 0x7]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x10) r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r11, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSUSAGE(r6, 0x4018480c, &(0x7f0000000740)={0x1, 0x3, 0x7, 0x81, 0xfff, 0x62}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fcdbdf2518"], 0x60}}, 0x4024000) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 245.750646ms ago: executing program 4 (id=3166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x22, 0x2, 0x4) getsockname$packet(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x15, "ef909a5c0d"}, 0x7, 0x2) 159.833714ms ago: executing program 4 (id=3167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0xfbfb}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'veth0_vlan\x00', 0x600}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000001300), 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffffffffffffffd) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r6, &(0x7f0000000200)="0193edb6e1904796643edd81c475849ac755faa6d0e87191082dd1194f3fb05459e4574eb31d237fc824d673abb2ac581fb387f92a489cd47f5cf0f98f1c935b42", &(0x7f0000000080)=""/44, 0x4}, 0x20) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@mask_cswp={0x5b, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x1, 0xb6, 0xfb, 0x3b0c9548, 0x0, 0xefb}}], 0x58, 0x8000}, 0x0) 157.955484ms ago: executing program 6 (id=3168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) 73.103173ms ago: executing program 6 (id=3169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0xf4) 13.332789ms ago: executing program 0 (id=3170): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="ffff400000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 0s ago: executing program 7 (id=3171): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0xf) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="140012800b0001006d6163736563"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x8010) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f0000001600)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x20}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 1.847452][T11367] bridge_slave_1: entered allmulticast mode [ 261.860380][T11367] bridge_slave_1: entered promiscuous mode [ 261.921488][T11419] loop0: detected capacity change from 0 to 512 [ 261.929541][T11367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.962808][T11419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.971977][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 261.979352][T11367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.981230][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 262.013433][T11367] team0: Port device team_slave_0 added [ 262.020365][T11367] team0: Port device team_slave_1 added [ 262.033231][T11419] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2741: iget: bad i_size value: 38620345925642 [ 262.048056][T11419] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2741: couldn't read orphan inode 15 (err -117) [ 262.069196][T11422] loop4: detected capacity change from 0 to 128 [ 262.081020][T11367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.088116][T11367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.114213][T11367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.130978][T11419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.179521][T11427] loop7: detected capacity change from 0 to 128 [ 262.206501][T11367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.213555][T11367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.239540][T11367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.304742][T11367] hsr_slave_0: entered promiscuous mode [ 262.315817][T11367] hsr_slave_1: entered promiscuous mode [ 262.343240][T11367] debugfs: 'hsr0' already exists in 'hsr' [ 262.349022][T11367] Cannot create hsr debugfs directory [ 262.527758][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2746'. [ 262.564139][T11367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.705980][T11367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.764860][T11438] loop6: detected capacity change from 0 to 512 [ 262.786914][T11438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.824920][T11367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.875656][T11438] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2747: iget: bad i_size value: 38620345925642 [ 262.899407][ T352] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 262.913553][T11438] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2747: couldn't read orphan inode 15 (err -117) [ 262.927052][ T352] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 262.928248][T11438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.939796][ T352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 262.939796][ T352] [ 262.962079][ T352] EXT4-fs (loop0): Total free blocks count 0 [ 262.968117][ T352] EXT4-fs (loop0): Free/Dirty block details [ 262.974228][ T352] EXT4-fs (loop0): free_blocks=0 [ 262.979177][ T352] EXT4-fs (loop0): dirty_blocks=65 [ 262.984378][ T352] EXT4-fs (loop0): Block reservation details [ 262.990368][ T352] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 263.010062][T11441] loop4: detected capacity change from 0 to 128 [ 263.035301][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.102088][T11367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.121841][T11445] loop0: detected capacity change from 0 to 128 [ 263.561509][T11445] bio_check_eod: 86 callbacks suppressed [ 263.561524][T11445] syz.0.2748: attempt to access beyond end of device [ 263.561524][T11445] loop0: rw=524288, sector=145, nr_sectors = 16 limit=128 [ 263.583269][T11445] syz.0.2748: attempt to access beyond end of device [ 263.583269][T11445] loop0: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 263.635126][T11445] syz.0.2748: attempt to access beyond end of device [ 263.635126][T11445] loop0: rw=524288, sector=185, nr_sectors = 8 limit=128 [ 263.649685][ T12] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 263.664895][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 263.677364][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 263.677364][ T12] [ 263.687048][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 263.693047][ T12] EXT4-fs (loop6): Free/Dirty block details [ 263.698834][T11442] syz.4.2749: attempt to access beyond end of device [ 263.698834][T11442] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 263.698991][ T12] EXT4-fs (loop6): free_blocks=0 [ 263.712392][T11442] buffer_io_error: 5 callbacks suppressed [ 263.712408][T11442] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 263.731936][ T12] EXT4-fs (loop6): dirty_blocks=65 [ 263.737147][ T12] EXT4-fs (loop6): Block reservation details [ 263.743203][ T12] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 263.745261][T11441] syz.4.2749: attempt to access beyond end of device [ 263.745261][T11441] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 263.762830][T11441] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 263.779947][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.806527][T11463] bridge0: entered promiscuous mode [ 263.811851][T11463] macsec1: entered promiscuous mode [ 263.821446][T11463] bridge0: port 3(macsec1) entered blocking state [ 263.828028][T11463] bridge0: port 3(macsec1) entered disabled state [ 263.834832][T11463] macsec1: entered allmulticast mode [ 263.840306][T11463] bridge0: entered allmulticast mode [ 263.846827][T11463] macsec1: left allmulticast mode [ 263.851984][T11463] bridge0: left allmulticast mode [ 263.857845][T11463] bridge0: left promiscuous mode [ 263.905203][T11471] loop0: detected capacity change from 0 to 128 [ 263.912270][T11471] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.076687][T11471] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.177768][T11490] random: crng reseeded on system resumption [ 264.194502][T11467] lo speed is unknown, defaulting to 1000 [ 264.209087][T11491] wireguard0: entered promiscuous mode [ 264.214700][T11491] wireguard0: entered allmulticast mode [ 264.683439][ T12] bridge_slave_1: left allmulticast mode [ 264.689241][ T12] bridge_slave_1: left promiscuous mode [ 264.695119][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.730885][T11496] loop6: detected capacity change from 0 to 512 [ 265.034136][T11496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.056424][ T12] bridge_slave_0: left allmulticast mode [ 265.057143][T11496] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2762: iget: bad i_size value: 38620345925642 [ 265.062113][ T12] bridge_slave_0: left promiscuous mode [ 265.080477][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.113977][T11496] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2762: couldn't read orphan inode 15 (err -117) [ 265.153553][T11496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.172877][ T7348] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.183697][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 265.183713][ T29] audit: type=1400 audit(1761593926.926:11411): avc: denied { mount } for pid=11495 comm="syz.6.2762" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 265.234390][ T29] audit: type=1400 audit(1761593926.966:11412): avc: denied { add_name } for pid=11495 comm="syz.6.2762" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.255343][ T29] audit: type=1400 audit(1761593926.966:11413): avc: denied { create } for pid=11495 comm="syz.6.2762" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 265.275640][ T29] audit: type=1400 audit(1761593926.976:11414): avc: denied { create } for pid=11495 comm="syz.6.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 265.299517][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.490282][ T29] audit: type=1400 audit(1761593927.206:11415): avc: denied { add_name } for pid=11495 comm="syz.6.2762" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 265.510899][ T29] audit: type=1400 audit(1761593927.206:11416): avc: denied { create } for pid=11495 comm="syz.6.2762" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 265.531570][ T29] audit: type=1400 audit(1761593927.206:11417): avc: denied { read write open } for pid=11495 comm="syz.6.2762" path="/232/file1/bus/file1" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 265.833345][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.841994][ T29] audit: type=1400 audit(1761593927.576:11418): avc: denied { create } for pid=11498 comm="syz.7.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 265.913887][ T12] bond0 (unregistering): Released all slaves [ 265.920355][ T7332] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 265.940375][ T7332] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 265.953277][ T7332] EXT4-fs (loop6): This should not happen!! Data will be lost [ 265.953277][ T7332] [ 265.963133][ T7332] EXT4-fs (loop6): Total free blocks count 0 [ 265.969253][ T7332] EXT4-fs (loop6): Free/Dirty block details [ 265.975195][ T7332] EXT4-fs (loop6): free_blocks=0 [ 265.980323][ T7332] EXT4-fs (loop6): dirty_blocks=65 [ 265.985626][ T7332] EXT4-fs (loop6): Block reservation details [ 265.991743][ T7332] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 266.044034][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.062447][T11504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11504 comm=syz.0.2765 [ 266.085944][T11467] chnl_net:caif_netlink_parms(): no params data found [ 266.180467][ T12] hsr_slave_0: left promiscuous mode [ 266.191519][ T12] hsr_slave_1: left promiscuous mode [ 266.198606][T11511] loop6: detected capacity change from 0 to 512 [ 266.211875][T11511] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 266.213868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.230199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.239738][T11511] EXT4-fs (loop6): orphan cleanup on readonly fs [ 266.251798][T11511] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2764: inode has both inline data and extents flags [ 266.268659][T11511] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2764: couldn't read orphan inode 15 (err -117) [ 266.281052][T11516] __nla_validate_parse: 4 callbacks suppressed [ 266.281069][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 266.296340][T11521] loop0: detected capacity change from 0 to 512 [ 266.297377][T11511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 266.314843][T11521] EXT4-fs (loop0): filesystem is read-only [ 266.323434][T11521] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 266.342089][ T12] team0 (unregistering): Port device team_slave_1 removed [ 266.347903][T11521] EXT4-fs (loop0): filesystem is read-only [ 266.355127][T11521] EXT4-fs (loop0): orphan cleanup on readonly fs [ 266.355770][T11526] loop7: detected capacity change from 0 to 128 [ 266.364890][ T29] audit: type=1400 audit(1761593928.096:11419): avc: denied { create } for pid=11512 comm="syz.7.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.369024][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.388268][T11521] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.2770: iget: bad i_size value: 648518346341360424 [ 266.410270][ T12] team0 (unregistering): Port device team_slave_0 removed [ 266.413994][T11521] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2770: couldn't read orphan inode 16 (err -117) [ 266.444853][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2771'. [ 266.448563][T11521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 266.487869][ T29] audit: type=1400 audit(1761593928.216:11420): avc: denied { firmware_load } for pid=11527 comm="syz.6.2771" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 266.549716][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.556851][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.568222][T11467] bridge_slave_0: entered allmulticast mode [ 266.576868][T11467] bridge_slave_0: entered promiscuous mode [ 266.589369][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.596708][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.617081][T11467] bridge_slave_1: entered allmulticast mode [ 266.625709][T11467] bridge_slave_1: entered promiscuous mode [ 266.638463][T11538] loop6: detected capacity change from 0 to 512 [ 266.659228][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.676579][T11538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.678074][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.734465][T11538] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.808150][T11467] team0: Port device team_slave_0 added [ 266.819539][T11467] team0: Port device team_slave_1 added [ 266.849112][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.856166][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.882150][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.897827][T11544] loop4: detected capacity change from 0 to 512 [ 266.906253][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.913321][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.939400][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.968151][T11467] hsr_slave_0: entered promiscuous mode [ 266.974682][T11467] hsr_slave_1: entered promiscuous mode [ 266.980813][T11467] debugfs: 'hsr0' already exists in 'hsr' [ 266.985392][T11544] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2776: couldn't read orphan inode 26 (err -116) [ 266.986609][T11467] Cannot create hsr debugfs directory [ 267.014146][T11544] EXT4-fs (loop4): Remounting filesystem read-only [ 267.034873][T11544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.053601][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.072126][T11544] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.162057][T11551] loop7: detected capacity change from 0 to 512 [ 267.209156][T11551] EXT4-fs (loop7): orphan cleanup on readonly fs [ 267.209294][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.215578][T11551] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 267.232930][T11551] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 267.248692][T11551] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2778: attempt to clear invalid blocks 2 len 1 [ 267.261022][T11556] loop6: detected capacity change from 0 to 512 [ 267.274265][T11551] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2778: invalid indirect mapped block 1819239214 (level 0) [ 267.292825][T11556] journal_path: Lookup failure for './file0/../file0' [ 267.299689][T11556] EXT4-fs: error: could not find journal device path [ 267.307575][T11551] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2778: invalid indirect mapped block 1819239214 (level 1) [ 267.332776][T11551] EXT4-fs (loop7): 1 truncate cleaned up [ 267.339192][T11551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.356707][T11563] macsec1: entered promiscuous mode [ 267.361962][T11563] bridge0: entered promiscuous mode [ 267.373913][T11563] bridge0: port 3(macsec1) entered blocking state [ 267.380597][T11563] bridge0: port 3(macsec1) entered disabled state [ 267.387629][T11563] macsec1: entered allmulticast mode [ 267.393021][T11563] bridge0: entered allmulticast mode [ 267.403521][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.412924][T11551] EXT4-fs error (device loop7): __ext4_remount:6748: comm syz.7.2778: Abort forced by user [ 267.423223][T11563] macsec1: left allmulticast mode [ 267.428283][T11563] bridge0: left allmulticast mode [ 267.428768][T11551] EXT4-fs (loop7): Remounting filesystem read-only [ 267.440030][T11551] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 267.448451][T11563] bridge0: left promiscuous mode [ 267.462565][T11567] bridge0: entered promiscuous mode [ 267.468128][T11567] macsec1: entered promiscuous mode [ 267.474750][T11567] bridge0: port 3(macsec1) entered blocking state [ 267.481346][T11567] bridge0: port 3(macsec1) entered disabled state [ 267.488035][T11567] macsec1: entered allmulticast mode [ 267.493374][T11567] bridge0: entered allmulticast mode [ 267.499421][T11567] macsec1: left allmulticast mode [ 267.504510][T11567] bridge0: left allmulticast mode [ 267.511742][T11567] bridge0: left promiscuous mode [ 267.558853][T11467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.568105][T11467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.577631][T11467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.587531][T11467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.610098][T11576] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 267.647014][T11578] loop6: detected capacity change from 0 to 128 [ 267.697134][T11574] random: crng reseeded on system resumption [ 267.807620][T11592] loop4: detected capacity change from 0 to 2048 [ 267.823519][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.831667][T11592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.835868][T11467] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.855453][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.862558][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.876934][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.884118][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.905561][T11467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.916403][T11467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.951527][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.971053][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.005860][T11602] loop7: detected capacity change from 0 to 128 [ 268.029522][T11467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.070867][T11605] loop4: detected capacity change from 0 to 512 [ 268.084179][T11584] syz.6.2788: attempt to access beyond end of device [ 268.084179][T11584] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 268.097814][T11584] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 268.107708][T11605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.119606][T11578] syz.6.2788: attempt to access beyond end of device [ 268.119606][T11578] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 268.123574][T11605] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2793: iget: bad i_size value: 38620345925642 [ 268.133091][T11578] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 268.172811][T11605] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2793: couldn't read orphan inode 15 (err -117) [ 268.187277][T11605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.194027][T11467] veth0_vlan: entered promiscuous mode [ 268.214025][T11467] veth1_vlan: entered promiscuous mode [ 268.260899][T11616] FAULT_INJECTION: forcing a failure. [ 268.260899][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 268.273620][T11616] CPU: 1 UID: 0 PID: 11616 Comm: syz.6.2795 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 268.273679][T11616] Tainted: [W]=WARN [ 268.273723][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.273740][T11616] Call Trace: [ 268.273749][T11616] [ 268.273759][T11616] __dump_stack+0x1d/0x30 [ 268.273784][T11616] dump_stack_lvl+0xe8/0x140 [ 268.273812][T11616] dump_stack+0x15/0x1b [ 268.273835][T11616] should_fail_ex+0x265/0x280 [ 268.273894][T11616] should_failslab+0x8c/0xb0 [ 268.273979][T11616] kmem_cache_alloc_noprof+0x50/0x480 [ 268.274017][T11616] ? getname_flags+0x80/0x3b0 [ 268.274052][T11616] getname_flags+0x80/0x3b0 [ 268.274105][T11616] __x64_sys_mkdir+0x33/0x50 [ 268.274142][T11616] x64_sys_call+0x2db9/0x3000 [ 268.274172][T11616] do_syscall_64+0xd2/0x200 [ 268.274196][T11616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.274233][T11616] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 268.274338][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.274367][T11616] RIP: 0033:0x7fc7b31fefc9 [ 268.274440][T11616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.274464][T11616] RSP: 002b:00007fc7b1c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 268.274489][T11616] RAX: ffffffffffffffda RBX: 00007fc7b3455fa0 RCX: 00007fc7b31fefc9 [ 268.274523][T11616] RDX: 0000000000000000 RSI: 000000000000018b RDI: 0000000000000000 [ 268.274552][T11616] RBP: 00007fc7b1c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.274629][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.274642][T11616] R13: 00007fc7b3456038 R14: 00007fc7b3455fa0 R15: 00007ffccb1ac858 [ 268.274661][T11616] [ 268.361092][T11467] veth0_macvtap: entered promiscuous mode [ 268.491269][T11602] syz.7.2792: attempt to access beyond end of device [ 268.491269][T11602] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 268.504867][T11602] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 268.536234][T11607] syz.7.2792: attempt to access beyond end of device [ 268.536234][T11607] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 268.549761][T11607] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 268.569519][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 268.580635][T11607] syz.7.2792: attempt to access beyond end of device [ 268.580635][T11607] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 268.582611][T11467] veth1_macvtap: entered promiscuous mode [ 268.594271][T11607] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 268.606719][T11467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.631551][T11467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.656041][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.674337][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2798'. [ 268.713862][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.722770][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.773209][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.929209][T11640] random: crng reseeded on system resumption [ 268.976241][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2803'. [ 269.007134][T11644] loop0: detected capacity change from 0 to 128 [ 269.035661][T11644] syz.0.2804: attempt to access beyond end of device [ 269.035661][T11644] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 269.054863][T11644] syz.0.2804: attempt to access beyond end of device [ 269.054863][T11644] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 269.068630][T11644] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 269.077440][T11644] syz.0.2804: attempt to access beyond end of device [ 269.077440][T11644] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 269.090936][T11644] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 269.109836][T11638] loop6: detected capacity change from 0 to 512 [ 269.140867][T11644] syz.0.2804: attempt to access beyond end of device [ 269.140867][T11644] loop0: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 269.155192][T11648] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2806'. [ 269.164592][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2806'. [ 269.233376][T11644] syz.0.2804: attempt to access beyond end of device [ 269.233376][T11644] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 269.539034][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2808'. [ 269.547971][T11660] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2808'. [ 269.994934][T11663] loop0: detected capacity change from 0 to 512 [ 270.038098][T11663] EXT4-fs (loop0): too many log groups per flexible block group [ 270.055781][T11663] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 270.072892][T11663] EXT4-fs (loop0): mount failed [ 270.217495][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 270.232606][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 270.245003][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 270.245003][ T31] [ 270.254749][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 270.260938][ T31] EXT4-fs (loop4): Free/Dirty block details [ 270.266954][ T31] EXT4-fs (loop4): free_blocks=0 [ 270.271959][ T31] EXT4-fs (loop4): dirty_blocks=65 [ 270.277172][ T31] EXT4-fs (loop4): Block reservation details [ 270.283182][ T31] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 270.296220][T11680] loop7: detected capacity change from 0 to 512 [ 270.304334][T11680] EXT4-fs (loop7): orphan cleanup on readonly fs [ 270.310708][T11680] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 270.319295][T11680] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 270.334642][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.364162][T11683] random: crng reseeded on system resumption [ 270.433217][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 270.433233][ T29] audit: type=1326 audit(1761593932.146:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.463230][ T29] audit: type=1326 audit(1761593932.146:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.487115][ T29] audit: type=1326 audit(1761593932.146:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.510851][ T29] audit: type=1326 audit(1761593932.146:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.534502][ T29] audit: type=1326 audit(1761593932.146:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.558206][ T29] audit: type=1326 audit(1761593932.146:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.581840][ T29] audit: type=1326 audit(1761593932.146:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.605536][ T29] audit: type=1326 audit(1761593932.146:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcceefc9 code=0x7ffc0000 [ 270.663024][T11680] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2816: attempt to clear invalid blocks 2 len 1 [ 270.816346][ T29] audit: type=1400 audit(1761593932.556:11567): avc: denied { write } for pid=11685 comm="syz.4.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.836833][T11680] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2816: invalid indirect mapped block 1819239214 (level 0) [ 270.851158][T11680] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2816: invalid indirect mapped block 1819239214 (level 1) [ 270.867830][T11680] EXT4-fs (loop7): 1 truncate cleaned up [ 270.874369][T11680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.890172][T11680] EXT4-fs error (device loop7): __ext4_remount:6748: comm syz.7.2816: Abort forced by user [ 270.903199][T11680] EXT4-fs (loop7): Remounting filesystem read-only [ 270.909781][T11680] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 270.935541][ T29] audit: type=1326 audit(1761593932.676:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.4.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8b83efc9 code=0x7ffc0000 [ 271.038345][T11697] loop0: detected capacity change from 0 to 128 [ 271.291173][T11698] syz.0.2820: attempt to access beyond end of device [ 271.291173][T11698] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 271.304789][T11698] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 271.313590][T11697] syz.0.2820: attempt to access beyond end of device [ 271.313590][T11697] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 271.327152][T11697] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 271.336245][T11698] syz.0.2820: attempt to access beyond end of device [ 271.336245][T11698] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 271.349802][T11698] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 271.449676][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.502393][T11707] hub 1-0:1.0: USB hub found [ 271.507593][T11707] hub 1-0:1.0: 8 ports detected [ 271.557490][T11710] __nla_validate_parse: 11 callbacks suppressed [ 271.557509][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2825'. [ 271.591062][T11711] netdevsim netdevsim7: Direct firmware load for þ failed with error -2 [ 271.727074][T11716] loop0: detected capacity change from 0 to 1024 [ 271.743813][T11716] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.815847][T11722] loop4: detected capacity change from 0 to 128 [ 271.823063][T11716] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2827: Invalid block bitmap block 0 in block_group 0 [ 271.872054][T11716] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2827: Failed to acquire dquot type 0 [ 271.909737][T11716] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2827: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.933190][T11716] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2827: Invalid inode bitmap blk 0 in block_group 0 [ 271.956239][T11716] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 271.964992][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 272.013239][T11716] EXT4-fs (loop0): 1 orphan inode deleted [ 272.027776][T11716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.110647][T11716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.138711][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 272.164027][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2827'. [ 272.211291][T11725] loop7: detected capacity change from 0 to 2048 [ 272.279459][T11722] syz.4.2829: attempt to access beyond end of device [ 272.279459][T11722] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 272.292954][T11722] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 272.313588][T11725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.331023][T11723] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 272.339908][T11730] loop0: detected capacity change from 0 to 512 [ 272.347014][T11723] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 272.366985][T11725] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.406609][T11730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.433151][T11725] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2830: bg 0: block 345: padding at end of block bitmap is not set [ 272.453246][T11730] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.475340][T11730] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2831: bg 0: block 18: invalid block bitmap [ 272.488022][T11725] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 272.556191][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.583304][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.697148][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2838'. [ 272.738711][T11751] loop6: detected capacity change from 0 to 128 [ 272.745628][T11751] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.770380][T11751] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.781692][T11753] random: crng reseeded on system resumption [ 272.915444][T11763] wireguard0: entered promiscuous mode [ 272.920994][T11763] wireguard0: entered allmulticast mode [ 273.015444][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 273.024414][T11766] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2843'. [ 273.033598][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 273.042495][T11766] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2843'. [ 273.052379][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 273.441641][ T1910] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.487174][T11779] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 273.751157][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'. [ 273.772007][T11783] lo speed is unknown, defaulting to 1000 [ 273.883417][T11801] lo speed is unknown, defaulting to 1000 [ 273.912652][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 274.016177][T11812] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 274.055288][T11783] chnl_net:caif_netlink_parms(): no params data found [ 274.066639][ T31] bridge_slave_1: left allmulticast mode [ 274.072323][ T31] bridge_slave_1: left promiscuous mode [ 274.078162][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.086132][ T31] bridge_slave_0: left allmulticast mode [ 274.091836][ T31] bridge_slave_0: left promiscuous mode [ 274.097561][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.182076][T11818] loop0: detected capacity change from 0 to 512 [ 274.194587][T11818] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2861: couldn't read orphan inode 26 (err -116) [ 274.206739][T11818] EXT4-fs (loop0): Remounting filesystem read-only [ 274.213766][T11818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.226458][T11818] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.237580][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.247083][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.256774][ T31] bond0 (unregistering): Released all slaves [ 274.265481][ T31] bond1 (unregistering): Released all slaves [ 274.280914][T11817] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 274.330392][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.347324][ T31] tipc: Left network mode [ 274.369280][T11827] loop0: detected capacity change from 0 to 512 [ 274.377042][T11827] journal_path: Lookup failure for './file0/../file0' [ 274.383925][T11827] EXT4-fs: error: could not find journal device path [ 274.388128][T11829] loop6: detected capacity change from 0 to 512 [ 274.399470][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.405641][T11829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.406840][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.423487][T11783] bridge_slave_0: entered allmulticast mode [ 274.430945][T11783] bridge_slave_0: entered promiscuous mode [ 274.433878][T11829] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2864: iget: bad i_size value: 38620345925642 [ 274.439176][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.456567][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.470465][T11832] loop0: detected capacity change from 0 to 512 [ 274.477328][T11783] bridge_slave_1: entered allmulticast mode [ 274.480653][T11829] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2864: couldn't read orphan inode 15 (err -117) [ 274.483946][T11783] bridge_slave_1: entered promiscuous mode [ 274.497076][T11829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.509577][T11832] EXT4-fs (loop0): orphan cleanup on readonly fs [ 274.520108][T11832] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 274.533628][T11832] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 274.550495][ T31] hsr_slave_0: left promiscuous mode [ 274.556365][ T31] hsr_slave_1: left promiscuous mode [ 274.567424][T11832] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2865: attempt to clear invalid blocks 2 len 1 [ 274.604067][T11832] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2865: invalid indirect mapped block 1819239214 (level 0) [ 274.630000][ T31] team0 (unregistering): Port device team_slave_1 removed [ 274.651179][T11832] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2865: invalid indirect mapped block 1819239214 (level 1) [ 274.665764][ T31] team0 (unregistering): Port device team_slave_0 removed [ 274.678273][T11832] EXT4-fs (loop0): 1 truncate cleaned up [ 274.688602][T11832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.704065][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.716384][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.731375][T11832] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.2865: Abort forced by user [ 274.742801][T11832] EXT4-fs (loop0): Remounting filesystem read-only [ 274.749454][T11832] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 274.775709][T11783] team0: Port device team_slave_0 added [ 274.783319][T11783] team0: Port device team_slave_1 added [ 274.820129][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.827162][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.853126][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.866286][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.873314][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.899359][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.931472][T11783] hsr_slave_0: entered promiscuous mode [ 274.937988][T11783] hsr_slave_1: entered promiscuous mode [ 274.944017][T11783] debugfs: 'hsr0' already exists in 'hsr' [ 274.949770][T11783] Cannot create hsr debugfs directory [ 275.224148][T11783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.233792][T11783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.243306][T11783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.253392][T11783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.266915][ T7338] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:16: bg 0: block 5: invalid block bitmap [ 275.281035][ T7338] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 275.293390][ T7338] EXT4-fs (loop6): This should not happen!! Data will be lost [ 275.293390][ T7338] [ 275.303300][ T7338] EXT4-fs (loop6): Total free blocks count 0 [ 275.309351][ T7338] EXT4-fs (loop6): Free/Dirty block details [ 275.315880][ T7338] EXT4-fs (loop6): free_blocks=0 [ 275.320990][ T7338] EXT4-fs (loop6): dirty_blocks=65 [ 275.326293][ T7338] EXT4-fs (loop6): Block reservation details [ 275.332288][ T7338] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 275.338427][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.353482][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.354674][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.379403][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.393948][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.401102][ T7338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.402366][T11853] loop0: detected capacity change from 0 to 128 [ 275.411442][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.417531][T11853] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.421737][ T7338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.434599][T11853] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.467460][T11783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.477929][T11783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.558612][T11864] wireguard0: entered promiscuous mode [ 275.564260][T11864] wireguard0: entered allmulticast mode [ 275.569994][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 275.570010][ T29] audit: type=1400 audit(1761593937.306:11746): avc: denied { ioctl } for pid=11862 comm="syz.3.2873" path="socket:[34337]" dev="sockfs" ino=34337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.606732][ T29] audit: type=1326 audit(1761593937.346:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.630611][ T29] audit: type=1326 audit(1761593937.346:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.654259][ T29] audit: type=1326 audit(1761593937.346:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.678017][ T29] audit: type=1326 audit(1761593937.346:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.701722][ T29] audit: type=1326 audit(1761593937.346:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.725621][ T29] audit: type=1326 audit(1761593937.346:11752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.737871][T11869] netlink: 'syz.3.2873': attribute type 10 has an invalid length. [ 275.750455][ T29] audit: type=1326 audit(1761593937.346:11753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.780974][ T29] audit: type=1326 audit(1761593937.346:11754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.804713][ T29] audit: type=1326 audit(1761593937.346:11755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 275.837248][T11860] lo speed is unknown, defaulting to 1000 [ 275.922331][ T7048] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.989459][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.098807][T11879] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 276.164489][T11890] loop6: detected capacity change from 0 to 512 [ 276.184313][T11890] journal_path: Lookup failure for './file0/../file0' [ 276.191165][T11890] EXT4-fs: error: could not find journal device path [ 276.285282][T11783] veth0_vlan: entered promiscuous mode [ 276.294192][T11783] veth1_vlan: entered promiscuous mode [ 276.311878][T11783] veth0_macvtap: entered promiscuous mode [ 276.322146][T11783] veth1_macvtap: entered promiscuous mode [ 276.333719][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.345830][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.361092][ T1910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.370369][ T1910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.379414][ T1910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.389027][ T1910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.469380][T11913] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 276.481697][T11913] loop0: detected capacity change from 0 to 512 [ 276.523393][T11913] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2883: couldn't read orphan inode 26 (err -116) [ 276.536011][T11913] EXT4-fs (loop0): Remounting filesystem read-only [ 276.542923][T11913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.556294][T11913] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.594890][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.618883][T11919] loop0: detected capacity change from 0 to 512 [ 276.625868][T11919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.649841][T11919] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2884: iget: bad i_size value: 38620345925642 [ 276.662983][T11919] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2884: couldn't read orphan inode 15 (err -117) [ 276.675668][T11919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.693292][T11923] loop7: detected capacity change from 0 to 128 [ 277.067562][T11923] bio_check_eod: 2 callbacks suppressed [ 277.067579][T11923] syz.7.2885: attempt to access beyond end of device [ 277.067579][T11923] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 277.086951][T11923] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 277.113405][T11924] syz.7.2885: attempt to access beyond end of device [ 277.113405][T11924] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 277.126973][T11924] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 277.489698][T11938] loop6: detected capacity change from 0 to 2048 [ 277.570864][ T1910] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 277.584646][T11938] loop6: p2 < > p4 [ 277.592519][T11938] loop6: p4 size 262144 extends beyond EOD, truncated [ 277.607938][ T1910] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 277.620638][ T1910] EXT4-fs (loop0): This should not happen!! Data will be lost [ 277.620638][ T1910] [ 277.630352][ T1910] EXT4-fs (loop0): Total free blocks count 0 [ 277.636442][ T1910] EXT4-fs (loop0): Free/Dirty block details [ 277.642362][ T1910] EXT4-fs (loop0): free_blocks=0 [ 277.647343][ T1910] EXT4-fs (loop0): dirty_blocks=65 [ 277.652522][ T1910] EXT4-fs (loop0): Block reservation details [ 277.658602][ T1910] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 277.684140][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.732901][T11951] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 277.752946][T11953] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 277.770070][T11951] loop0: detected capacity change from 0 to 512 [ 277.807248][T11951] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2894: couldn't read orphan inode 26 (err -116) [ 277.826637][T11957] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 277.875459][T11951] EXT4-fs (loop0): Remounting filesystem read-only [ 277.893430][T11951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.912481][T11951] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.969564][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.989727][T11964] __nla_validate_parse: 5 callbacks suppressed [ 277.989743][T11964] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2900'. [ 278.029728][T11966] loop0: detected capacity change from 0 to 128 [ 278.223838][T11974] loop6: detected capacity change from 0 to 512 [ 278.251052][T11974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.295762][T11974] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2904: iget: bad i_size value: 38620345925642 [ 278.367446][T11974] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2904: couldn't read orphan inode 15 (err -117) [ 278.383259][T11974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.432052][T11967] syz.0.2901: attempt to access beyond end of device [ 278.432052][T11967] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 278.445654][T11967] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 278.474271][T11967] syz.0.2901: attempt to access beyond end of device [ 278.474271][T11967] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 278.487767][T11967] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 278.510678][T11986] loop7: detected capacity change from 0 to 512 [ 278.527046][T11986] journal_path: Lookup failure for './file0/../file0' [ 278.533984][T11986] EXT4-fs: error: could not find journal device path [ 278.602879][T11989] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 278.756313][T11991] FAULT_INJECTION: forcing a failure. [ 278.756313][T11991] name failslab, interval 1, probability 0, space 0, times 0 [ 278.769106][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.7.2909 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.769142][T11991] Tainted: [W]=WARN [ 278.769197][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.769215][T11991] Call Trace: [ 278.769222][T11991] [ 278.769230][T11991] __dump_stack+0x1d/0x30 [ 278.769257][T11991] dump_stack_lvl+0xe8/0x140 [ 278.769282][T11991] dump_stack+0x15/0x1b [ 278.769326][T11991] should_fail_ex+0x265/0x280 [ 278.769350][T11991] should_failslab+0x8c/0xb0 [ 278.769459][T11991] kmem_cache_alloc_noprof+0x50/0x480 [ 278.769496][T11991] ? io_submit_one+0xb8/0x11d0 [ 278.769534][T11991] io_submit_one+0xb8/0x11d0 [ 278.769573][T11991] __se_sys_io_submit+0xfb/0x280 [ 278.769614][T11991] __x64_sys_io_submit+0x43/0x50 [ 278.769671][T11991] x64_sys_call+0x2d6c/0x3000 [ 278.769739][T11991] do_syscall_64+0xd2/0x200 [ 278.769757][T11991] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.769787][T11991] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 278.769873][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.769899][T11991] RIP: 0033:0x7f81e499efc9 [ 278.769975][T11991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.769998][T11991] RSP: 002b:00007f81e33ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 278.770018][T11991] RAX: ffffffffffffffda RBX: 00007f81e4bf5fa0 RCX: 00007f81e499efc9 [ 278.770030][T11991] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007f81e4bcf000 [ 278.770043][T11991] RBP: 00007f81e33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 278.770119][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.770130][T11991] R13: 00007f81e4bf6038 R14: 00007f81e4bf5fa0 R15: 00007ffdcf350228 [ 278.770149][T11991] [ 279.051937][T11996] lo speed is unknown, defaulting to 1000 [ 279.160621][T11998] loop0: detected capacity change from 0 to 512 [ 279.167614][T11998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.178846][T11998] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2912: iget: bad i_size value: 38620345925642 [ 279.191853][ T7348] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:18: bg 0: block 5: invalid block bitmap [ 279.205223][ T7348] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 279.217592][ T7348] EXT4-fs (loop6): This should not happen!! Data will be lost [ 279.217592][ T7348] [ 279.223354][T11998] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2912: couldn't read orphan inode 15 (err -117) [ 279.227255][ T7348] EXT4-fs (loop6): Total free blocks count 0 [ 279.227270][ T7348] EXT4-fs (loop6): Free/Dirty block details [ 279.227284][ T7348] EXT4-fs (loop6): free_blocks=0 [ 279.244936][T11998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.245119][ T7348] EXT4-fs (loop6): dirty_blocks=65 [ 279.273590][ T7348] EXT4-fs (loop6): Block reservation details [ 279.279597][ T7348] EXT4-fs (loop6): i_reserved_data_blocks=65 [ 279.364267][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.486680][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 279.495914][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.503356][T12009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.522001][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.529573][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.552620][T12012] loop7: detected capacity change from 0 to 128 [ 279.728119][ T352] kworker/u8:5: attempt to access beyond end of device [ 279.728119][ T352] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 279.742270][ T352] kworker/u8:5: attempt to access beyond end of device [ 279.742270][ T352] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 279.756235][ T352] kworker/u8:5: attempt to access beyond end of device [ 279.756235][ T352] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 279.770228][ T352] kworker/u8:5: attempt to access beyond end of device [ 279.770228][ T352] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 279.786779][ T352] kworker/u8:5: attempt to access beyond end of device [ 279.786779][ T352] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 279.800780][ T352] kworker/u8:5: attempt to access beyond end of device [ 279.800780][ T352] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 279.986697][ T7332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 280.000717][ T7332] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 280.010245][T12023] loop4: detected capacity change from 0 to 128 [ 280.013166][ T7332] EXT4-fs (loop0): This should not happen!! Data will be lost [ 280.013166][ T7332] [ 280.029045][ T7332] EXT4-fs (loop0): Total free blocks count 0 [ 280.035153][ T7332] EXT4-fs (loop0): Free/Dirty block details [ 280.041153][ T7332] EXT4-fs (loop0): free_blocks=0 [ 280.046216][ T7332] EXT4-fs (loop0): dirty_blocks=65 [ 280.051347][ T7332] EXT4-fs (loop0): Block reservation details [ 280.057409][ T7332] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 280.108380][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.121178][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2919'. [ 280.130115][T12028] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2919'. [ 280.139240][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2919'. [ 280.148193][T12028] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2919'. [ 280.157320][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2919'. [ 280.191318][T12026] loop6: detected capacity change from 0 to 128 [ 280.544948][T12032] loop0: detected capacity change from 0 to 512 [ 280.551633][T12032] journal_path: Lookup failure for './file0/../file0' [ 280.558460][T12032] EXT4-fs: error: could not find journal device path [ 280.618798][T12034] loop0: detected capacity change from 0 to 512 [ 280.635799][T12034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.654021][T12034] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2923: iget: bad i_size value: 38620345925642 [ 280.669329][T12034] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2923: couldn't read orphan inode 15 (err -117) [ 280.687000][T12034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.746836][T12026] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 280.756029][T12030] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 280.799703][T12038] loop7: detected capacity change from 0 to 512 [ 280.825632][T12038] EXT4-fs (loop7): too many log groups per flexible block group [ 280.843265][T12038] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 280.850119][T12038] EXT4-fs (loop7): mount failed [ 280.872951][T12023] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 280.884609][T12027] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 280.937044][T12044] FAULT_INJECTION: forcing a failure. [ 280.937044][T12044] name failslab, interval 1, probability 0, space 0, times 0 [ 280.949762][T12044] CPU: 1 UID: 0 PID: 12044 Comm: syz.7.2925 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.949939][T12044] Tainted: [W]=WARN [ 280.949948][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.949962][T12044] Call Trace: [ 280.949971][T12044] [ 280.949980][T12044] __dump_stack+0x1d/0x30 [ 280.950037][T12044] dump_stack_lvl+0xe8/0x140 [ 280.950104][T12044] dump_stack+0x15/0x1b [ 280.950125][T12044] should_fail_ex+0x265/0x280 [ 280.950146][T12044] ? __request_region+0x55/0x420 [ 280.950207][T12044] should_failslab+0x8c/0xb0 [ 280.950238][T12044] __kmalloc_cache_noprof+0x4c/0x4a0 [ 280.950275][T12044] __request_region+0x55/0x420 [ 280.950318][T12044] ? bpf_trace_run2+0x124/0x1c0 [ 280.950349][T12044] ? __slab_free+0x77/0x270 [ 280.950376][T12044] serial8250_request_std_resource+0x11d/0x260 [ 280.950422][T12044] serial8250_config_port+0x38/0x2b70 [ 280.950457][T12044] ? free_resource+0x11b/0x270 [ 280.950491][T12044] ? __release_region+0x1e1/0x240 [ 280.950549][T12044] univ8250_config_port+0x299/0x370 [ 280.950576][T12044] uart_ioctl+0xb87/0xe80 [ 280.950604][T12044] ? do_vfs_ioctl+0x866/0xe10 [ 280.950744][T12044] ? tty_jobctrl_ioctl+0x29e/0x810 [ 280.950780][T12044] tty_ioctl+0x7d8/0xb80 [ 280.950803][T12044] ? __pfx_tty_ioctl+0x10/0x10 [ 280.950827][T12044] __se_sys_ioctl+0xce/0x140 [ 280.950896][T12044] __x64_sys_ioctl+0x43/0x50 [ 280.950917][T12044] x64_sys_call+0x1816/0x3000 [ 280.950948][T12044] do_syscall_64+0xd2/0x200 [ 280.950969][T12044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.950999][T12044] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.951077][T12044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.951100][T12044] RIP: 0033:0x7f81e499efc9 [ 280.951118][T12044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.951148][T12044] RSP: 002b:00007f81e33ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.951171][T12044] RAX: ffffffffffffffda RBX: 00007f81e4bf5fa0 RCX: 00007f81e499efc9 [ 280.951185][T12044] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006 [ 280.951198][T12044] RBP: 00007f81e33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 280.951211][T12044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.951224][T12044] R13: 00007f81e4bf6038 R14: 00007f81e4bf5fa0 R15: 00007ffdcf350228 [ 280.951269][T12044] [ 281.324540][T12057] random: crng reseeded on system resumption [ 281.353484][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 281.353504][ T29] audit: type=1400 audit(1761593943.076:12066): avc: denied { create } for pid=12058 comm="syz.7.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 281.625272][ T7332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:14: bg 0: block 5: invalid block bitmap [ 281.653681][ T7332] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 281.666071][ T7332] EXT4-fs (loop0): This should not happen!! Data will be lost [ 281.666071][ T7332] [ 281.675883][ T7332] EXT4-fs (loop0): Total free blocks count 0 [ 281.681947][ T7332] EXT4-fs (loop0): Free/Dirty block details [ 281.688096][ T7332] EXT4-fs (loop0): free_blocks=0 [ 281.693182][ T7332] EXT4-fs (loop0): dirty_blocks=65 [ 281.698306][ T7332] EXT4-fs (loop0): Block reservation details [ 281.704369][ T7332] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 281.714595][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2934'. [ 281.723673][T12073] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2934'. [ 281.732806][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2934'. [ 281.812873][ T29] audit: type=1326 audit(1761593943.506:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b31f5e67 code=0x7ffc0000 [ 281.836805][ T29] audit: type=1326 audit(1761593943.506:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b319b099 code=0x7ffc0000 [ 281.860563][ T29] audit: type=1326 audit(1761593943.506:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b31f5e67 code=0x7ffc0000 [ 281.884130][ T29] audit: type=1326 audit(1761593943.506:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7b319b099 code=0x7ffc0000 [ 281.907799][ T29] audit: type=1326 audit(1761593943.506:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 281.932272][ T29] audit: type=1326 audit(1761593943.506:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 281.956041][ T29] audit: type=1326 audit(1761593943.506:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 281.979897][ T29] audit: type=1326 audit(1761593943.506:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 281.995903][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.003638][ T29] audit: type=1326 audit(1761593943.506:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.6.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 282.038279][T12068] loop7: detected capacity change from 0 to 512 [ 282.050905][T12068] EXT4-fs (loop7): too many log groups per flexible block group [ 282.058844][T12068] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 282.066048][T12068] EXT4-fs (loop7): mount failed [ 282.179811][T12091] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 282.191042][T12093] random: crng reseeded on system resumption [ 282.401615][T12110] loop7: detected capacity change from 0 to 512 [ 282.411124][T12110] EXT4-fs (loop7): too many log groups per flexible block group [ 282.419079][T12110] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 282.426027][T12110] EXT4-fs (loop7): mount failed [ 282.447830][T12117] FAULT_INJECTION: forcing a failure. [ 282.447830][T12117] name failslab, interval 1, probability 0, space 0, times 0 [ 282.460637][T12117] CPU: 0 UID: 0 PID: 12117 Comm: syz.7.2950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.460677][T12117] Tainted: [W]=WARN [ 282.460686][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.460780][T12117] Call Trace: [ 282.460790][T12117] [ 282.460800][T12117] __dump_stack+0x1d/0x30 [ 282.460830][T12117] dump_stack_lvl+0xe8/0x140 [ 282.460855][T12117] dump_stack+0x15/0x1b [ 282.461010][T12117] should_fail_ex+0x265/0x280 [ 282.461035][T12117] should_failslab+0x8c/0xb0 [ 282.461069][T12117] kmem_cache_alloc_noprof+0x50/0x480 [ 282.461104][T12117] ? prepare_creds+0x37/0x4c0 [ 282.461210][T12117] prepare_creds+0x37/0x4c0 [ 282.461234][T12117] __se_sys_capset+0x2a3/0x450 [ 282.461260][T12117] __x64_sys_capset+0x31/0x40 [ 282.461345][T12117] x64_sys_call+0x2823/0x3000 [ 282.461365][T12117] do_syscall_64+0xd2/0x200 [ 282.461382][T12117] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.461432][T12117] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.461461][T12117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.461480][T12117] RIP: 0033:0x7f81e499efc9 [ 282.461564][T12117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.461581][T12117] RSP: 002b:00007f81e33ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 282.461597][T12117] RAX: ffffffffffffffda RBX: 00007f81e4bf5fa0 RCX: 00007f81e499efc9 [ 282.461609][T12117] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 282.461620][T12117] RBP: 00007f81e33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 282.461630][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.461641][T12117] R13: 00007f81e4bf6038 R14: 00007f81e4bf5fa0 R15: 00007ffdcf350228 [ 282.461700][T12117] [ 282.765094][T12128] netlink: 'syz.7.2954': attribute type 10 has an invalid length. [ 282.773167][T12128] FAULT_INJECTION: forcing a failure. [ 282.773167][T12128] name failslab, interval 1, probability 0, space 0, times 0 [ 282.786014][T12128] CPU: 1 UID: 0 PID: 12128 Comm: syz.7.2954 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.786062][T12128] Tainted: [W]=WARN [ 282.786071][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.786089][T12128] Call Trace: [ 282.786096][T12128] [ 282.786104][T12128] __dump_stack+0x1d/0x30 [ 282.786178][T12128] dump_stack_lvl+0xe8/0x140 [ 282.786196][T12128] dump_stack+0x15/0x1b [ 282.786279][T12128] should_fail_ex+0x265/0x280 [ 282.786296][T12128] should_failslab+0x8c/0xb0 [ 282.786323][T12128] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 282.786376][T12128] ? __alloc_skb+0x101/0x320 [ 282.786418][T12128] __alloc_skb+0x101/0x320 [ 282.786445][T12128] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 282.786480][T12128] rtmsg_ifinfo+0x6d/0x110 [ 282.786512][T12128] __dev_notify_flags+0x76/0x1a0 [ 282.786607][T12128] ? vprintk_emit+0x560/0x580 [ 282.786629][T12128] netif_change_flags+0xac/0xd0 [ 282.786657][T12128] do_setlink+0x9d2/0x2810 [ 282.786682][T12128] ? save_fpregs_to_fpstate+0x100/0x160 [ 282.786781][T12128] ? _raw_spin_unlock+0x26/0x50 [ 282.786805][T12128] ? finish_task_switch+0xad/0x2b0 [ 282.786828][T12128] ? __schedule+0x6b9/0xb30 [ 282.786854][T12128] rtnl_setlink+0x311/0x420 [ 282.786947][T12128] ? selinux_capable+0x31/0x40 [ 282.786968][T12128] ? security_capable+0x83/0x90 [ 282.787000][T12128] ? ns_capable+0x7d/0xb0 [ 282.787032][T12128] ? __pfx_rtnl_setlink+0x10/0x10 [ 282.787181][T12128] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 282.787205][T12128] netlink_rcv_skb+0x123/0x220 [ 282.787236][T12128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.787310][T12128] rtnetlink_rcv+0x1c/0x30 [ 282.787382][T12128] netlink_unicast+0x5c0/0x690 [ 282.787411][T12128] netlink_sendmsg+0x58b/0x6b0 [ 282.787429][T12128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.787446][T12128] __sock_sendmsg+0x145/0x180 [ 282.787550][T12128] ____sys_sendmsg+0x31e/0x4e0 [ 282.787584][T12128] ___sys_sendmsg+0x17b/0x1d0 [ 282.787626][T12128] __x64_sys_sendmsg+0xd4/0x160 [ 282.787683][T12128] x64_sys_call+0x191e/0x3000 [ 282.787733][T12128] do_syscall_64+0xd2/0x200 [ 282.787749][T12128] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.787830][T12128] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.787987][T12128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.788049][T12128] RIP: 0033:0x7f81e499efc9 [ 282.788064][T12128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.788122][T12128] RSP: 002b:00007f81e33ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.788147][T12128] RAX: ffffffffffffffda RBX: 00007f81e4bf5fa0 RCX: 00007f81e499efc9 [ 282.788159][T12128] RDX: 00000000240000c0 RSI: 0000200000000140 RDI: 0000000000000007 [ 282.788170][T12128] RBP: 00007f81e33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 282.788187][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.788203][T12128] R13: 00007f81e4bf6038 R14: 00007f81e4bf5fa0 R15: 00007ffdcf350228 [ 282.788268][T12128] [ 282.789102][T12128] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 283.143367][T12135] loop4: detected capacity change from 0 to 512 [ 283.154851][T12135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.182180][T12135] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2957: iget: bad i_size value: 38620345925642 [ 283.196249][T12135] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2957: couldn't read orphan inode 15 (err -117) [ 283.208950][T12135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.286159][T12150] 9pnet_fd: Insufficient options for proto=fd [ 283.293025][T12151] __nla_validate_parse: 7 callbacks suppressed [ 283.293042][T12151] netlink: 40 bytes leftover after parsing attributes in process `/dev/snd/seq'. [ 283.311805][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2962'. [ 284.022232][ T352] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 284.049148][ T352] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 284.061693][ T352] EXT4-fs (loop4): This should not happen!! Data will be lost [ 284.061693][ T352] [ 284.071471][ T352] EXT4-fs (loop4): Total free blocks count 0 [ 284.077514][ T352] EXT4-fs (loop4): Free/Dirty block details [ 284.083671][ T352] EXT4-fs (loop4): free_blocks=0 [ 284.088627][ T352] EXT4-fs (loop4): dirty_blocks=65 [ 284.093800][ T352] EXT4-fs (loop4): Block reservation details [ 284.099803][ T352] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 284.107554][T11783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.120459][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2974'. [ 284.180180][T12197] loop7: detected capacity change from 0 to 512 [ 284.189996][T12197] EXT4-fs (loop7): orphan cleanup on readonly fs [ 284.196526][T12197] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 284.205414][T12197] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 284.220455][T12197] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2980: attempt to clear invalid blocks 2 len 1 [ 284.233895][T12197] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2980: invalid indirect mapped block 1819239214 (level 0) [ 284.248649][T12197] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2980: invalid indirect mapped block 1819239214 (level 1) [ 284.263611][T12197] EXT4-fs (loop7): 1 truncate cleaned up [ 284.269752][T12197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.302161][T12197] EXT4-fs error (device loop7): __ext4_remount:6748: comm syz.7.2980: Abort forced by user [ 284.307615][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 284.312780][T12197] EXT4-fs (loop7): Remounting filesystem read-only [ 284.321617][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.328171][T12197] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 284.335579][T12204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.364579][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.372160][T12204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.398962][T12204] bridge0: port 3(batadv0) entered disabled state [ 284.541099][T12208] loop0: detected capacity change from 0 to 512 [ 284.547998][T12208] journal_path: Lookup failure for './file0/../file0' [ 284.554962][T12208] EXT4-fs: error: could not find journal device path [ 284.605531][T12210] loop0: detected capacity change from 0 to 512 [ 284.612962][T12210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.674735][T12210] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2983: iget: bad i_size value: 38620345925642 [ 284.688094][T12210] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2983: couldn't read orphan inode 15 (err -117) [ 284.702065][T12210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.884250][T12215] loop4: detected capacity change from 0 to 512 [ 284.890815][T12215] journal_path: Lookup failure for './file0/../file0' [ 284.897768][T12215] EXT4-fs: error: could not find journal device path [ 285.203693][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.310719][T12227] bridge_slave_0: left allmulticast mode [ 285.316672][T12227] bridge_slave_0: left promiscuous mode [ 285.322580][T12227] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.387945][T12231] netlink: 4788 bytes leftover after parsing attributes in process `syz.4.2990'. [ 285.429781][T12231] netlink: 4788 bytes leftover after parsing attributes in process `syz.4.2990'. [ 285.441881][T12227] bridge_slave_1: left allmulticast mode [ 285.447655][T12227] bridge_slave_1: left promiscuous mode [ 285.453372][T12227] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.465236][T12227] bond0: (slave bond_slave_0): Releasing backup interface [ 285.476203][T12227] bond0: (slave bond_slave_1): Releasing backup interface [ 285.489916][T12227] team0: Port device team_slave_0 removed [ 285.496751][ T31] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 285.510017][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 285.515777][T12227] team0: Port device team_slave_1 removed [ 285.522480][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 285.522480][ T31] [ 285.533728][T12227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.537778][ T31] EXT4-fs (loop0): Total free blocks count 0 [ 285.537793][ T31] EXT4-fs (loop0): Free/Dirty block details [ 285.537813][ T31] EXT4-fs (loop0): free_blocks=0 [ 285.537824][ T31] EXT4-fs (loop0): dirty_blocks=65 [ 285.575922][ T31] EXT4-fs (loop0): Block reservation details [ 285.581935][ T31] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 285.608740][T10509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.778156][T12258] loop4: detected capacity change from 0 to 128 [ 286.837285][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 286.837300][ T29] audit: type=1326 audit(1761593948.576:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.323472][T12271] loop7: detected capacity change from 0 to 512 [ 287.361120][T12271] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3003: couldn't read orphan inode 26 (err -116) [ 287.377204][ T29] audit: type=1326 audit(1761593948.606:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.400942][ T29] audit: type=1326 audit(1761593948.606:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.424716][ T29] audit: type=1326 audit(1761593948.606:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.448241][ T29] audit: type=1326 audit(1761593948.606:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.471911][ T29] audit: type=1326 audit(1761593948.606:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.495584][ T29] audit: type=1326 audit(1761593948.606:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.519239][ T29] audit: type=1326 audit(1761593948.606:12179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.542822][ T29] audit: type=1326 audit(1761593948.606:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.566608][ T29] audit: type=1326 audit(1761593948.606:12181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.7.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81e499efc9 code=0x7ffc0000 [ 287.642643][T12275] wireguard0: entered promiscuous mode [ 287.648232][T12275] wireguard0: entered allmulticast mode [ 287.682088][T12271] EXT4-fs (loop7): Remounting filesystem read-only [ 287.689540][T12271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.702269][T12271] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.742406][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.876948][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3005'. [ 287.889353][T12287] loop4: detected capacity change from 0 to 512 [ 287.901588][T12287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 287.908081][T12287] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 287.929679][T12287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 287.944776][T12287] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3008: attempt to clear invalid blocks 2 len 1 [ 287.958234][T12287] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3008: invalid indirect mapped block 1819239214 (level 0) [ 287.972839][T12287] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3008: invalid indirect mapped block 1819239214 (level 1) [ 287.989001][T12287] EXT4-fs (loop4): 1 truncate cleaned up [ 287.995540][T12287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.089459][T12296] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.163307][T12296] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.226646][T12296] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.366812][T12296] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.437981][ T7338] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.450283][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 288.459196][T12303] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3011'. [ 288.468255][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 288.477494][T12303] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3011'. [ 288.486689][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 288.510478][ T7338] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.650233][ T7338] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.672809][T11783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.722316][ T7338] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.931686][T12305] loop4: detected capacity change from 0 to 512 [ 288.944807][T12305] EXT4-fs (loop4): too many log groups per flexible block group [ 288.952726][T12305] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 288.959792][T12305] EXT4-fs (loop4): mount failed [ 289.087652][T12317] loop4: detected capacity change from 0 to 128 [ 289.190531][T12321] loop6: detected capacity change from 0 to 512 [ 289.213537][T12321] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3016: couldn't read orphan inode 26 (err -116) [ 289.345414][T12321] EXT4-fs (loop6): Remounting filesystem read-only [ 289.381748][T12321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.413246][T12321] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.520783][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.651858][T12332] lo speed is unknown, defaulting to 1000 [ 289.762294][T12337] FAULT_INJECTION: forcing a failure. [ 289.762294][T12337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.775679][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.7.3021 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.775753][T12337] Tainted: [W]=WARN [ 289.775760][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.775772][T12337] Call Trace: [ 289.775779][T12337] [ 289.775787][T12337] __dump_stack+0x1d/0x30 [ 289.775815][T12337] dump_stack_lvl+0xe8/0x140 [ 289.775842][T12337] dump_stack+0x15/0x1b [ 289.775950][T12337] should_fail_ex+0x265/0x280 [ 289.775975][T12337] should_fail+0xb/0x20 [ 289.775996][T12337] should_fail_usercopy+0x1a/0x20 [ 289.776022][T12337] _copy_from_user+0x1c/0xb0 [ 289.776055][T12337] memdup_user_nul+0x5f/0xe0 [ 289.776171][T12337] sel_write_checkreqprot+0x13d/0x2d0 [ 289.776217][T12337] ? __pfx_sel_write_checkreqprot+0x10/0x10 [ 289.776250][T12337] vfs_write+0x269/0x960 [ 289.776283][T12337] ? __rcu_read_unlock+0x4f/0x70 [ 289.776449][T12337] ? __fget_files+0x184/0x1c0 [ 289.776488][T12337] ksys_write+0xda/0x1a0 [ 289.776579][T12337] __x64_sys_write+0x40/0x50 [ 289.776612][T12337] x64_sys_call+0x2802/0x3000 [ 289.776638][T12337] do_syscall_64+0xd2/0x200 [ 289.776656][T12337] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 289.776731][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.776759][T12337] RIP: 0033:0x7f81e499efc9 [ 289.776778][T12337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.776865][T12337] RSP: 002b:00007f81e33ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.776950][T12337] RAX: ffffffffffffffda RBX: 00007f81e4bf5fa0 RCX: 00007f81e499efc9 [ 289.777007][T12337] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000006 [ 289.777021][T12337] RBP: 00007f81e33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 289.777109][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.777125][T12337] R13: 00007f81e4bf6038 R14: 00007f81e4bf5fa0 R15: 00007ffdcf350228 [ 289.777150][T12337] [ 290.269855][T12340] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3022'. [ 290.279219][T12340] xt_time: unknown flags 0xf4 [ 291.093738][T12358] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.149540][T12359] loop6: detected capacity change from 0 to 1024 [ 291.163467][T12358] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.216506][T12358] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.276024][T12358] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.349602][ T7332] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.362421][ T7332] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.393290][ T7332] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.401512][ T7332] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.521396][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 291.564692][T12371] loop6: detected capacity change from 0 to 128 [ 291.576849][T12371] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.591133][T12371] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.698283][T12376] wireguard0: entered promiscuous mode [ 291.703836][T12376] wireguard0: entered allmulticast mode [ 291.806869][T12382] netlink: 'syz.3.3037': attribute type 10 has an invalid length. [ 291.814780][T12382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3037'. [ 292.589177][T12382] serio: Serial port ptm0 [ 292.724715][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 292.782689][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 293.259637][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 293.259664][ T29] audit: type=1400 audit(1761593954.996:12405): avc: denied { write } for pid=12420 comm="syz.3.3048" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.260192][T12421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.265976][ T29] audit: type=1400 audit(1761593954.996:12406): avc: denied { ioctl } for pid=12420 comm="syz.3.3048" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.309367][T12421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.541274][T12421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3048'. [ 293.701263][T12431] loop4: detected capacity change from 0 to 512 [ 293.708461][T12431] journal_path: Lookup failure for './file0/../file0' [ 293.715321][T12431] EXT4-fs: error: could not find journal device path [ 293.740075][T12433] loop7: detected capacity change from 0 to 128 [ 293.790961][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 293.808592][T12439] loop7: detected capacity change from 0 to 512 [ 293.824056][T12439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.835560][T12439] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3057: iget: bad i_size value: 38620345925642 [ 293.849875][T12439] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3057: couldn't read orphan inode 15 (err -117) [ 293.862616][T12439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.030997][ T29] audit: type=1326 audit(1761593955.766:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.064244][ T29] audit: type=1326 audit(1761593955.766:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.088069][ T29] audit: type=1326 audit(1761593955.766:12409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.112119][ T29] audit: type=1326 audit(1761593955.766:12410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.135932][ T29] audit: type=1326 audit(1761593955.766:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.159802][ T29] audit: type=1326 audit(1761593955.766:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.183453][ T29] audit: type=1326 audit(1761593955.766:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.207203][ T29] audit: type=1326 audit(1761593955.766:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d270efc9 code=0x7ffc0000 [ 294.231383][T12446] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.363164][ T3544] IPVS: starting estimator thread 0... [ 294.453206][T12448] IPVS: using max 2400 ests per chain, 120000 per kthread [ 294.548105][T12454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.863498][T12460] loop4: detected capacity change from 0 to 512 [ 294.881120][ T31] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 294.913349][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 65 with error 28 [ 294.925741][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 294.925741][ T31] [ 294.936038][ T31] EXT4-fs (loop7): Total free blocks count 0 [ 294.942095][ T31] EXT4-fs (loop7): Free/Dirty block details [ 294.948084][ T31] EXT4-fs (loop7): free_blocks=0 [ 294.953024][ T31] EXT4-fs (loop7): dirty_blocks=65 [ 294.958282][ T31] EXT4-fs (loop7): Block reservation details [ 294.964319][ T31] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 294.984910][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.987574][T12454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.031847][T12463] bond1: option lp_interval: invalid value (0) [ 295.038137][T12463] bond1: option lp_interval: allowed values 1 - 2147483647 [ 295.071577][T12463] bond1 (unregistering): Released all slaves [ 295.086423][T12454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.166873][T12454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.222513][ T7338] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.243697][ T7338] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.260954][ T7338] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.278014][ T7338] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.666069][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 295.737940][T12489] loop4: detected capacity change from 0 to 128 [ 295.856133][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'. [ 295.865330][T12498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.872770][T12498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.894347][T12498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.901758][T12498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.984573][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'. [ 296.061196][T12506] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3080'. [ 296.123338][T12489] bio_check_eod: 50 callbacks suppressed [ 296.123357][T12489] syz.4.3074: attempt to access beyond end of device [ 296.123357][T12489] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 296.142518][T12489] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 296.151757][T12489] syz.4.3074: attempt to access beyond end of device [ 296.151757][T12489] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 296.165400][T12489] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 296.221480][T12511] netlink: 'syz.6.3082': attribute type 4 has an invalid length. [ 296.304171][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 296.313297][T12512] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3081'. [ 296.322355][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 296.331258][T12512] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3081'. [ 296.576966][T12518] loop6: detected capacity change from 0 to 1024 [ 296.606971][T12518] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 296.706911][T12518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.809778][ T8220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.161283][T12573] netlink: 'syz.6.3104': attribute type 10 has an invalid length. [ 298.176543][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.195767][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.202903][T12573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.210251][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.217340][T12573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.228670][T12573] bridge0: entered promiscuous mode [ 298.234877][T12573] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.383197][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 298.383216][ T29] audit: type=1400 audit(1761593960.116:12713): avc: denied { mount } for pid=12576 comm="syz.7.3107" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 298.456088][ T29] audit: type=1326 audit(1761593960.196:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.479872][ T29] audit: type=1326 audit(1761593960.196:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.503630][ T29] audit: type=1326 audit(1761593960.196:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.527261][ T29] audit: type=1326 audit(1761593960.196:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.550907][ T29] audit: type=1326 audit(1761593960.196:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.574881][ T29] audit: type=1326 audit(1761593960.196:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.598597][ T29] audit: type=1326 audit(1761593960.196:12720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.623053][ T29] audit: type=1326 audit(1761593960.196:12721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.649801][T12592] __nla_validate_parse: 8 callbacks suppressed [ 298.649818][T12592] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3112'. [ 298.656029][ T29] audit: type=1326 audit(1761593960.276:12722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12593 comm="syz.6.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc7b31fefc9 code=0x7ffc0000 [ 298.692160][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 298.747244][T12599] FAULT_INJECTION: forcing a failure. [ 298.747244][T12599] name failslab, interval 1, probability 0, space 0, times 0 [ 298.759963][T12599] CPU: 0 UID: 0 PID: 12599 Comm: syz.0.3115 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.760086][T12599] Tainted: [W]=WARN [ 298.760156][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.760173][T12599] Call Trace: [ 298.760180][T12599] [ 298.760199][T12599] __dump_stack+0x1d/0x30 [ 298.760230][T12599] dump_stack_lvl+0xe8/0x140 [ 298.760260][T12599] dump_stack+0x15/0x1b [ 298.760281][T12599] should_fail_ex+0x265/0x280 [ 298.760304][T12599] should_failslab+0x8c/0xb0 [ 298.760345][T12599] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 298.760387][T12599] ? dup_task_struct+0x70/0x6b0 [ 298.760424][T12599] dup_task_struct+0x70/0x6b0 [ 298.760475][T12599] ? _parse_integer+0x27/0x40 [ 298.760521][T12599] copy_process+0x399/0x2000 [ 298.760576][T12599] ? kstrtouint+0x76/0xc0 [ 298.760613][T12599] ? kstrtouint_from_user+0x9f/0xf0 [ 298.760707][T12599] ? __rcu_read_unlock+0x4f/0x70 [ 298.760747][T12599] kernel_clone+0x16c/0x5c0 [ 298.760781][T12599] ? vfs_write+0x7e8/0x960 [ 298.760834][T12599] __x64_sys_clone+0xe6/0x120 [ 298.760957][T12599] x64_sys_call+0x119c/0x3000 [ 298.760987][T12599] do_syscall_64+0xd2/0x200 [ 298.761013][T12599] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.761045][T12599] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.761110][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.761135][T12599] RIP: 0033:0x7f91fcceefc9 [ 298.761151][T12599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.761172][T12599] RSP: 002b:00007f91fb74efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 298.761205][T12599] RAX: ffffffffffffffda RBX: 00007f91fcf45fa0 RCX: 00007f91fcceefc9 [ 298.761219][T12599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 298.761233][T12599] RBP: 00007f91fb74f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.761247][T12599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 298.761261][T12599] R13: 00007f91fcf46038 R14: 00007f91fcf45fa0 R15: 00007fff29a7d028 [ 298.761312][T12599] [ 298.761614][T12601] loop6: detected capacity change from 0 to 512 [ 298.979369][T12604] FAULT_INJECTION: forcing a failure. [ 298.979369][T12604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.980352][T12601] journal_path: Lookup failure for './file0/../file0' [ 298.992761][T12604] CPU: 1 UID: 0 PID: 12604 Comm: syz.7.3117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.992813][T12604] Tainted: [W]=WARN [ 298.992829][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.992869][T12604] Call Trace: [ 298.992880][T12604] [ 298.992891][T12604] __dump_stack+0x1d/0x30 [ 298.992918][T12604] dump_stack_lvl+0xe8/0x140 [ 298.992988][T12604] dump_stack+0x15/0x1b [ 298.993032][T12604] should_fail_ex+0x265/0x280 [ 298.993075][T12604] should_fail_alloc_page+0xf2/0x100 [ 298.993145][T12604] __alloc_frozen_pages_noprof+0xff/0x360 [ 298.993304][T12604] alloc_pages_mpol+0xb3/0x260 [ 298.993335][T12604] folio_alloc_mpol_noprof+0x39/0x80 [ 298.993376][T12604] shmem_get_folio_gfp+0x3cf/0xd60 [ 298.993435][T12604] shmem_write_begin+0xa8/0x190 [ 298.993477][T12604] generic_perform_write+0x184/0x490 [ 298.993522][T12604] shmem_file_write_iter+0xc5/0xf0 [ 298.993563][T12604] iter_file_splice_write+0x666/0xa60 [ 298.993640][T12604] ? __pfx_iter_file_splice_write+0x10/0x10 [ 298.993676][T12604] do_splice+0x972/0x10b0 [ 298.993720][T12604] ? __rcu_read_unlock+0x4f/0x70 [ 298.993756][T12604] ? __fget_files+0x184/0x1c0 [ 298.993864][T12604] __se_sys_splice+0x26c/0x3a0 [ 298.993907][T12604] __x64_sys_splice+0x78/0x90 [ 298.993956][T12604] x64_sys_call+0x28a7/0x3000 [ 298.994017][T12604] do_syscall_64+0xd2/0x200 [ 298.994061][T12604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.994106][T12604] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.994165][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.994233][T12604] RIP: 0033:0x7f81e499efc9 [ 298.994264][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.994301][T12604] RSP: 002b:00007f81e33de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 298.994334][T12604] RAX: ffffffffffffffda RBX: 00007f81e4bf6090 RCX: 00007f81e499efc9 [ 298.994368][T12604] RDX: 000000000000000c RSI: 0000000000000000 RDI: 000000000000000a [ 298.994385][T12604] RBP: 00007f81e33de090 R08: 00000000000408cd R09: 0000000000000000 [ 298.994402][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.994429][T12604] R13: 00007f81e4bf6128 R14: 00007f81e4bf6090 R15: 00007ffdcf350228 [ 298.994456][T12604] [ 299.048336][T12611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3119'. [ 299.049198][T12601] EXT4-fs: error: could not find journal device path [ 299.382504][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 299.399606][T12619] bond1 (unregistering): Released all slaves [ 299.482105][T12625] FAULT_INJECTION: forcing a failure. [ 299.482105][T12625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.495258][T12625] CPU: 1 UID: 0 PID: 12625 Comm: syz.0.3123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.495298][T12625] Tainted: [W]=WARN [ 299.495307][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.495322][T12625] Call Trace: [ 299.495328][T12625] [ 299.495336][T12625] __dump_stack+0x1d/0x30 [ 299.495415][T12625] dump_stack_lvl+0xe8/0x140 [ 299.495441][T12625] dump_stack+0x15/0x1b [ 299.495458][T12625] should_fail_ex+0x265/0x280 [ 299.495482][T12625] should_fail+0xb/0x20 [ 299.495529][T12625] should_fail_usercopy+0x1a/0x20 [ 299.495554][T12625] _copy_to_user+0x20/0xa0 [ 299.495585][T12625] simple_read_from_buffer+0xb5/0x130 [ 299.495666][T12625] proc_fail_nth_read+0x10e/0x150 [ 299.495705][T12625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.495746][T12625] vfs_read+0x1a8/0x770 [ 299.495768][T12625] ? __rcu_read_unlock+0x4f/0x70 [ 299.495812][T12625] ? __fget_files+0x184/0x1c0 [ 299.495852][T12625] ksys_read+0xda/0x1a0 [ 299.495955][T12625] __x64_sys_read+0x40/0x50 [ 299.496043][T12625] x64_sys_call+0x27c0/0x3000 [ 299.496068][T12625] do_syscall_64+0xd2/0x200 [ 299.496113][T12625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 299.496148][T12625] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 299.496243][T12625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.496278][T12625] RIP: 0033:0x7f91fcced9dc [ 299.496297][T12625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.496320][T12625] RSP: 002b:00007f91fb74f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.496415][T12625] RAX: ffffffffffffffda RBX: 00007f91fcf45fa0 RCX: 00007f91fcced9dc [ 299.496430][T12625] RDX: 000000000000000f RSI: 00007f91fb74f0a0 RDI: 0000000000000006 [ 299.496446][T12625] RBP: 00007f91fb74f090 R08: 0000000000000000 R09: 0000000000000000 [ 299.496461][T12625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.496476][T12625] R13: 00007f91fcf46038 R14: 00007f91fcf45fa0 R15: 00007fff29a7d028 [ 299.496501][T12625] [ 299.739050][T12627] SELinux: failed to load policy [ 299.804074][T12630] loop7: detected capacity change from 0 to 512 [ 299.811493][T12630] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 299.836842][T12630] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.3126: corrupted in-inode xattr: invalid ea_ino [ 299.853221][T12630] EXT4-fs (loop7): Remounting filesystem read-only [ 299.860251][T12630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.876509][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 299.904169][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.938959][T12641] loop7: detected capacity change from 0 to 128 [ 299.968823][T12646] 9pnet_fd: Insufficient options for proto=fd [ 299.975273][T12646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3132'. [ 299.995485][T12646] lo speed is unknown, defaulting to 1000 [ 300.068574][T12648] siw: device registration error -23 [ 300.108657][T12643] loop6: detected capacity change from 0 to 512 [ 300.136618][T12643] EXT4-fs (loop6): too many log groups per flexible block group [ 300.283202][T12643] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 300.470780][T12643] EXT4-fs (loop6): mount failed [ 300.737209][T12667] FAULT_INJECTION: forcing a failure. [ 300.737209][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 300.750135][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.0.3138 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.750175][T12667] Tainted: [W]=WARN [ 300.750183][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.750199][T12667] Call Trace: [ 300.750208][T12667] [ 300.750216][T12667] __dump_stack+0x1d/0x30 [ 300.750299][T12667] dump_stack_lvl+0xe8/0x140 [ 300.750319][T12667] dump_stack+0x15/0x1b [ 300.750367][T12667] should_fail_ex+0x265/0x280 [ 300.750431][T12667] ? sctp_add_bind_addr+0x71/0x1e0 [ 300.750466][T12667] should_failslab+0x8c/0xb0 [ 300.750501][T12667] __kmalloc_cache_noprof+0x4c/0x4a0 [ 300.750539][T12667] sctp_add_bind_addr+0x71/0x1e0 [ 300.750580][T12667] sctp_copy_local_addr_list+0x199/0x220 [ 300.750659][T12667] sctp_copy_one_addr+0x7f/0x280 [ 300.750691][T12667] sctp_bind_addr_copy+0x79/0x290 [ 300.750729][T12667] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 300.750784][T12667] sctp_connect_new_asoc+0x1c3/0x3a0 [ 300.750818][T12667] sctp_sendmsg+0xf10/0x18d0 [ 300.750862][T12667] ? selinux_socket_sendmsg+0xb1/0x1b0 [ 300.750971][T12667] ? __pfx_sctp_sendmsg+0x10/0x10 [ 300.751042][T12667] inet_sendmsg+0xc5/0xd0 [ 300.751070][T12667] __sock_sendmsg+0x102/0x180 [ 300.751102][T12667] ____sys_sendmsg+0x31e/0x4e0 [ 300.751171][T12667] ___sys_sendmsg+0x17b/0x1d0 [ 300.751301][T12667] __x64_sys_sendmsg+0xd4/0x160 [ 300.751412][T12667] x64_sys_call+0x191e/0x3000 [ 300.751504][T12667] do_syscall_64+0xd2/0x200 [ 300.751528][T12667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.751563][T12667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 300.751594][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.751646][T12667] RIP: 0033:0x7f91fcceefc9 [ 300.751661][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.751679][T12667] RSP: 002b:00007f91fb74f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.751700][T12667] RAX: ffffffffffffffda RBX: 00007f91fcf45fa0 RCX: 00007f91fcceefc9 [ 300.751712][T12667] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 300.751724][T12667] RBP: 00007f91fb74f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.751779][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.751794][T12667] R13: 00007f91fcf46038 R14: 00007f91fcf45fa0 R15: 00007fff29a7d028 [ 300.751817][T12667] [ 300.776188][T12647] syz.7.3128: attempt to access beyond end of device [ 300.776188][T12647] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 301.005127][T12647] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 301.046251][T12647] syz.7.3128: attempt to access beyond end of device [ 301.046251][T12647] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 301.059792][T12647] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 301.088481][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 301.399940][T12697] FAULT_INJECTION: forcing a failure. [ 301.399940][T12697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.413172][T12697] CPU: 0 UID: 0 PID: 12697 Comm: syz.0.3150 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.413326][T12697] Tainted: [W]=WARN [ 301.413333][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.413345][T12697] Call Trace: [ 301.413353][T12697] [ 301.413360][T12697] __dump_stack+0x1d/0x30 [ 301.413425][T12697] dump_stack_lvl+0xe8/0x140 [ 301.413466][T12697] dump_stack+0x15/0x1b [ 301.413483][T12697] should_fail_ex+0x265/0x280 [ 301.413508][T12697] should_fail+0xb/0x20 [ 301.413579][T12697] should_fail_usercopy+0x1a/0x20 [ 301.413601][T12697] _copy_from_iter+0xd2/0xe80 [ 301.413624][T12697] ? __build_skb_around+0x1ab/0x200 [ 301.413658][T12697] ? __alloc_skb+0x223/0x320 [ 301.413759][T12697] netlink_sendmsg+0x471/0x6b0 [ 301.413781][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.413799][T12697] __sock_sendmsg+0x145/0x180 [ 301.413823][T12697] ____sys_sendmsg+0x31e/0x4e0 [ 301.413876][T12697] ___sys_sendmsg+0x17b/0x1d0 [ 301.413980][T12697] __x64_sys_sendmsg+0xd4/0x160 [ 301.414029][T12697] x64_sys_call+0x191e/0x3000 [ 301.414133][T12697] do_syscall_64+0xd2/0x200 [ 301.414157][T12697] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.414192][T12697] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 301.414230][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.414314][T12697] RIP: 0033:0x7f91fcceefc9 [ 301.414388][T12697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.414410][T12697] RSP: 002b:00007f91fb74f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.414454][T12697] RAX: ffffffffffffffda RBX: 00007f91fcf45fa0 RCX: 00007f91fcceefc9 [ 301.414466][T12697] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 301.414478][T12697] RBP: 00007f91fb74f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.414490][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.414503][T12697] R13: 00007f91fcf46038 R14: 00007f91fcf45fa0 R15: 00007fff29a7d028 [ 301.414527][T12697] [ 301.675833][T12699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.689362][T12701] loop7: detected capacity change from 0 to 512 [ 301.706075][T12701] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.735888][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 301.758818][T12699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.784764][T12708] lo speed is unknown, defaulting to 1000 [ 301.792854][T12701] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.3151: iget: bad i_size value: 38620345925642 [ 301.810363][T12699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.812672][T12701] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3151: couldn't read orphan inode 15 (err -117) [ 301.866431][T12713] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 301.872987][T12713] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 301.880442][T12713] vhci_hcd vhci_hcd.0: Device attached [ 301.887924][T12701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.902871][T12699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.977781][ T7344] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.993104][ T7344] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.019365][ T7344] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.039053][ T7344] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.073118][ T9] vhci_hcd: vhci_device speed not set [ 302.162178][T12721] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3151: iget: bad i_size value: 38620345925642 [ 302.175021][T12721] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3151: iget: bad i_size value: 38620345925642 [ 302.374106][T12724] FAULT_INJECTION: forcing a failure. [ 302.374106][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 302.386958][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.0.3158 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.386998][T12724] Tainted: [W]=WARN [ 302.387006][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.387077][T12724] Call Trace: [ 302.387084][T12724] [ 302.387139][T12724] __dump_stack+0x1d/0x30 [ 302.387168][T12724] dump_stack_lvl+0xe8/0x140 [ 302.387261][T12724] dump_stack+0x15/0x1b [ 302.387284][T12724] should_fail_ex+0x265/0x280 [ 302.387309][T12724] should_failslab+0x8c/0xb0 [ 302.387367][T12724] kmem_cache_alloc_noprof+0x50/0x480 [ 302.387395][T12724] ? alloc_empty_file+0x76/0x200 [ 302.387439][T12724] alloc_empty_file+0x76/0x200 [ 302.387508][T12724] alloc_file_pseudo+0xc6/0x160 [ 302.387536][T12724] sock_alloc_file+0x9c/0x1e0 [ 302.387567][T12724] __sys_socket+0x116/0x180 [ 302.387605][T12724] __x64_sys_socket+0x3f/0x50 [ 302.387713][T12724] x64_sys_call+0x1147/0x3000 [ 302.387737][T12724] do_syscall_64+0xd2/0x200 [ 302.387814][T12724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.387849][T12724] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 302.387880][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.387901][T12724] RIP: 0033:0x7f91fccf0ee7 [ 302.387929][T12724] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.387973][T12724] RSP: 002b:00007f91fb74dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 302.387997][T12724] RAX: ffffffffffffffda RBX: 00007f91fcf45fa0 RCX: 00007f91fccf0ee7 [ 302.388013][T12724] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 302.388026][T12724] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 302.388038][T12724] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000002 [ 302.388055][T12724] R13: 00007f91fcf46038 R14: 00007f91fcf45fa0 R15: 00007fff29a7d028 [ 302.388075][T12724] [ 302.687074][ T9] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 302.795844][ T8353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.805059][ T7082] IPVS: starting estimator thread 0... [ 302.883035][T12735] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.893233][T12729] IPVS: using max 2400 ests per chain, 120000 per kthread [ 303.019498][T12715] vhci_hcd: connection reset by peer [ 303.025049][ T7344] vhci_hcd: stop threads [ 303.029307][ T7344] vhci_hcd: release socket [ 303.033802][ T7344] vhci_hcd: disconnect device [ 303.048493][T12736] lo speed is unknown, defaulting to 1000 [ 303.680430][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 303.680529][ T29] audit: type=1400 audit(1761593965.416:13208): avc: denied { read } for pid=12743 comm="syz.6.3165" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 303.716443][T12745] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3165'. [ 303.796242][T12749] loop4: detected capacity change from 0 to 128 [ 303.847752][T12752] loop6: detected capacity change from 0 to 128 [ 303.906274][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3171'. [ 303.915443][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3171'. [ 303.940059][T12749] ================================================================== [ 303.941853][T12756] bridge0: port 3(macsec1) entered blocking state [ 303.948195][T12749] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 303.948239][T12749] [ 303.948246][T12749] write to 0xffff88810049ce14 of 4 bytes by task 12757 on cpu 1: [ 303.948265][T12749] xas_set_mark+0x12b/0x140 [ 303.948295][T12749] __folio_start_writeback+0x155/0x390 [ 303.954807][T12756] bridge0: port 3(macsec1) entered disabled state [ 303.961844][T12749] __block_write_full_folio+0x53a/0x8f0 [ 303.979663][T12756] macsec1: entered allmulticast mode [ 303.981952][T12749] block_write_full_folio+0x2c2/0x2e0 [ 304.004620][T12749] mpage_writepages+0x6cf/0x1250 [ 304.009606][T12749] fat_writepages+0x24/0x30 [ 304.014135][T12749] do_writepages+0x1c6/0x310 [ 304.018740][T12749] file_write_and_wait_range+0x156/0x2c0 [ 304.024417][T12749] __generic_file_fsync+0x46/0x140 [ 304.029545][T12749] fat_file_fsync+0x49/0x100 [ 304.034152][T12749] vfs_fsync_range+0x10d/0x130 [ 304.038935][T12749] generic_file_write_iter+0x1b8/0x2f0 [ 304.044403][T12749] iter_file_splice_write+0x666/0xa60 [ 304.049786][T12749] direct_splice_actor+0x156/0x2a0 [ 304.054913][T12749] splice_direct_to_actor+0x312/0x680 [ 304.060300][T12749] do_splice_direct+0xda/0x150 [ 304.065087][T12749] do_sendfile+0x380/0x650 [ 304.069531][T12749] __x64_sys_sendfile64+0x105/0x150 [ 304.074756][T12749] x64_sys_call+0x2bb4/0x3000 [ 304.079454][T12749] do_syscall_64+0xd2/0x200 [ 304.083974][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.089878][T12749] [ 304.092376][T12749] read to 0xffff88810049ce14 of 4 bytes by task 12749 on cpu 0: [ 304.100016][T12749] xas_find_marked+0x5dc/0x620 [ 304.104790][T12749] find_get_entry+0x5d/0x380 [ 304.109430][T12749] filemap_get_folios_tag+0x92/0x210 [ 304.114746][T12749] filemap_fdatawait_range+0x88/0x1d0 [ 304.120220][T12749] __writeback_single_inode+0xdb/0x7c0 [ 304.125776][T12749] writeback_single_inode+0x16d/0x3f0 [ 304.131175][T12749] sync_inode_metadata+0x5b/0x90 [ 304.136135][T12749] __generic_file_fsync+0xf8/0x140 [ 304.141260][T12749] fat_file_fsync+0x49/0x100 [ 304.145861][T12749] vfs_fsync_range+0x10d/0x130 [ 304.150639][T12749] generic_file_write_iter+0x1b8/0x2f0 [ 304.156107][T12749] iter_file_splice_write+0x666/0xa60 [ 304.161490][T12749] direct_splice_actor+0x156/0x2a0 [ 304.166612][T12749] splice_direct_to_actor+0x312/0x680 [ 304.172005][T12749] do_splice_direct+0xda/0x150 [ 304.176778][T12749] do_sendfile+0x380/0x650 [ 304.181218][T12749] __x64_sys_sendfile64+0x105/0x150 [ 304.186433][T12749] x64_sys_call+0x2bb4/0x3000 [ 304.191124][T12749] do_syscall_64+0xd2/0x200 [ 304.195642][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.201544][T12749] [ 304.203875][T12749] value changed: 0x0a000021 -> 0x04000021 [ 304.209599][T12749] [ 304.211925][T12749] Reported by Kernel Concurrency Sanitizer on: [ 304.218084][T12749] CPU: 0 UID: 0 PID: 12749 Comm: syz.4.3167 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.229465][T12749] Tainted: [W]=WARN [ 304.233530][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.243596][T12749] ================================================================== [ 304.377305][T12759] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3171'. [ 304.386842][T12756] macsec1: left allmulticast mode [ 304.392470][T12759] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3171'. [ 304.516204][T12757] syz.4.3167: attempt to access beyond end of device [ 304.516204][T12757] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 304.529756][T12757] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 304.538765][T12757] syz.4.3167: attempt to access beyond end of device [ 304.538765][T12757] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 304.552384][T12757] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 307.753220][ T9] usb 13-1: enqueue for inactive port 0 [ 307.758834][ T9] usb 13-1: enqueue for inactive port 0 [ 307.833177][ T9] vhci_hcd: vhci_device speed not set