last executing test programs: 5m41.097331878s ago: executing program 4 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000200)='\x00', 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x40, 0x7fffffff, 0x8, @private2, @mcast1, 0x7800, 0x700, 0x5, 0x3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = signalfd(r2, &(0x7f0000000580)={[0x1]}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0xb, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x74}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x0, 0x0, 0xa, 0x4, 0x30, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f00000002c0)='syzkaller\x00', 0x8001, 0x73, &(0x7f0000000300)=""/115, 0x41000, 0x80, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000500)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xd, 0x8, 0x2}, 0x10, 0xa3dc, r2, 0x2, &(0x7f0000000600)=[r0, r0, 0xffffffffffffffff, r5], &(0x7f0000000640)=[{0x2, 0x1, 0x5, 0x9}, {0x3, 0x1, 0x9, 0x9}], 0x10, 0x2}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x7fffffff, 0x9) r9 = fsmount(r7, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') 5m40.8589374s ago: executing program 4 (id=2200): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000005300000000000000"], 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m40.79349921s ago: executing program 4 (id=2202): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 5m40.75089181s ago: executing program 4 (id=2203): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 5m40.541637462s ago: executing program 4 (id=2206): creat(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010057ac0000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000150a"], 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 5m40.405380063s ago: executing program 4 (id=2208): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000380)={0x5, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @loopback}}}, 0x108) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x6, 0xf5cd}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={r8, 0x4, 0x479}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @loopback}, @private=0xa010101, 0x16, 0x4}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) close(r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}, {&(0x7f0000000080)="fab46b50a1bf5bed8c2336117afc593030c40a7b840b33cae70b39e626df2b87b0fcee9c913f16ac79a3603af89eaae487fa4c1f43", 0x35}, {&(0x7f00000000c0)="92cafc05a9cf2c5bb70d723179804bdf", 0x10}, {&(0x7f0000000180)="bd1543611017a2ae04954be0fb401c325138165f1fd77d7c93266c2a9e3ed5e52784c4e1cbeb67d3c8158200af82aad9e125a7a16110c11abf6fc9fac5631dda62750481c6328a0c716d8abef401d98fe81d3af0dd6b1ae1f08870c09e6c523d90e7665d6922786a747539", 0x6b}], 0x4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m40.405114263s ago: executing program 32 (id=2208): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000380)={0x5, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @loopback}}}, 0x108) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x6, 0xf5cd}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={r8, 0x4, 0x479}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @loopback}, @private=0xa010101, 0x16, 0x4}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) close(r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}, {&(0x7f0000000080)="fab46b50a1bf5bed8c2336117afc593030c40a7b840b33cae70b39e626df2b87b0fcee9c913f16ac79a3603af89eaae487fa4c1f43", 0x35}, {&(0x7f00000000c0)="92cafc05a9cf2c5bb70d723179804bdf", 0x10}, {&(0x7f0000000180)="bd1543611017a2ae04954be0fb401c325138165f1fd77d7c93266c2a9e3ed5e52784c4e1cbeb67d3c8158200af82aad9e125a7a16110c11abf6fc9fac5631dda62750481c6328a0c716d8abef401d98fe81d3af0dd6b1ae1f08870c09e6c523d90e7665d6922786a747539", 0x6b}], 0x4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m36.667674838s ago: executing program 2 (id=2250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x18) sendmmsg$inet(r4, &(0x7f0000000700)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="2d41498c4df96dcfb021bc764bfece2e0df48b2fe58cca13817ac26f481d2c92d8571a00ee48b66abc27a91e166f6df25aeb7f32c67ec5d4b3b1d94d1a96dd29958265a31a86ac8d2cd0ed8708551039cc94637e99f7a07ad8d45f328685cdba5734174416890605a1b42d41f47460a90a3d1f1887dc2cff3abd941758d6db9912ed2a89cf942e32d22ec57b61594441adc217b60c59e0e14235e6b44528c0eab0be5aab3d326902c28332c6250f46adbb4c31766891b68ed1f7a44d75b15344988e1ae252bdd2d7a88b964bdae68009171c8fcc98b49d240cd94e5bb3", 0xdd}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="5c9206115237f4bfc5ccefb76e3e36783d862dcbd3b8979ab447965836a06806909eb214793126b23a529700d43657649e9ada5c59cd9b8791e64641c7b8296b66407962f104e1e7f6127d6e3eb824f768226c10deae726794bbd3cee70b61417bc860aa0c5bc439f0c6726b2f616915761e6aacea5641a8c9c8d7cb7430c85f5a5edd6e47012630ae002e0e22955cdde117fd0b6bdaf12fd61e9f637614f69d7c40c331166ec7f083b64b8e545fc573cbb947dec28bd4b212c6b7bc544353bd37e4793ade3081bb14aa143bf58392", 0xcf}], 0x1}}, {{&(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)="af15080c4543fb6969bcaa448266e81141228ab43d6a14631867d9438836b2c767c55562462709918f10f762e5ab512aa86da47ec98f384d8c79a6a7e12dc615295aabb6447ab88c6f0b3562477329a069403d5a0c845a65534f2de85b1ec7e8832343546afc278224679a6958e4b863c0c6d86228380d7aa49e5e1493e6e49aaa83256ccf5094d504601be07930f19c85d6f50b29f247", 0x97}, {&(0x7f0000000540)="50bb2c7c96f1e0daf40882d48021e2d8b9bde6321c8107fb84b76f188b9a7f60d4a15a319092f14b2601b81ac45884427efcc083c94c2e4b396c7e01bd1819ca274b00404b9f187a6448598f0947defbd2de49595fec11bb2e52902bc652c92dc3d2b091445d7cb52d4d9598c89c7a713dfabd860f465d2a76615086f0bd8120c8032464a91df8f568b374271bd2bdc3a40cac8af836fa2eeb64a8f4e256c30578", 0xa1}, {&(0x7f0000000600)="7d48cff6e356d10e27c7676ecc6379b8d652ab753592364e91d41b3ca4e9ff6b8003eec4f39841d296a8dc86d78e0d347b3cea48b4caff50796ae800e47c38b477be7412fdcd21ed04fd3113dc958cd16c12657d3bbc0783972a2e3a0083e70acfa4b1ff071cbd6444dfe525d8a81fcb17714d3a", 0x74}], 0x3, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], 0x38}}], 0x3, 0x0) 5m36.579896658s ago: executing program 2 (id=2252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) clock_gettime(0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f0000001d80)="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", 0x2d9}], 0x2}}], 0x3, 0x8008800) 5m36.571971918s ago: executing program 2 (id=2254): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 5m36.37264628s ago: executing program 2 (id=2257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfda1) 5m35.929102363s ago: executing program 2 (id=2267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, @xdp={0x2c, 0x6, r3, 0x2b}, @l2tp={0x2, 0x0, @empty, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='veth0_to_batadv\x00', 0x1b33d44a, 0x3, 0x8}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f0000000000)='./file0\x00') r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0xf, 0x5, r4}) 5m35.918431273s ago: executing program 33 (id=2267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, @xdp={0x2c, 0x6, r3, 0x2b}, @l2tp={0x2, 0x0, @empty, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='veth0_to_batadv\x00', 0x1b33d44a, 0x3, 0x8}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f0000000000)='./file0\x00') r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0xf, 0x5, r4}) 3m26.497515583s ago: executing program 3 (id=4329): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (fail_nth: 9) 3m25.929307717s ago: executing program 3 (id=4335): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001"], 0x110}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 3m25.891093877s ago: executing program 3 (id=4337): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3m25.853483697s ago: executing program 3 (id=4338): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = semget$private(0x0, 0x4, 0x1b9) semctl$IPC_RMID(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095", @ANYRES16=r0, @ANYRES16=r1], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000000), &(0x7f0000000140)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) r7 = memfd_create(0x0, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r10, r9, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) fsetxattr$security_selinux(r7, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r12, 0x0, 0x8}, 0x18) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xddae, 0x1, 0x503fc, 0x8100014e}) 3m25.653298828s ago: executing program 3 (id=4341): io_setup(0x8f0, &(0x7f0000002400)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x165, 0x0, 0x1000}, {0x80, 0x1, 0xf000, 0xc, 0x800, 0x800000}, 0x81, 0x64b5, 0x132f}}, @TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x3, 0x5, 0x0, 0x7, 0x9, 0xde3, 0x3, 0x2, 0x7665, 0x4, 0x8, 0x4, 0x7, 0x7ff, 0xe6d, 0x1, 0x5, 0x2, 0x200, 0x81, 0x400, 0x10001, 0xfffffffa, 0x2, 0x8, 0x4, 0x9, 0x2, 0xa0000, 0x37, 0x5, 0x9, 0x4, 0x80002a8b, 0xb, 0xf81, 0x0, 0x9, 0x90, 0x6, 0x2, 0xf6f, 0xdd, 0x1, 0x81, 0x1, 0x200, 0x0, 0x1, 0xc, 0x20d2, 0x75, 0x800, 0x2a, 0x7, 0x8000, 0x6, 0x6, 0x4, 0x40, 0x0, 0x6, 0x9, 0x8, 0x80000001, 0x97, 0x4, 0xffff3404, 0x8, 0x80000001, 0x8, 0x1, 0x2, 0x5, 0xf, 0x1, 0x7, 0x3, 0xb1d, 0x400, 0x9, 0x931, 0xffffffff, 0x1, 0x4, 0x6, 0x3, 0x400000, 0x5, 0xfffffff8, 0x3, 0x4, 0x8, 0x8, 0x9, 0x100, 0x0, 0x2, 0x7, 0x7f, 0x2, 0x6, 0x401, 0x8, 0x0, 0xfbb, 0x6, 0x100, 0x9, 0x401, 0x2, 0x100, 0x9, 0x80, 0xff, 0x0, 0x1, 0x6, 0x4, 0x3, 0x5, 0xe, 0x3, 0x3, 0x4, 0x3, 0x3, 0x81, 0xfff, 0x6, 0x1, 0x1, 0x7fffffff, 0x63c7, 0x3, 0x8, 0x7, 0x0, 0x7, 0x3, 0x3, 0xd, 0x9, 0x3, 0x80, 0x3, 0x0, 0x5, 0x1ff, 0xf3c3, 0x8, 0x36, 0x1, 0x0, 0x8, 0xffffffff, 0x6, 0x733, 0x7, 0xec4, 0x7, 0x9, 0x10000, 0x9, 0x8, 0x9, 0x1, 0x9, 0x100, 0x6, 0x78, 0x0, 0x10, 0x7, 0xffff7fff, 0x1, 0x6, 0x7ff, 0x9, 0x9, 0x3, 0x2, 0x8a0f, 0x4, 0x3, 0xffff8001, 0x78, 0x3, 0x7, 0x81, 0x2, 0x6, 0x8, 0x6, 0x231fe9d9, 0xffff, 0x200, 0x1, 0x401, 0x401, 0x6, 0x3, 0x80, 0x5, 0x8, 0x0, 0x1, 0x8, 0x80000001, 0xff000000, 0xbe3, 0x4, 0x0, 0x1, 0x2, 0xfffffffc, 0x4c, 0x8, 0x1, 0x6ef9, 0x69b9, 0x0, 0x1, 0x3, 0x8000, 0x80000001, 0xb4e, 0x401, 0xfffffffc, 0x0, 0x9, 0x9, 0x800, 0x5, 0x6, 0x4, 0x67d6, 0x3, 0x100, 0x9, 0x4, 0x400, 0x1908, 0x1000, 0x1000, 0x5, 0x6, 0x6, 0x9, 0x4, 0x6, 0xc3, 0x4, 0x17f, 0x8]}]}}]}, 0x45c}}, 0x4000010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) fstat(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r3 = open(0x0, 0x163361, 0x501c998c4dfcafcd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd25, 0x21dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000100)=0x1) read(r8, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f5}, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r11, &(0x7f00000000c0), 0x2, 0x0) 3m24.391593187s ago: executing program 3 (id=4361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3U9vI2cZAPBnHHtJdrNNChygEqXQot0VrL1paBtxKEVCcKoElHsJiRNFceIodtpNVJGs+ABICAESJ7hwQeIDIKGVuHBESJXoGQQIhGALBw7QqcYep9nE/9o6cZr8ftJk3nfmnXme19GMZzyjmQAurSci4oWIeCtN01sRMZNPL+RDHLSHrN2bD15byoYk0vSlfyaR5NM660ry8bV8scmI+MZXI76dnIzb2N1bX6zVqtt5vdLc2Ko0dvdur20srlZXq5vz83PPLjy38MzCnZH083pEPP/lv/7wez//yvO//tyrf3r57ze/k6U1nc8/2o93qdhvZrvrpdZncXSB7fcY7DwqtnqYm+rWYuLElHunnBMAAN1lx/gfjohPR8StmImJ/oezAAAAwAdQ+sXp+F8SkXZ3pcd0AAAA4AOk0LoHNimU83sBpqNQKJfb9/B+NK4WavVG87Mr9Z3N5fa9srNRKqys1ap38nuFZ6OUZPW5Vvmd+tPH6vMR8WhE/GBmqlUvL9Vry+P+8QMAAAAuiWvHzv//M9M+/+/YH2dyAAAAwOjMjjsBAAAA4NQNe/5/9ZTzAAAAAE6P6/8AAABwoX3txRezIe28/3r5ld2d9fort5erjfXyxs5Seam+vVVerddXW8/s2xi0vlq9vvX52Ny5W2lWG81KY3cyNuo7m82X1x56BTYAAABwhh795P03kog4+MJUa8hcGW7RIZsB51XxsJTk4y6b9R8faY//ckZJAWdiYtwJAGNTHHcCwNiUxp0AMHbJgPk9b975XT7+1GjzAQAARu/Gx++/Mdnj+n+h75IH/WcD556NGC4v1//h8mpd/x/2Tl4HC3ChlAYdAfTd5vdHnA0wDu/7+v9AafquEgIAAEZuujUkhXKxUy8UyuWI663XApSSlbVa9U5EPBIRf5gpfSirz7VaJgPPGQAAAAAAAAAAAAAAAAAAAAAAAACAtjRNIgUAAAAutIjC35LftJ/lf2Pmqenjvw9cSf47E/krQl/9yUs/urvYbG7PZdP/dTi9+eN8+tPj+AUDAAAALoUBL/B/WOc8vXMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACj9OaD15Y6w1nG/ceXImK2W/xiTLbGk1GKiKv/TqJ4ZLkkIiZGEH8q+/OxbvGTLK3DkN3iT40g/sG9vvHjIP8UusW/NoL4cJndz/Y/L3Tb/grxRGvcffsrRjxUf6967//icP830WP7vz5kjMde/2WlZ/x7EY8VT8TfzyJ04ic94j85ZPxvfXNvr9e89KcRN7p+/ySdJtkeMirNja1KY3fv9trG4mp1tbo5Pz/37MJzC88s3KmsrNWq+d+uMb7/iV+91a//V3vEnx3Q/6dOrO1K1xj/f/3ug4+0i6Vu8W8+2SX+b3+WtzgZv5B/930mL2fzb3TKB+3yUY//4veP9+v/co/+D/r/3+y10mNuff27fx6yKQBwBhq7e+uLtVp1+8IWsrP0IRtnR2fnImeFsynsj3SFaZqm2Tb1PtaTxHn4WFqFce+ZAACAUXvnoH/cmQAAAAAAAAAAAAAAAAAAAMDldRaPEzse8+CwlIziEdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPxdgAAAP//HiPZOQ==") 3m24.373425607s ago: executing program 34 (id=4361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") 1m0.305193915s ago: executing program 5 (id=6640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setgid(0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0xdb) rename(&(0x7f0000000000)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x9, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000840000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000100)='bdev\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x86) 59.692610629s ago: executing program 5 (id=6655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x50) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="20002dbd7000fedbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000200000000000800303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000001cb7aeed9120ebc932a3a6349bc9ab2f6943119b963f895d9455eb9e1ce59ca23dd5c1681b2470ad9d35623061a4dbdc2b11982819fdbccbcc0af7a9125aebc8be077a195a2db254f57b31d8a61b15f87800"/207], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 59.64417729s ago: executing program 5 (id=6657): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b354", 0xbb}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 59.62198679s ago: executing program 5 (id=6659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3930c3, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 59.442217311s ago: executing program 5 (id=6663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x1ba}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a", 0x29}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) 59.126177403s ago: executing program 5 (id=6665): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) 59.111603363s ago: executing program 35 (id=6665): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) 3.924545764s ago: executing program 6 (id=7465): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xb3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000), 0x4800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 3.824386725s ago: executing program 6 (id=7466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r7, r10, 0x4e, 0x7) 3.731697145s ago: executing program 7 (id=7469): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 3.629193246s ago: executing program 7 (id=7472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38cc") ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000000)='map_files\x00') sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0xbc, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x8d, 0x8, "0193f6e533a3a5ae4a73702aeca7ec00f4cbd0ab9f610a717967890124f5b63ac3c731cd4978d10216d6c48d8c535926aa48f888db02cf52b89a98f86d45b2ce8e8444020dd123a271d19dc812c3ff12e3628d8eed490c2cb6726d648ab3d52a03990765338ec6136106c5db63814f6e3ee891e492e323c7c471d21c371d181f797c091adf28298534"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40844) syz_open_procfs$pagemap(r1, &(0x7f0000000080)) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r7}) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x60) ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r4, r3, 0x0, 0x2, &(0x7f0000000400)='\xe5\x00'}, 0x30) lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0) 2.96571687s ago: executing program 6 (id=7484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) 2.821665991s ago: executing program 7 (id=7489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d5") ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000000)='map_files\x00') sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0xbc, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x8d, 0x8, "0193f6e533a3a5ae4a73702aeca7ec00f4cbd0ab9f610a717967890124f5b63ac3c731cd4978d10216d6c48d8c535926aa48f888db02cf52b89a98f86d45b2ce8e8444020dd123a271d19dc812c3ff12e3628d8eed490c2cb6726d648ab3d52a03990765338ec6136106c5db63814f6e3ee891e492e323c7c471d21c371d181f797c091adf28298534"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40844) syz_open_procfs$pagemap(r1, &(0x7f0000000080)) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r7}) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x60) ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r4, r3, 0x0, 0x2, &(0x7f0000000400)='\xe5\x00'}, 0x30) lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0) 2.244990335s ago: executing program 0 (id=7496): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000002000000000000000000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000b500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000", @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d80)='kfree_skb\x00', r1}, 0x6b) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000010c0)=ANY=[@ANYBLOB="24000000d534587d7ad73b9bcb6ace1eafa4c2ab0f32ba665f5049f7474246d998d882cd63b980d12f2a05177cdacc1dae1a73fbdbe161a85b66f24449f9babb745ae6d5f9995e3054b2ea1224775024efb45cbb7a4ae7aa5d1f19fd6d0da9f026a4058f18aca200672b3e2496b5", @ANYRES16=0x0, @ANYBLOB="2000297f0000fbdbdf2502000000080008000400000008000500ac1e0101aaf40eeb84afb22f48648354f867fbe1f4db9044d2ab5a990dff5dacd7fbe3510faae347c6d376c5e644ec086194824048f9886bec049f262aaf6343349a15bc13e65ac39339d688d0be7d32dbbe183110d966e9784e20369e08dd1c5f992b04fa9329e9e7b4a126fad8dc2ad381e6dbbaf375cd620093c730acab7d0d6760a867291d533cdcd9b0b69565930d3742d1d116eb5c1acd6cbb5fb3356a9e08536221f9cd6318dc4bc183e22a7c8d8f0dca9a9633a070e02456fbf0916c91214dbfd36d5723e40b0692156c13c7ee801a5ff74e33a9d051de519a85f49c2b2ec05a0822ccebcdafa68a1f03c9a328719b40caf3501a930f48b6998390521c1226b4165a6c23ef1cdbd7bbda84a08541daa17f61d87c2b2d1b67a83e4be0ce95cd4fb075a2bb0b856a18004549e6b128e5c8"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x24004080) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) (fail_nth: 3) syz_clone(0x2c008000, &(0x7f0000000000)="e30c43dd6b46b942a5b972995def66b085a826496285e881c1febd0969563f60fef427701759847d2345458766ff1adbeaf56e125decbb21ddfae79a27d47045903d72bd65c9c8280b7614d4e82c934211d672478d0de42d08d3360c4a4f1945441f730514c84be71c6d41aad904f6a3002f5854c73116c854697458f631f17b737deb31123151bd926c08e307c084e43f15d609483d11943cfa52abb8933c7d469d67c8e8201360d797a11b8b", 0xad, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x18) chown(&(0x7f0000000840)='./file0\x00', 0x0, 0xee00) syslog(0x2, &(0x7f0000000fc0)=""/194, 0xc2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8a00, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x6, 0x400008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.871313128s ago: executing program 7 (id=7499): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x595, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x200000000}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11113, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu=_0!|!') renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 1.400686331s ago: executing program 1 (id=7500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) fchown(r0, 0x0, 0xee01) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='ns\x00') move_mount(r2, &(0x7f0000000880)='./mnt\x00', r2, 0x0, 0x177) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000200)) fallocate(r3, 0x58, 0x3, 0x800001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = syz_io_uring_setup(0x4485, &(0x7f0000000380)={0x0, 0x1e25, 0x0, 0x3, 0x2b2}, &(0x7f0000000400), &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f00000004c0), 0x1) sendmsg$xdp(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e3}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.345472151s ago: executing program 8 (id=7501): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.344937511s ago: executing program 0 (id=7502): r0 = socket$inet6(0xa, 0x805, 0x0) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000007c0)={0x1, 0x40, 0x6}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={0xffffffffffffffff, r0, 0x0, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000880)=""/167) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080)={[{@map_acorn}, {@cruft}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001180)={0xa, {"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", 0x1000}}, 0x1006) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000100)={0x7, 0x1, 0x101, 0x3, 0x4, "47ed3f471dc1763e"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0x1, 0x40, @dev={0xfe, 0x80, '\x00', 0x1e}, @empty, 0x20, 0x0, 0x38dc586a}}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000780)=0x4, 0x4) 1.326761191s ago: executing program 8 (id=7503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x290, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x13c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xf0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2800000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8e5990d3dbf3203c1e7f89e36d21d5c9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9c}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b3f75feca2c2fbd306bc6be1b84b7da05a404d9fb8e6f68b6813a4698dc5f506"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7c3f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5212}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "faa46b02c5536e6aa5a17a18b21fa70beb700fd4cc264c0ea06ff78e324ff2d4"}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000800}, 0x40c0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) syz_io_uring_setup(0x4522, &(0x7f0000000340)={0x0, 0x2fb0, 0x400, 0x0, 0xad, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000400)) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.203482402s ago: executing program 7 (id=7504): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffa48a78788a37f3cc08456f7d37ffffffff000000000000", @ANYRES32=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x549b41) socket(0x40000000015, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x9, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x5c}}, 0x24000084) 1.081668443s ago: executing program 0 (id=7505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, 0x0, &(0x7f00000002c0)=0xfeb8) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x552}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 1.058608603s ago: executing program 0 (id=7506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db79800951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920323f9a94100"/216, 0xd8}], 0x1}, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) 1.011700004s ago: executing program 0 (id=7507): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x28, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400e8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r10 = socket(0x2, 0x3, 0x2) getsockopt(r10, 0xff, 0x100000000000001, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x8}}}}}}, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r11 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r11, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x701) 1.006775303s ago: executing program 1 (id=7508): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/12, 0xc, 0x0, &(0x7f0000000280)=""/21, 0x15}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000100"], 0x9) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 982.116184ms ago: executing program 1 (id=7509): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="fa0550f01c36e4096ee96b24912a40733378b6047c848d33b2a8a479ca2a5abd36e4d4c71a6007c6647617dadb8beb6b2f2867466fbc688282ba3eb60ca69be1f4eaacdf5c02c5f5958ba77e44504b7c1d8d893c1dcc7f18bde1168f06b93da82acbcdf088dd38ccbc47d50c29") ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000000)='map_files\x00') sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0xbc, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x8d, 0x8, "0193f6e533a3a5ae4a73702aeca7ec00f4cbd0ab9f610a717967890124f5b63ac3c731cd4978d10216d6c48d8c535926aa48f888db02cf52b89a98f86d45b2ce8e8444020dd123a271d19dc812c3ff12e3628d8eed490c2cb6726d648ab3d52a03990765338ec6136106c5db63814f6e3ee891e492e323c7c471d21c371d181f797c091adf28298534"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40844) syz_open_procfs$pagemap(r1, &(0x7f0000000080)) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r7}) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x60) ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r4, r3, 0x0, 0x2, &(0x7f0000000400)='\xe5\x00'}, 0x30) lsm_get_self_attr(0x69, &(0x7f00000004c0)={0x0, 0x0, 0xda, 0xba, ""/186}, &(0x7f0000000300)=0xda, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) lsm_get_self_attr(0x68, &(0x7f00000006c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0) 869.125835ms ago: executing program 7 (id=7510): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x8800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) listen(r0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @exp_fastopen={0xfe, 0x14, 0xf989, "92c5f423eeb3d312ab5cfb4327e13a3b"}]}}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) accept4(r3, 0x0, &(0x7f0000000340), 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 866.905285ms ago: executing program 36 (id=7510): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x8800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) listen(r0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @exp_fastopen={0xfe, 0x14, 0xf989, "92c5f423eeb3d312ab5cfb4327e13a3b"}]}}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) accept4(r3, 0x0, &(0x7f0000000340), 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 482.491877ms ago: executing program 8 (id=7512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800ccc68be0290f8f3f3bcd653d44de1b00000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/183, 0xb7}], 0x1, 0x4, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000180)=0x200) (async) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="2b6370752065408f3ef62744d103dd7e06ab40ffd9d5d612c1ceba330900000060e1b5c165e18f56cfcd52c0cb0b164c84cf8c50e06178ae7c3595405d88d4907a0755cd3c41efe3f819258234641583d9d4be601253e1ac8a6243976ba4dcf7b9f6fbdf8848bd2141c2f1ffed394550a2accb257149a20f2b96298e0432dae5440ed4c2cd0e0f67f498e87c8bb0d8d214dbb9cfddf900115abb12a262c09cfadbb1d25ab067cce3dd2502000000d1e47fa0194134395112bd072d91d3b4ad537824cdcde22fb2b73ebd2570902c1d138fd27ac6b4dc7f2f3a38f17b"], 0x5) r9 = socket(0xa, 0x3, 0x87) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r11}) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000480)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r11}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x8936, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 417.709207ms ago: executing program 8 (id=7513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000000107010100008000000000000700000708000540000000010800054000000000340007800800024000000006080001"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) (fail_nth: 4) 306.845788ms ago: executing program 8 (id=7514): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0xe0000007}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 150.766529ms ago: executing program 0 (id=7515): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 125.589349ms ago: executing program 1 (id=7516): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r2, 0x20049549e2a2d659) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x110) r4 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = fsmount(r1, 0x0, 0x7) fchdir(r7) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 98.90787ms ago: executing program 8 (id=7517): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) symlink(0x0, &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000380), &(0x7f00000005c0)}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x73, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 78.6759ms ago: executing program 6 (id=7518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 52.58991ms ago: executing program 6 (id=7519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x80002014, 0xfeff}) 43.85417ms ago: executing program 1 (id=7520): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 960.43µs ago: executing program 6 (id=7521): socket$inet6(0xa, 0x805, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000007c0)={0x1, 0x40, 0x6}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) 0s ago: executing program 1 (id=7522): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0x3, 0xff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r3, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x5}, 0x18) r6 = eventfd2(0x80000000, 0x800) read$eventfd(r6, &(0x7f0000000140), 0x8) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000200)={0xe0000007}) socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f00000000c0)=[{r7, 0x1009}], 0x1, 0x8000007) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 51] CPU: 0 UID: 0 PID: 24251 Comm: syz.7.7083 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 501.889361][T24251] Tainted: [W]=WARN [ 501.889371][T24251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.889448][T24251] Call Trace: [ 501.889514][T24251] [ 501.889524][T24251] __dump_stack+0x1d/0x30 [ 501.889553][T24251] dump_stack_lvl+0xe8/0x140 [ 501.889582][T24251] dump_stack+0x15/0x1b [ 501.889606][T24251] should_fail_ex+0x265/0x280 [ 501.889633][T24251] should_failslab+0x8c/0xb0 [ 501.889720][T24251] __kmalloc_noprof+0xa5/0x570 [ 501.889798][T24251] ? tcp_sigpool_alloc_ahash+0x80/0x660 [ 501.889840][T24251] tcp_sigpool_alloc_ahash+0x80/0x660 [ 501.889883][T24251] tcp_md5_alloc_sigpool+0x1b/0x60 [ 501.889912][T24251] tcp_md5_do_add+0x7f/0x1c0 [ 501.890007][T24251] tcp_v6_parse_md5_keys+0x429/0x450 [ 501.890058][T24251] do_tcp_setsockopt+0x100f/0x1670 [ 501.890086][T24251] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 501.890133][T24251] tcp_setsockopt+0x51/0xb0 [ 501.890179][T24251] sock_common_setsockopt+0x69/0x80 [ 501.890341][T24251] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 501.890377][T24251] __sys_setsockopt+0x184/0x200 [ 501.890494][T24251] __x64_sys_setsockopt+0x64/0x80 [ 501.890538][T24251] x64_sys_call+0x20ec/0x3000 [ 501.890569][T24251] do_syscall_64+0xd2/0x200 [ 501.890689][T24251] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 501.890726][T24251] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 501.890769][T24251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.890801][T24251] RIP: 0033:0x7fa727abf6c9 [ 501.890820][T24251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.890844][T24251] RSP: 002b:00007fa72651f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 501.890869][T24251] RAX: ffffffffffffffda RBX: 00007fa727d15fa0 RCX: 00007fa727abf6c9 [ 501.890886][T24251] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 501.890902][T24251] RBP: 00007fa72651f090 R08: 00000000000000d8 R09: 0000000000000000 [ 501.890969][T24251] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000001 [ 501.890986][T24251] R13: 00007fa727d16038 R14: 00007fa727d15fa0 R15: 00007ffffab7e3d8 [ 501.891016][T24251] [ 501.961133][T24263] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7086'. [ 502.006743][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 502.011372][T24271] veth1_to_hsr: mtu less than device minimum [ 502.281341][T24286] 9pnet_fd: Insufficient options for proto=fd [ 502.347664][T24297] vlan0: entered allmulticast mode [ 502.354341][T24297] bond0: entered allmulticast mode [ 502.462434][T24311] loop7: detected capacity change from 0 to 4096 [ 502.469331][T24311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.533146][T24317] loop7: detected capacity change from 0 to 512 [ 502.541640][T24317] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 502.551623][T24317] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.7104: bg 0: block 104: invalid block bitmap [ 502.564856][T24317] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 502.574251][T24317] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7104: invalid indirect mapped block 1 (level 1) [ 502.591309][T24317] EXT4-fs (loop7): 1 truncate cleaned up [ 502.631149][T24327] tipc: Started in network mode [ 502.636153][T24327] tipc: Node identity ac14140f, cluster identity 4711 [ 502.643350][T24327] tipc: New replicast peer: 255.255.255.83 [ 502.649254][T24327] tipc: Enabled bearer , priority 10 [ 502.655698][T24331] FAULT_INJECTION: forcing a failure. [ 502.655698][T24331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.668927][T24331] CPU: 1 UID: 0 PID: 24331 Comm: syz.8.7110 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 502.668976][T24331] Tainted: [W]=WARN [ 502.668985][T24331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.669000][T24331] Call Trace: [ 502.669077][T24331] [ 502.669085][T24331] __dump_stack+0x1d/0x30 [ 502.669113][T24331] dump_stack_lvl+0xe8/0x140 [ 502.669135][T24331] dump_stack+0x15/0x1b [ 502.669154][T24331] should_fail_ex+0x265/0x280 [ 502.669176][T24331] should_fail+0xb/0x20 [ 502.669193][T24331] should_fail_usercopy+0x1a/0x20 [ 502.669251][T24331] _copy_from_iter+0xd2/0xe80 [ 502.669281][T24331] ? __build_skb_around+0x1ab/0x200 [ 502.669449][T24331] ? __alloc_skb+0x223/0x320 [ 502.669483][T24331] netlink_sendmsg+0x471/0x6b0 [ 502.669586][T24331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.669607][T24331] __sock_sendmsg+0x145/0x180 [ 502.669634][T24331] ____sys_sendmsg+0x31e/0x4e0 [ 502.669686][T24331] ___sys_sendmsg+0x17b/0x1d0 [ 502.669728][T24331] __x64_sys_sendmsg+0xd4/0x160 [ 502.669754][T24331] x64_sys_call+0x191e/0x3000 [ 502.669787][T24331] do_syscall_64+0xd2/0x200 [ 502.669807][T24331] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 502.669896][T24331] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 502.669931][T24331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.669961][T24331] RIP: 0033:0x7fbb1fdcf6c9 [ 502.669978][T24331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.670051][T24331] RSP: 002b:00007fbb1e837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.670071][T24331] RAX: ffffffffffffffda RBX: 00007fbb20025fa0 RCX: 00007fbb1fdcf6c9 [ 502.670084][T24331] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 502.670165][T24331] RBP: 00007fbb1e837090 R08: 0000000000000000 R09: 0000000000000000 [ 502.670178][T24331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.670191][T24331] R13: 00007fbb20026038 R14: 00007fbb20025fa0 R15: 00007ffebdddbeb8 [ 502.670214][T24331] [ 502.915724][T24332] lo speed is unknown, defaulting to 1000 [ 502.969493][T24332] lo speed is unknown, defaulting to 1000 [ 503.002290][T24349] loop8: detected capacity change from 0 to 512 [ 503.026098][T24349] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.049080][T24354] loop7: detected capacity change from 0 to 1024 [ 503.059624][T24354] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 503.069668][T24354] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 503.081085][T24354] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 503.091113][T24354] System zones: 0-1, 4-36, 102-102 [ 503.098427][T24354] loop7: Can't mount, would change RO state [ 503.122085][T24361] 9pnet_fd: Insufficient options for proto=fd [ 503.215502][T24367] loop8: detected capacity change from 0 to 8192 [ 503.284707][T24369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24369 comm=syz.7.7122 [ 503.321038][T24369] FAULT_INJECTION: forcing a failure. [ 503.321038][T24369] name failslab, interval 1, probability 0, space 0, times 0 [ 503.333887][T24369] CPU: 0 UID: 0 PID: 24369 Comm: syz.7.7122 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 503.333930][T24369] Tainted: [W]=WARN [ 503.333940][T24369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.333957][T24369] Call Trace: [ 503.333965][T24369] [ 503.333975][T24369] __dump_stack+0x1d/0x30 [ 503.334005][T24369] dump_stack_lvl+0xe8/0x140 [ 503.334034][T24369] dump_stack+0x15/0x1b [ 503.334105][T24369] should_fail_ex+0x265/0x280 [ 503.334187][T24369] should_failslab+0x8c/0xb0 [ 503.334286][T24369] kmem_cache_alloc_noprof+0x50/0x480 [ 503.334325][T24369] ? __anon_vma_prepare+0x70/0x2f0 [ 503.334355][T24369] __anon_vma_prepare+0x70/0x2f0 [ 503.334383][T24369] do_wp_page+0x18ee/0x2510 [ 503.334416][T24369] ? __rcu_read_lock+0x37/0x50 [ 503.334515][T24369] ? css_rstat_updated+0xb7/0x240 [ 503.334542][T24369] ? __rcu_read_lock+0x37/0x50 [ 503.334582][T24369] handle_mm_fault+0x77d/0x2be0 [ 503.334659][T24369] ? vma_start_read+0x141/0x1f0 [ 503.334711][T24369] do_user_addr_fault+0x630/0x1080 [ 503.334749][T24369] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 503.334895][T24369] exc_page_fault+0x62/0xa0 [ 503.334994][T24369] asm_exc_page_fault+0x26/0x30 [ 503.335020][T24369] RIP: 0033:0x7fa727980933 [ 503.335039][T24369] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 503.335142][T24369] RSP: 002b:00007fa72651e4a0 EFLAGS: 00010202 [ 503.335163][T24369] RAX: 0000000000000400 RBX: 00007fa72651e540 RCX: 00007fa71e0ff000 [ 503.335179][T24369] RDX: 00007fa72651e6e0 RSI: 0000000000000000 RDI: 00007fa72651e5e0 [ 503.335196][T24369] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a8 [ 503.335212][T24369] R10: 00000000000000c2 R11: 00007fa72651e540 R12: 0000000000000001 [ 503.335228][T24369] R13: 00007fa727b5dc40 R14: 0000000000000020 R15: 00007fa72651e5e0 [ 503.335278][T24369] [ 503.335290][T24369] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 503.388636][T24371] FAULT_INJECTION: forcing a failure. [ 503.388636][T24371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.399821][T24377] siw: device registration error -23 [ 503.400289][T24371] CPU: 1 UID: 0 PID: 24371 Comm: syz.1.7121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 503.400386][T24371] Tainted: [W]=WARN [ 503.400396][T24371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.400415][T24371] Call Trace: [ 503.400424][T24371] [ 503.400434][T24371] __dump_stack+0x1d/0x30 [ 503.400468][T24371] dump_stack_lvl+0xe8/0x140 [ 503.400499][T24371] dump_stack+0x15/0x1b [ 503.400525][T24371] should_fail_ex+0x265/0x280 [ 503.400620][T24371] should_fail+0xb/0x20 [ 503.400645][T24371] should_fail_usercopy+0x1a/0x20 [ 503.400738][T24371] strncpy_from_user+0x25/0x230 [ 503.400839][T24371] ? kmem_cache_alloc_noprof+0x242/0x480 [ 503.400883][T24371] ? getname_flags+0x80/0x3b0 [ 503.400930][T24371] getname_flags+0xae/0x3b0 [ 503.401025][T24371] __x64_sys_rename+0x33/0x70 [ 503.401067][T24371] x64_sys_call+0x1f9/0x3000 [ 503.401108][T24371] do_syscall_64+0xd2/0x200 [ 503.401135][T24371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 503.401178][T24371] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 503.401265][T24371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.401295][T24371] RIP: 0033:0x7ff490b5f6c9 [ 503.401318][T24371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.401399][T24371] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 503.401427][T24371] RAX: ffffffffffffffda RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 503.401445][T24371] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000200000000040 [ 503.401464][T24371] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 503.401482][T24371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.401499][T24371] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 503.401608][T24371] [ 503.460948][T24369] loop7: detected capacity change from 0 to 1024 [ 503.712227][T24389] FAULT_INJECTION: forcing a failure. [ 503.712227][T24389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.762409][T24389] CPU: 0 UID: 0 PID: 24389 Comm: syz.8.7129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 503.762507][T24389] Tainted: [W]=WARN [ 503.762515][T24389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.762529][T24389] Call Trace: [ 503.762537][T24389] [ 503.762548][T24389] __dump_stack+0x1d/0x30 [ 503.762573][T24389] dump_stack_lvl+0xe8/0x140 [ 503.762598][T24389] dump_stack+0x15/0x1b [ 503.762677][T24389] should_fail_ex+0x265/0x280 [ 503.762705][T24389] should_fail+0xb/0x20 [ 503.762737][T24389] should_fail_usercopy+0x1a/0x20 [ 503.762817][T24389] _copy_from_iter+0xd2/0xe80 [ 503.762848][T24389] ? __build_skb_around+0x1ab/0x200 [ 503.762891][T24389] ? __alloc_skb+0x223/0x320 [ 503.763016][T24389] netlink_sendmsg+0x471/0x6b0 [ 503.763048][T24389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.763144][T24389] __sock_sendmsg+0x145/0x180 [ 503.763182][T24389] ____sys_sendmsg+0x345/0x4e0 [ 503.763230][T24389] ___sys_sendmsg+0x17b/0x1d0 [ 503.763322][T24389] __sys_sendmmsg+0x178/0x300 [ 503.763364][T24389] __x64_sys_sendmmsg+0x57/0x70 [ 503.763386][T24389] x64_sys_call+0x1c4a/0x3000 [ 503.763409][T24389] do_syscall_64+0xd2/0x200 [ 503.763432][T24389] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 503.763526][T24389] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 503.763569][T24389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.763652][T24389] RIP: 0033:0x7fbb1fdcf6c9 [ 503.763668][T24389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.763691][T24389] RSP: 002b:00007fbb1e837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.763719][T24389] RAX: ffffffffffffffda RBX: 00007fbb20025fa0 RCX: 00007fbb1fdcf6c9 [ 503.763743][T24389] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 503.763761][T24389] RBP: 00007fbb1e837090 R08: 0000000000000000 R09: 0000000000000000 [ 503.763778][T24389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.763793][T24389] R13: 00007fbb20026038 R14: 00007fbb20025fa0 R15: 00007ffebdddbeb8 [ 503.763846][T24389] [ 503.763943][ T9] tipc: Node number set to 2886997007 [ 503.862412][T24390] __nla_validate_parse: 1 callbacks suppressed [ 503.862509][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7125'. [ 503.974748][T24369] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 504.015457][T24390] gretap0: entered promiscuous mode [ 504.020722][T24390] macsec2: entered promiscuous mode [ 504.026073][T24390] macsec2: entered allmulticast mode [ 504.031428][T24390] gretap0: entered allmulticast mode [ 504.042112][T24390] gretap0: left allmulticast mode [ 504.047258][T24390] gretap0: left promiscuous mode [ 504.096262][T24387] lo speed is unknown, defaulting to 1000 [ 504.116918][T24369] EXT4-fs (loop7): mount failed [ 504.172097][T24400] syzkaller1: entered promiscuous mode [ 504.177732][T24400] syzkaller1: entered allmulticast mode [ 504.248646][T24387] lo speed is unknown, defaulting to 1000 [ 504.432281][T24395] loop8: detected capacity change from 0 to 8192 [ 504.522814][T24418] FAULT_INJECTION: forcing a failure. [ 504.522814][T24418] name failslab, interval 1, probability 0, space 0, times 0 [ 504.535505][T24418] CPU: 0 UID: 0 PID: 24418 Comm: syz.1.7139 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.535547][T24418] Tainted: [W]=WARN [ 504.535615][T24418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.535628][T24418] Call Trace: [ 504.535635][T24418] [ 504.535643][T24418] __dump_stack+0x1d/0x30 [ 504.535668][T24418] dump_stack_lvl+0xe8/0x140 [ 504.535769][T24418] dump_stack+0x15/0x1b [ 504.535787][T24418] should_fail_ex+0x265/0x280 [ 504.535808][T24418] should_failslab+0x8c/0xb0 [ 504.535855][T24418] kmem_cache_alloc_noprof+0x50/0x480 [ 504.535895][T24418] ? skb_clone+0x151/0x1f0 [ 504.535991][T24418] skb_clone+0x151/0x1f0 [ 504.536015][T24418] __netlink_deliver_tap+0x2c9/0x500 [ 504.536116][T24418] netlink_unicast+0x66b/0x690 [ 504.536150][T24418] netlink_sendmsg+0x58b/0x6b0 [ 504.536174][T24418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.536213][T24418] __sock_sendmsg+0x145/0x180 [ 504.536238][T24418] __sys_sendto+0x268/0x330 [ 504.536290][T24418] __x64_sys_sendto+0x76/0x90 [ 504.536322][T24418] x64_sys_call+0x2d14/0x3000 [ 504.536378][T24418] do_syscall_64+0xd2/0x200 [ 504.536404][T24418] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 504.536443][T24418] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 504.536478][T24418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.536518][T24418] RIP: 0033:0x7ff490b5f6c9 [ 504.536539][T24418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.536602][T24418] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 504.536622][T24418] RAX: ffffffffffffffda RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 504.536636][T24418] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 504.536648][T24418] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 504.536662][T24418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.536735][T24418] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 504.536766][T24418] [ 504.749342][T24418] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7139'. [ 504.779493][T24422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7141'. [ 504.809161][T24422] FAULT_INJECTION: forcing a failure. [ 504.809161][T24422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.822330][T24422] CPU: 1 UID: 0 PID: 24422 Comm: syz.1.7141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.822394][T24422] Tainted: [W]=WARN [ 504.822403][T24422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.822418][T24422] Call Trace: [ 504.822425][T24422] [ 504.822432][T24422] __dump_stack+0x1d/0x30 [ 504.822455][T24422] dump_stack_lvl+0xe8/0x140 [ 504.822514][T24422] dump_stack+0x15/0x1b [ 504.822548][T24422] should_fail_ex+0x265/0x280 [ 504.822576][T24422] should_fail+0xb/0x20 [ 504.822598][T24422] should_fail_usercopy+0x1a/0x20 [ 504.822626][T24422] copy_folio_from_iter_atomic+0x278/0x11b0 [ 504.822713][T24422] ? shmem_write_begin+0xa8/0x190 [ 504.822818][T24422] ? shmem_write_begin+0xe1/0x190 [ 504.822848][T24422] generic_perform_write+0x2c2/0x490 [ 504.822887][T24422] shmem_file_write_iter+0xc5/0xf0 [ 504.822960][T24422] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 504.822992][T24422] vfs_write+0x52a/0x960 [ 504.823031][T24422] __x64_sys_pwrite64+0xfd/0x150 [ 504.823071][T24422] x64_sys_call+0xc4d/0x3000 [ 504.823112][T24422] do_syscall_64+0xd2/0x200 [ 504.823137][T24422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 504.823192][T24422] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 504.823229][T24422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.823337][T24422] RIP: 0033:0x7ff490b5f6c9 [ 504.823376][T24422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.823398][T24422] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 504.823422][T24422] RAX: ffffffffffffffda RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 504.823438][T24422] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 504.823454][T24422] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 504.823471][T24422] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 504.823487][T24422] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 504.823515][T24422] [ 504.823754][T24425] EXT4-fs (loop8): unable to read superblock [ 504.873369][T24430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7144'. [ 505.091385][T24435] loop8: detected capacity change from 0 to 256 [ 505.098791][T24435] vfat: Unknown parameter 'allow_utimm' [ 505.166458][T24444] loop8: detected capacity change from 0 to 4096 [ 505.240333][T24455] binfmt_misc: register: failed to install interpreter file ./file0 [ 505.389203][T24466] lo speed is unknown, defaulting to 1000 [ 505.437019][T24466] lo speed is unknown, defaulting to 1000 [ 505.465940][T24468] cgroup: fork rejected by pids controller in /syz7 [ 505.481393][T24486] loop0: detected capacity change from 0 to 512 [ 505.481650][T24486] EXT4-fs: Ignoring removed bh option [ 505.504431][T24486] EXT4-fs mount: 23 callbacks suppressed [ 505.504451][T24486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.504626][T24486] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.527126][T24577] FAULT_INJECTION: forcing a failure. [ 505.527126][T24577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.527166][T24577] CPU: 1 UID: 0 PID: 24577 Comm: syz.7.7158 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 505.527200][T24577] Tainted: [W]=WARN [ 505.527224][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 505.527240][T24577] Call Trace: [ 505.527247][T24577] [ 505.527256][T24577] __dump_stack+0x1d/0x30 [ 505.527338][T24577] dump_stack_lvl+0xe8/0x140 [ 505.527367][T24577] dump_stack+0x15/0x1b [ 505.527416][T24577] should_fail_ex+0x265/0x280 [ 505.527437][T24577] should_fail+0xb/0x20 [ 505.527459][T24577] should_fail_usercopy+0x1a/0x20 [ 505.527502][T24577] _copy_from_user+0x1c/0xb0 [ 505.527604][T24577] __sys_bind+0x106/0x2a0 [ 505.527646][T24577] __x64_sys_bind+0x3f/0x50 [ 505.527719][T24577] x64_sys_call+0x2b72/0x3000 [ 505.527747][T24577] do_syscall_64+0xd2/0x200 [ 505.527771][T24577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 505.527862][T24577] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 505.527898][T24577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.527922][T24577] RIP: 0033:0x7fa727abf6c9 [ 505.527937][T24577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.527957][T24577] RSP: 002b:00007fa72651f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 505.527977][T24577] RAX: ffffffffffffffda RBX: 00007fa727d15fa0 RCX: 00007fa727abf6c9 [ 505.527993][T24577] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 505.528043][T24577] RBP: 00007fa72651f090 R08: 0000000000000000 R09: 0000000000000000 [ 505.528060][T24577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.528155][T24577] R13: 00007fa727d16038 R14: 00007fa727d15fa0 R15: 00007ffffab7e3d8 [ 505.528185][T24577] [ 505.602650][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.100662][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 506.100679][ T29] audit: type=1326 audit(2000000238.202:48379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.107783][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7170'. [ 506.130532][ T29] audit: type=1326 audit(2000000238.202:48380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.162986][ T29] audit: type=1326 audit(2000000238.202:48381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.187209][ T29] audit: type=1326 audit(2000000238.202:48382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.210789][ T29] audit: type=1326 audit(2000000238.202:48383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.234996][ T29] audit: type=1326 audit(2000000238.202:48384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.258798][ T29] audit: type=1326 audit(2000000238.202:48385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.282968][ T29] audit: type=1326 audit(2000000238.202:48386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdf426e17f code=0x7ffc0000 [ 506.306417][ T29] audit: type=1326 audit(2000000238.202:48387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.330691][ T29] audit: type=1326 audit(2000000238.202:48388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24606 comm="syz.6.7170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 506.368510][T19882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.424917][T24602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7168'. [ 506.645389][T24625] FAULT_INJECTION: forcing a failure. [ 506.645389][T24625] name failslab, interval 1, probability 0, space 0, times 0 [ 506.658098][T24625] CPU: 0 UID: 0 PID: 24625 Comm: syz.8.7177 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 506.658172][T24625] Tainted: [W]=WARN [ 506.658182][T24625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.658194][T24625] Call Trace: [ 506.658202][T24625] [ 506.658214][T24625] __dump_stack+0x1d/0x30 [ 506.658242][T24625] dump_stack_lvl+0xe8/0x140 [ 506.658271][T24625] dump_stack+0x15/0x1b [ 506.658312][T24625] should_fail_ex+0x265/0x280 [ 506.658337][T24625] ? call_usermodehelper_setup+0x72/0x190 [ 506.658373][T24625] should_failslab+0x8c/0xb0 [ 506.658411][T24625] ? __pfx_free_modprobe_argv+0x10/0x10 [ 506.658491][T24625] __kmalloc_cache_noprof+0x4c/0x4a0 [ 506.658524][T24625] ? __kmalloc_node_track_caller_noprof+0x399/0x580 [ 506.658570][T24625] ? __pfx_free_modprobe_argv+0x10/0x10 [ 506.658653][T24625] call_usermodehelper_setup+0x72/0x190 [ 506.658685][T24625] __request_module+0x264/0x3e0 [ 506.658714][T24625] ? capable+0x7c/0xb0 [ 506.658743][T24625] ? security_capable+0x83/0x90 [ 506.658864][T24625] dev_load+0x61/0xc0 [ 506.658884][T24625] dev_ioctl+0x777/0x960 [ 506.658978][T24625] sock_ioctl+0x593/0x610 [ 506.659004][T24625] ? __pfx_sock_ioctl+0x10/0x10 [ 506.659035][T24625] __se_sys_ioctl+0xce/0x140 [ 506.659066][T24625] __x64_sys_ioctl+0x43/0x50 [ 506.659095][T24625] x64_sys_call+0x1816/0x3000 [ 506.659126][T24625] do_syscall_64+0xd2/0x200 [ 506.659221][T24625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 506.659259][T24625] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 506.659294][T24625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.659315][T24625] RIP: 0033:0x7fbb1fdcf6c9 [ 506.659354][T24625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.659397][T24625] RSP: 002b:00007fbb1e837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.659423][T24625] RAX: ffffffffffffffda RBX: 00007fbb20025fa0 RCX: 00007fbb1fdcf6c9 [ 506.659441][T24625] RDX: 0000200000000440 RSI: 00000000000089f3 RDI: 0000000000000003 [ 506.659458][T24625] RBP: 00007fbb1e837090 R08: 0000000000000000 R09: 0000000000000000 [ 506.659475][T24625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.659492][T24625] R13: 00007fbb20026038 R14: 00007fbb20025fa0 R15: 00007ffebdddbeb8 [ 506.659568][T24625] [ 506.967493][T24626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7171'. [ 507.042348][T24634] SELinux: policydb version 0 does not match my version range 15-35 [ 507.042477][T24634] SELinux: failed to load policy [ 507.169887][T24637] loop8: detected capacity change from 0 to 512 [ 507.176009][T24637] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 507.176127][T24637] EXT4-fs (loop8): orphan cleanup on readonly fs [ 507.202937][T24637] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.7180: corrupted inode contents [ 507.250098][T24628] usb usb8: usbfs: process 24628 (syz.6.7173) did not claim interface 5 before use [ 507.266540][T24637] EXT4-fs (loop8): Remounting filesystem read-only [ 507.266662][T24637] EXT4-fs (loop8): 1 truncate cleaned up [ 507.267086][T13483] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 507.267115][T13483] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 507.267147][T13483] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 507.267822][T24637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.340401][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.386452][T24642] wg2: entered promiscuous mode [ 507.386475][T24642] wg2: entered allmulticast mode [ 507.639481][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7188'. [ 507.651156][T24655] hsr_slave_0: left promiscuous mode [ 507.654636][T24655] hsr_slave_1: left promiscuous mode [ 507.703086][T24664] FAULT_INJECTION: forcing a failure. [ 507.703086][T24664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.703128][T24664] CPU: 0 UID: 0 PID: 24664 Comm: syz.0.7191 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 507.703160][T24664] Tainted: [W]=WARN [ 507.703167][T24664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.703262][T24664] Call Trace: [ 507.703270][T24664] [ 507.703277][T24664] __dump_stack+0x1d/0x30 [ 507.703307][T24664] dump_stack_lvl+0xe8/0x140 [ 507.703338][T24664] dump_stack+0x15/0x1b [ 507.703364][T24664] should_fail_ex+0x265/0x280 [ 507.703425][T24664] should_fail+0xb/0x20 [ 507.703450][T24664] should_fail_usercopy+0x1a/0x20 [ 507.703533][T24664] _copy_from_user+0x1c/0xb0 [ 507.703632][T24664] ___sys_sendmsg+0xc1/0x1d0 [ 507.703690][T24664] __sys_sendmmsg+0x178/0x300 [ 507.703740][T24664] __x64_sys_sendmmsg+0x57/0x70 [ 507.703794][T24664] x64_sys_call+0x1c4a/0x3000 [ 507.703827][T24664] do_syscall_64+0xd2/0x200 [ 507.703911][T24664] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 507.703953][T24664] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 507.704001][T24664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.704032][T24664] RIP: 0033:0x7ff175a1f6c9 [ 507.704121][T24664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.704148][T24664] RSP: 002b:00007ff17447f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 507.704176][T24664] RAX: ffffffffffffffda RBX: 00007ff175c75fa0 RCX: 00007ff175a1f6c9 [ 507.704194][T24664] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 507.704213][T24664] RBP: 00007ff17447f090 R08: 0000000000000000 R09: 0000000000000000 [ 507.704230][T24664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.704247][T24664] R13: 00007ff175c76038 R14: 00007ff175c75fa0 R15: 00007ffeb4916ac8 [ 507.704346][T24664] [ 507.789635][T24669] lo speed is unknown, defaulting to 1000 [ 507.789657][T24669] lo speed is unknown, defaulting to 1000 [ 507.789920][T24669] lo speed is unknown, defaulting to 1000 [ 507.790882][T24669] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 507.820656][T24669] lo speed is unknown, defaulting to 1000 [ 507.821021][T24669] lo speed is unknown, defaulting to 1000 [ 507.821350][T24669] lo speed is unknown, defaulting to 1000 [ 507.821737][T24669] lo speed is unknown, defaulting to 1000 [ 507.822106][T24669] lo speed is unknown, defaulting to 1000 [ 507.822475][T24669] lo speed is unknown, defaulting to 1000 [ 507.830244][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7190'. [ 507.984065][T24687] tipc: Started in network mode [ 507.984142][T24687] tipc: Node identity eed364a266ac, cluster identity 4711 [ 507.984187][T24687] tipc: Enabled bearer , priority 0 [ 507.984538][T24687] syzkaller0: entered promiscuous mode [ 507.984577][T24687] syzkaller0: entered allmulticast mode [ 507.988206][T24687] tipc: Resetting bearer [ 508.010522][T24686] tipc: Resetting bearer [ 508.104090][T24686] tipc: Disabling bearer [ 508.147041][T24690] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.345194][T24690] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.402626][T24690] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.459877][T24690] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.532110][ T562] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.551476][T24706] loop0: detected capacity change from 0 to 4096 [ 508.604831][ T562] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.618190][ T562] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.704845][ T562] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.715151][T24706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.761144][T24715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7200'. [ 508.791313][T24719] EXT4-fs (loop6): unable to read superblock [ 508.886728][T24728] wg2: entered promiscuous mode [ 508.891635][T24728] wg2: entered allmulticast mode [ 509.138562][T24722] lo speed is unknown, defaulting to 1000 [ 509.207672][T24746] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.311991][T24746] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.340374][T24722] lo speed is unknown, defaulting to 1000 [ 509.350059][T24722] lo speed is unknown, defaulting to 1000 [ 509.382462][T24746] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.407535][T19882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.453959][T24746] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.503168][T24751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7216'. [ 509.637137][T24722] chnl_net:caif_netlink_parms(): no params data found [ 509.780294][T24749] loop0: detected capacity change from 0 to 8192 [ 509.791310][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7216'. [ 509.848374][T24749] team0 (unregistering): Port device team_slave_0 removed [ 509.866036][T24749] team0 (unregistering): Port device team_slave_1 removed [ 509.880577][T24722] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.887743][T24722] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.895130][ T562] Bluetooth: hci0: Frame reassembly failed (-90) [ 509.914258][T24722] bridge_slave_0: entered allmulticast mode [ 509.920914][T24722] bridge_slave_0: entered promiscuous mode [ 509.935090][T24722] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.942216][T24722] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.961935][T24722] bridge_slave_1: entered allmulticast mode [ 509.968808][T24722] bridge_slave_1: entered promiscuous mode [ 510.007520][T24722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.034650][T24722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.083981][T24722] team0: Port device team_slave_0 added [ 510.095985][T24722] team0: Port device team_slave_1 added [ 510.125479][T24722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.125494][T24722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.125522][T24722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.126246][T24722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.126262][T24722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.126331][T24722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.230451][T24722] hsr_slave_0: entered promiscuous mode [ 510.231127][T24722] hsr_slave_1: entered promiscuous mode [ 510.606841][T24722] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 510.615996][T24722] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.626681][T24722] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 510.645578][T24722] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 510.764850][T24722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.774255][T24722] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.783183][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.783228][T13483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.803717][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.803756][T13445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.919813][T24722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.108013][T24722] veth0_vlan: entered promiscuous mode [ 511.113687][T24722] veth1_vlan: entered promiscuous mode [ 511.132137][T24722] veth0_macvtap: entered promiscuous mode [ 511.135672][T24722] veth1_macvtap: entered promiscuous mode [ 511.155509][T24722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.168924][T24722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.181457][ T562] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.181585][T13445] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.199090][T13445] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.211397][T13445] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.305061][T24811] hub 5-0:1.0: USB hub found [ 511.310425][T24811] hub 5-0:1.0: 8 ports detected [ 511.376221][T24813] loop7: detected capacity change from 0 to 8192 [ 511.383860][T13485] dummy0: left allmulticast mode [ 511.389063][T13485] bridge0: port 1(dummy0) entered disabled state [ 511.397037][T24813] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 511.413285][T24818] netlink: 'syz.6.7226': attribute type 10 has an invalid length. [ 511.698771][T13485] bond0 (unregistering): Released all slaves [ 511.712166][T24818] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 511.790317][T13485] tipc: Disabling bearer [ 511.795407][T13485] tipc: Left network mode [ 511.847023][T24762] Bluetooth: hci0: command 0x1003 tx timeout [ 511.847392][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 511.871317][T24839] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.077739][T24839] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.138426][T24839] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.226124][T24839] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.270968][T13445] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.279626][T13445] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.302938][T13445] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.302980][T13445] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.648336][T24853] lo speed is unknown, defaulting to 1000 [ 512.681710][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7236'. [ 512.728405][T24854] gretap0: entered promiscuous mode [ 512.761446][T24854] macsec1: entered promiscuous mode [ 512.766868][T24854] macsec1: entered allmulticast mode [ 512.772223][T24854] gretap0: entered allmulticast mode [ 512.819603][T24854] gretap0: left allmulticast mode [ 512.824813][T24854] gretap0: left promiscuous mode [ 512.866296][T24853] lo speed is unknown, defaulting to 1000 [ 512.878063][T24853] lo speed is unknown, defaulting to 1000 [ 513.090083][T24851] loop8: detected capacity change from 0 to 2048 [ 513.216771][T24851] loop8: p2 p3 p7 [ 513.388962][T24859] loop6: detected capacity change from 0 to 764 [ 513.452025][T24861] netlink: 'syz.8.7240': attribute type 10 has an invalid length. [ 513.473691][T24861] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 513.872092][T24882] netlink: 'syz.1.7245': attribute type 29 has an invalid length. [ 513.880812][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 513.880855][ T29] audit: type=1326 audit(2000000246.374:48464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 513.910986][ T29] audit: type=1326 audit(2000000246.374:48465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 513.934825][ T29] audit: type=1326 audit(2000000246.374:48466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 513.958573][ T29] audit: type=1326 audit(2000000246.374:48467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 513.982473][ T29] audit: type=1326 audit(2000000246.374:48468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 514.019957][ T29] audit: type=1326 audit(2000000246.458:48469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 514.044443][ T29] audit: type=1326 audit(2000000246.458:48470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 514.068134][ T29] audit: type=1326 audit(2000000246.458:48471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 514.091765][ T29] audit: type=1326 audit(2000000246.458:48472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 514.115313][ T29] audit: type=1326 audit(2000000246.458:48473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24881 comm="syz.1.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff490b5f6c9 code=0x7ffc0000 [ 514.128528][T24888] FAULT_INJECTION: forcing a failure. [ 514.128528][T24888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.152060][T24888] CPU: 0 UID: 0 PID: 24888 Comm: syz.0.7247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.152171][T24888] Tainted: [W]=WARN [ 514.152180][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.152197][T24888] Call Trace: [ 514.152206][T24888] [ 514.152219][T24888] __dump_stack+0x1d/0x30 [ 514.152263][T24888] dump_stack_lvl+0xe8/0x140 [ 514.152285][T24888] dump_stack+0x15/0x1b [ 514.152318][T24888] should_fail_ex+0x265/0x280 [ 514.152346][T24888] should_fail+0xb/0x20 [ 514.152428][T24888] should_fail_usercopy+0x1a/0x20 [ 514.152451][T24888] _copy_to_user+0x20/0xa0 [ 514.152484][T24888] simple_read_from_buffer+0xb5/0x130 [ 514.152587][T24888] proc_fail_nth_read+0x10e/0x150 [ 514.152635][T24888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.152677][T24888] vfs_read+0x1a8/0x770 [ 514.152706][T24888] ? __rcu_read_unlock+0x4f/0x70 [ 514.152776][T24888] ? __fget_files+0x184/0x1c0 [ 514.152811][T24888] ksys_read+0xda/0x1a0 [ 514.152870][T24888] __x64_sys_read+0x40/0x50 [ 514.152899][T24888] x64_sys_call+0x27c0/0x3000 [ 514.152924][T24888] do_syscall_64+0xd2/0x200 [ 514.152950][T24888] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.153071][T24888] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 514.153109][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.153155][T24888] RIP: 0033:0x7ff175a1e0dc [ 514.153175][T24888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 514.153224][T24888] RSP: 002b:00007ff17443d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.153250][T24888] RAX: ffffffffffffffda RBX: 00007ff175c76180 RCX: 00007ff175a1e0dc [ 514.153267][T24888] RDX: 000000000000000f RSI: 00007ff17443d0a0 RDI: 0000000000000004 [ 514.153280][T24888] RBP: 00007ff17443d090 R08: 0000000000000000 R09: 0000000000000000 [ 514.153292][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.153305][T24888] R13: 00007ff175c76218 R14: 00007ff175c76180 R15: 00007ffeb4916ac8 [ 514.153334][T24888] [ 514.417758][T24891] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7248'. [ 514.439478][T24891] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.467383][T24891] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.494639][T24900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7253'. [ 514.514832][T24891] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.548395][T24905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.575239][T24891] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.595111][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7254'. [ 514.611794][T24897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7252'. [ 514.749531][T13457] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.761299][T13457] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.773582][T13457] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.784573][T13457] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.898916][T24925] hub 5-0:1.0: USB hub found [ 514.903950][T24925] hub 5-0:1.0: 8 ports detected [ 515.017893][T24933] FAULT_INJECTION: forcing a failure. [ 515.017893][T24933] name failslab, interval 1, probability 0, space 0, times 0 [ 515.030667][T24933] CPU: 0 UID: 0 PID: 24933 Comm: syz.7.7262 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.030705][T24933] Tainted: [W]=WARN [ 515.030712][T24933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.030728][T24933] Call Trace: [ 515.030735][T24933] [ 515.030743][T24933] __dump_stack+0x1d/0x30 [ 515.030801][T24933] dump_stack_lvl+0xe8/0x140 [ 515.030829][T24933] dump_stack+0x15/0x1b [ 515.030882][T24933] should_fail_ex+0x265/0x280 [ 515.030902][T24933] should_failslab+0x8c/0xb0 [ 515.030975][T24933] kmem_cache_alloc_noprof+0x50/0x480 [ 515.031003][T24933] ? skb_clone+0x151/0x1f0 [ 515.031023][T24933] skb_clone+0x151/0x1f0 [ 515.031040][T24933] __netlink_deliver_tap+0x2c9/0x500 [ 515.031078][T24933] netlink_unicast+0x66b/0x690 [ 515.031185][T24933] netlink_sendmsg+0x58b/0x6b0 [ 515.031205][T24933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.031223][T24933] __sock_sendmsg+0x145/0x180 [ 515.031246][T24933] ____sys_sendmsg+0x31e/0x4e0 [ 515.031396][T24933] ___sys_sendmsg+0x17b/0x1d0 [ 515.031433][T24933] __x64_sys_sendmsg+0xd4/0x160 [ 515.031464][T24933] x64_sys_call+0x191e/0x3000 [ 515.031486][T24933] do_syscall_64+0xd2/0x200 [ 515.031504][T24933] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.031538][T24933] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 515.031569][T24933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.031641][T24933] RIP: 0033:0x7fd6093ef6c9 [ 515.031657][T24933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.031719][T24933] RSP: 002b:00007fd607e4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.031743][T24933] RAX: ffffffffffffffda RBX: 00007fd609645fa0 RCX: 00007fd6093ef6c9 [ 515.031760][T24933] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 515.031776][T24933] RBP: 00007fd607e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.031789][T24933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.031820][T24933] R13: 00007fd609646038 R14: 00007fd609645fa0 R15: 00007ffdd9d89028 [ 515.031850][T24933] [ 515.267021][T24935] FAULT_INJECTION: forcing a failure. [ 515.267021][T24935] name failslab, interval 1, probability 0, space 0, times 0 [ 515.279726][T24935] CPU: 1 UID: 0 PID: 24935 Comm: syz.7.7263 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.279838][T24935] Tainted: [W]=WARN [ 515.279847][T24935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.279861][T24935] Call Trace: [ 515.279867][T24935] [ 515.279875][T24935] __dump_stack+0x1d/0x30 [ 515.279904][T24935] dump_stack_lvl+0xe8/0x140 [ 515.280001][T24935] dump_stack+0x15/0x1b [ 515.280019][T24935] should_fail_ex+0x265/0x280 [ 515.280040][T24935] should_failslab+0x8c/0xb0 [ 515.280073][T24935] kmem_cache_alloc_noprof+0x50/0x480 [ 515.280180][T24935] ? skb_clone+0x151/0x1f0 [ 515.280209][T24935] skb_clone+0x151/0x1f0 [ 515.280233][T24935] __netlink_deliver_tap+0x2c9/0x500 [ 515.280274][T24935] netlink_unicast+0x66b/0x690 [ 515.280379][T24935] netlink_sendmsg+0x58b/0x6b0 [ 515.280428][T24935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.280512][T24935] __sock_sendmsg+0x145/0x180 [ 515.280544][T24935] ____sys_sendmsg+0x31e/0x4e0 [ 515.280586][T24935] ___sys_sendmsg+0x17b/0x1d0 [ 515.280633][T24935] __x64_sys_sendmsg+0xd4/0x160 [ 515.280702][T24935] x64_sys_call+0x191e/0x3000 [ 515.280727][T24935] do_syscall_64+0xd2/0x200 [ 515.280792][T24935] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.280827][T24935] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 515.280883][T24935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.280911][T24935] RIP: 0033:0x7fd6093ef6c9 [ 515.280931][T24935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.280951][T24935] RSP: 002b:00007fd607e4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.281043][T24935] RAX: ffffffffffffffda RBX: 00007fd609645fa0 RCX: 00007fd6093ef6c9 [ 515.281060][T24935] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 515.281077][T24935] RBP: 00007fd607e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.281094][T24935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.281110][T24935] R13: 00007fd609646038 R14: 00007fd609645fa0 R15: 00007ffdd9d89028 [ 515.281134][T24935] [ 515.281448][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7263'. [ 515.470499][T24939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7265'. [ 515.553533][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7266'. [ 515.607464][T24952] wg2: left promiscuous mode [ 515.612149][T24952] wg2: left allmulticast mode [ 515.621699][T24952] wg2: entered promiscuous mode [ 515.626800][T24952] wg2: entered allmulticast mode [ 515.661527][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7270'. [ 515.700133][T24961] loop6: detected capacity change from 0 to 512 [ 515.709544][T24961] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.7270: EA inode hash validation failed [ 515.724437][T24961] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.7270: corrupted inode contents [ 515.737749][T24961] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.7270: mark_inode_dirty error [ 515.749821][T24961] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.7270: corrupted inode contents [ 515.762731][T24961] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.7270: mark_inode_dirty error [ 515.775700][T24961] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.7270: mark inode dirty (error -117) [ 515.797867][T24961] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 515.807851][T24961] EXT4-fs (loop6): 1 orphan inode deleted [ 515.814733][T24961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.840220][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.021981][T24969] loop6: detected capacity change from 0 to 4096 [ 516.032388][T24969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.248909][T24975] FAULT_INJECTION: forcing a failure. [ 516.248909][T24975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.262883][T24975] CPU: 1 UID: 0 PID: 24975 Comm: syz.0.7275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 516.262922][T24975] Tainted: [W]=WARN [ 516.262930][T24975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.262944][T24975] Call Trace: [ 516.262951][T24975] [ 516.262960][T24975] __dump_stack+0x1d/0x30 [ 516.262986][T24975] dump_stack_lvl+0xe8/0x140 [ 516.263063][T24975] dump_stack+0x15/0x1b [ 516.263108][T24975] should_fail_ex+0x265/0x280 [ 516.263132][T24975] should_fail_alloc_page+0xf2/0x100 [ 516.263182][T24975] __alloc_frozen_pages_noprof+0xff/0x360 [ 516.263256][T24975] alloc_pages_mpol+0xb3/0x260 [ 516.263292][T24975] ? anon_pipe_write+0x71/0xb30 [ 516.263326][T24975] alloc_pages_noprof+0x90/0x130 [ 516.263351][T24975] anon_pipe_write+0x6a1/0xb30 [ 516.263385][T24975] ? anon_pipe_write+0x71/0xb30 [ 516.263430][T24975] ? __pfx_anon_pipe_write+0x10/0x10 [ 516.263616][T24975] vfs_write+0x52a/0x960 [ 516.263654][T24975] ksys_write+0xda/0x1a0 [ 516.263685][T24975] __x64_sys_write+0x40/0x50 [ 516.263717][T24975] x64_sys_call+0x2802/0x3000 [ 516.263768][T24975] do_syscall_64+0xd2/0x200 [ 516.263790][T24975] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 516.263822][T24975] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 516.264002][T24975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.264025][T24975] RIP: 0033:0x7ff175a1f6c9 [ 516.264044][T24975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.264065][T24975] RSP: 002b:00007ff17447f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.264088][T24975] RAX: ffffffffffffffda RBX: 00007ff175c75fa0 RCX: 00007ff175a1f6c9 [ 516.264136][T24975] RDX: 0000000000011000 RSI: 0000200000000040 RDI: 0000000000000004 [ 516.264151][T24975] RBP: 00007ff17447f090 R08: 0000000000000000 R09: 0000000000000000 [ 516.264165][T24975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.264179][T24975] R13: 00007ff175c76038 R14: 00007ff175c75fa0 R15: 00007ffeb4916ac8 [ 516.264204][T24975] [ 516.498461][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.540395][T24985] loop6: detected capacity change from 0 to 1024 [ 516.545554][T24978] ip6gre1: entered allmulticast mode [ 516.548420][T24985] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 516.568091][T24985] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 516.579800][T24985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 516.588597][T24985] System zones: 0-1, 4-36, 102-102 [ 516.594583][T24985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.608728][T24985] loop6: Can't mount, would change RO state [ 516.625156][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.675207][T13457] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.691940][T13457] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.707011][T25000] loop0: detected capacity change from 0 to 2048 [ 516.708538][T13457] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.727511][T13457] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.755290][T25000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.779737][T25000] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7283: bg 0: block 234: padding at end of block bitmap is not set [ 516.797668][T25010] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7285'. [ 516.815234][T25013] loop8: detected capacity change from 0 to 512 [ 516.836156][T19882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.838163][T25013] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.858917][T25013] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.878417][T25020] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7289'. [ 516.925105][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.937429][T25025] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.971032][T25028] loop8: detected capacity change from 0 to 1024 [ 516.979215][T25028] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 516.989420][T25028] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.000694][T25028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 517.000813][T25025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.009062][T25028] System zones: 0-1, 4-36, 102-102 [ 517.024590][T25028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.038869][T25028] loop8: Can't mount, would change RO state [ 517.056474][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.079670][T25025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.161503][T25025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.217268][T25040] FAULT_INJECTION: forcing a failure. [ 517.217268][T25040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.230405][T25040] CPU: 0 UID: 0 PID: 25040 Comm: syz.1.7295 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.230494][T25040] Tainted: [W]=WARN [ 517.230502][T25040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.230522][T25040] Call Trace: [ 517.230594][T25040] [ 517.230603][T25040] __dump_stack+0x1d/0x30 [ 517.230645][T25040] dump_stack_lvl+0xe8/0x140 [ 517.230669][T25040] dump_stack+0x15/0x1b [ 517.230691][T25040] should_fail_ex+0x265/0x280 [ 517.230715][T25040] should_fail+0xb/0x20 [ 517.230733][T25040] should_fail_usercopy+0x1a/0x20 [ 517.230784][T25040] strncpy_from_user+0x25/0x230 [ 517.230815][T25040] ? htab_map_hash+0x15f/0x1d0 [ 517.230905][T25040] strncpy_from_user_nofault+0x68/0xf0 [ 517.230931][T25040] bpf_probe_read_user_str+0x2a/0x70 [ 517.230970][T25040] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 517.231029][T25040] bpf_trace_run2+0x107/0x1c0 [ 517.231081][T25040] ? ref_tracker_free+0x28d/0x3e0 [ 517.231173][T25040] ? filter_irq_stacks+0x1d/0x70 [ 517.231195][T25040] ? ref_tracker_free+0x28d/0x3e0 [ 517.231349][T25040] __traceiter_kfree+0x2e/0x50 [ 517.231374][T25040] ? ref_tracker_free+0x28d/0x3e0 [ 517.231409][T25040] kfree+0x351/0x400 [ 517.231436][T25040] ? stack_trace_save+0x5e/0x90 [ 517.231538][T25040] ref_tracker_free+0x28d/0x3e0 [ 517.231574][T25040] ? ppp_destroy_channel+0x37/0x120 [ 517.231603][T25040] ? ppp_unregister_channel+0x1ba/0x200 [ 517.231706][T25040] ? pppox_unbind_sock+0x42/0x60 [ 517.231731][T25040] ? pppol2tp_release+0x66/0x1b0 [ 517.231833][T25040] ? sock_close+0x6b/0x150 [ 517.231856][T25040] ? __fput+0x29b/0x650 [ 517.231875][T25040] ? ____fput+0x1c/0x30 [ 517.231899][T25040] ? task_work_run+0x131/0x1a0 [ 517.231933][T25040] ? exit_to_user_mode_loop+0xed/0x110 [ 517.231960][T25040] ? do_syscall_64+0x1d6/0x200 [ 517.231981][T25040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.232009][T25040] ppp_destroy_channel+0x37/0x120 [ 517.232080][T25040] ppp_unregister_channel+0x1ba/0x200 [ 517.232111][T25040] pppox_unbind_sock+0x42/0x60 [ 517.232137][T25040] pppol2tp_release+0x66/0x1b0 [ 517.232169][T25040] sock_close+0x6b/0x150 [ 517.232224][T25040] ? __pfx_sock_close+0x10/0x10 [ 517.232250][T25040] __fput+0x29b/0x650 [ 517.232278][T25040] ____fput+0x1c/0x30 [ 517.232297][T25040] task_work_run+0x131/0x1a0 [ 517.232407][T25040] exit_to_user_mode_loop+0xed/0x110 [ 517.232435][T25040] do_syscall_64+0x1d6/0x200 [ 517.232483][T25040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 517.232588][T25040] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 517.232631][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.232653][T25040] RIP: 0033:0x7ff490b5f6c9 [ 517.232670][T25040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.232689][T25040] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 517.232710][T25040] RAX: 0000000000000000 RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 517.232762][T25040] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 517.232775][T25040] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 517.232788][T25040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.232869][T25040] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 517.232893][T25040] [ 517.581247][ T562] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.603717][T13485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.622259][T13485] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.638092][T13485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.753865][T25056] loop7: detected capacity change from 0 to 1024 [ 517.770183][T25056] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 517.785663][T25056] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.808157][T25056] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 517.826742][T25056] System zones: 0-1, 4-36, 102-102 [ 517.844189][T25056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.880256][T25056] loop7: Can't mount, would change RO state [ 517.931520][T24722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.022801][T25064] loop7: detected capacity change from 0 to 4096 [ 518.051011][T25064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.254786][T25083] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 518.322287][T25085] FAULT_INJECTION: forcing a failure. [ 518.322287][T25085] name failslab, interval 1, probability 0, space 0, times 0 [ 518.335043][T25085] CPU: 1 UID: 0 PID: 25085 Comm: syz.8.7313 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 518.335090][T25085] Tainted: [W]=WARN [ 518.335150][T25085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 518.335166][T25085] Call Trace: [ 518.335175][T25085] [ 518.335185][T25085] __dump_stack+0x1d/0x30 [ 518.335209][T25085] dump_stack_lvl+0xe8/0x140 [ 518.335231][T25085] dump_stack+0x15/0x1b [ 518.335249][T25085] should_fail_ex+0x265/0x280 [ 518.335343][T25085] should_failslab+0x8c/0xb0 [ 518.335442][T25085] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 518.335486][T25085] ? __alloc_skb+0x101/0x320 [ 518.335524][T25085] __alloc_skb+0x101/0x320 [ 518.335573][T25085] create_monitor_ctrl_event+0x33/0x190 [ 518.335633][T25085] mgmt_cmd_status+0xe3/0x1d0 [ 518.335664][T25085] hci_mgmt_cmd+0x52b/0x8a0 [ 518.335689][T25085] ? io_schedule_timeout+0x40/0x70 [ 518.335749][T25085] hci_sock_sendmsg+0x518/0x910 [ 518.335774][T25085] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 518.335798][T25085] __sock_sendmsg+0x145/0x180 [ 518.335866][T25085] sock_write_iter+0x1a7/0x1f0 [ 518.335905][T25085] aio_write+0x2e5/0x410 [ 518.335964][T25085] io_submit_one+0xacd/0x11d0 [ 518.336023][T25085] __se_sys_io_submit+0xfb/0x280 [ 518.336066][T25085] __x64_sys_io_submit+0x43/0x50 [ 518.336145][T25085] x64_sys_call+0x2d6c/0x3000 [ 518.336172][T25085] do_syscall_64+0xd2/0x200 [ 518.336198][T25085] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 518.336238][T25085] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 518.336316][T25085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.336347][T25085] RIP: 0033:0x7fbb1fdcf6c9 [ 518.336366][T25085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.336453][T25085] RSP: 002b:00007fbb1e837038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 518.336480][T25085] RAX: ffffffffffffffda RBX: 00007fbb20025fa0 RCX: 00007fbb1fdcf6c9 [ 518.336498][T25085] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fbb1ffff000 [ 518.336515][T25085] RBP: 00007fbb1e837090 R08: 0000000000000000 R09: 0000000000000000 [ 518.336532][T25085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.336550][T25085] R13: 00007fbb20026038 R14: 00007fbb20025fa0 R15: 00007ffebdddbeb8 [ 518.336580][T25085] [ 518.650243][ T29] kauditd_printk_skb: 1162 callbacks suppressed [ 518.650264][ T29] audit: type=1326 audit(2000000251.384:49636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdf4266567 code=0x7ffc0000 [ 518.711944][T24722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.729668][ T29] audit: type=1326 audit(2000000251.384:49637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdf420b779 code=0x7ffc0000 [ 518.754463][ T29] audit: type=1326 audit(2000000251.384:49638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 518.778186][ T29] audit: type=1326 audit(2000000251.394:49639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdf4266567 code=0x7ffc0000 [ 518.801996][ T29] audit: type=1326 audit(2000000251.394:49640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdf420b779 code=0x7ffc0000 [ 518.825613][ T29] audit: type=1326 audit(2000000251.394:49641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 518.850055][ T29] audit: type=1326 audit(2000000251.394:49642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdf4266567 code=0x7ffc0000 [ 518.873699][ T29] audit: type=1326 audit(2000000251.394:49643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdf420b779 code=0x7ffc0000 [ 518.897282][ T29] audit: type=1326 audit(2000000251.394:49644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcdf426f6c9 code=0x7ffc0000 [ 518.920703][ T29] audit: type=1326 audit(2000000251.405:49645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25065 comm="syz.6.7308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdf4266567 code=0x7ffc0000 [ 519.013306][T25095] wg2: entered promiscuous mode [ 519.018446][T25095] wg2: entered allmulticast mode [ 519.033079][T25096] loop6: detected capacity change from 0 to 1024 [ 519.041021][T25096] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 519.051396][T25096] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 519.064211][T25096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 519.072740][T25096] System zones: 0-1, 4-36, 102-102 [ 519.078772][T25096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.105010][T25096] loop6: Can't mount, would change RO state [ 519.138729][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.206826][T25105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.214286][T25105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.229602][T25105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.237075][T25105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.248030][T25105] bridge0: port 3(batadv0) entered disabled state [ 519.262338][T25111] __nla_validate_parse: 5 callbacks suppressed [ 519.262357][T25111] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7326'. [ 519.279723][T25111] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7326'. [ 519.288857][T25111] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7326'. [ 519.321566][T25114] FAULT_INJECTION: forcing a failure. [ 519.321566][T25114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.334718][T25114] CPU: 1 UID: 0 PID: 25114 Comm: syz.1.7327 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.334758][T25114] Tainted: [W]=WARN [ 519.334764][T25114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.334780][T25114] Call Trace: [ 519.334787][T25114] [ 519.334795][T25114] __dump_stack+0x1d/0x30 [ 519.334823][T25114] dump_stack_lvl+0xe8/0x140 [ 519.334894][T25114] dump_stack+0x15/0x1b [ 519.334918][T25114] should_fail_ex+0x265/0x280 [ 519.334946][T25114] should_fail+0xb/0x20 [ 519.334968][T25114] should_fail_usercopy+0x1a/0x20 [ 519.334996][T25114] _copy_from_user+0x1c/0xb0 [ 519.335034][T25114] ___sys_sendmsg+0xc1/0x1d0 [ 519.335164][T25114] __x64_sys_sendmsg+0xd4/0x160 [ 519.335200][T25114] x64_sys_call+0x191e/0x3000 [ 519.335280][T25114] do_syscall_64+0xd2/0x200 [ 519.335302][T25114] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 519.335341][T25114] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 519.335388][T25114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.335417][T25114] RIP: 0033:0x7ff490b5f6c9 [ 519.335438][T25114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.335464][T25114] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.335539][T25114] RAX: ffffffffffffffda RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 519.335556][T25114] RDX: 0000000020008000 RSI: 0000200000000480 RDI: 0000000000000006 [ 519.335620][T25114] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 519.335638][T25114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.335655][T25114] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 519.335686][T25114] [ 519.391232][T25120] netlink: 18 bytes leftover after parsing attributes in process `syz.8.7330'. [ 519.532280][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7331'. [ 519.573145][T25122] loop0: detected capacity change from 0 to 4096 [ 519.592042][T25122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.895394][T25148] siw: device registration error -23 [ 519.994601][T19882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.135313][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7346'. [ 520.245737][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7338'. [ 520.287269][T25176] wg2: left promiscuous mode [ 520.291917][T25176] wg2: left allmulticast mode [ 520.300884][T25173] gretap0: entered promiscuous mode [ 520.360948][T25173] macsec2: entered promiscuous mode [ 520.366280][T25173] macsec2: entered allmulticast mode [ 520.371872][T25173] gretap0: entered allmulticast mode [ 520.388149][T25173] gretap0: left allmulticast mode [ 520.393454][T25173] gretap0: left promiscuous mode [ 520.425624][T25180] wg2: entered promiscuous mode [ 520.430620][T25180] wg2: entered allmulticast mode [ 520.445238][T25172] lo speed is unknown, defaulting to 1000 [ 520.530188][T25172] lo speed is unknown, defaulting to 1000 [ 520.537183][T25172] lo speed is unknown, defaulting to 1000 [ 520.590248][T25196] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.672791][T25196] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.734366][T25196] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.781784][T25196] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.872580][T13517] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.893964][T13517] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.928618][T13463] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.940936][T13463] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.025665][T25204] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7359'. [ 521.100406][T25210] siw: device registration error -23 [ 521.452035][T25218] lo speed is unknown, defaulting to 1000 [ 521.478555][T25223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7361'. [ 521.536030][T25223] gretap0: entered promiscuous mode [ 521.562142][T25223] macsec1: entered promiscuous mode [ 521.567629][T25223] macsec1: entered allmulticast mode [ 521.572935][T25223] gretap0: entered allmulticast mode [ 521.647659][T25223] gretap0: left allmulticast mode [ 521.652849][T25223] gretap0: left promiscuous mode [ 521.718118][T25218] lo speed is unknown, defaulting to 1000 [ 521.751463][T25218] lo speed is unknown, defaulting to 1000 [ 521.876278][T25241] FAULT_INJECTION: forcing a failure. [ 521.876278][T25241] name failslab, interval 1, probability 0, space 0, times 0 [ 521.889074][T25241] CPU: 1 UID: 0 PID: 25241 Comm: wÞ£ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 521.889123][T25241] Tainted: [W]=WARN [ 521.889131][T25241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.889194][T25241] Call Trace: [ 521.889202][T25241] [ 521.889211][T25241] __dump_stack+0x1d/0x30 [ 521.889238][T25241] dump_stack_lvl+0xe8/0x140 [ 521.889269][T25241] dump_stack+0x15/0x1b [ 521.889290][T25241] should_fail_ex+0x265/0x280 [ 521.889314][T25241] ? audit_log_d_path+0x8d/0x150 [ 521.889340][T25241] should_failslab+0x8c/0xb0 [ 521.889374][T25241] __kmalloc_cache_noprof+0x4c/0x4a0 [ 521.889475][T25241] audit_log_d_path+0x8d/0x150 [ 521.889501][T25241] audit_log_d_path_exe+0x42/0x70 [ 521.889577][T25241] audit_log_task+0x1e9/0x250 [ 521.889689][T25241] ? kstrtouint+0x76/0xc0 [ 521.889730][T25241] audit_seccomp+0x61/0x100 [ 521.889770][T25241] ? __seccomp_filter+0x82d/0x1250 [ 521.889836][T25241] __seccomp_filter+0x83e/0x1250 [ 521.889874][T25241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.889975][T25241] ? vfs_write+0x7e8/0x960 [ 521.890008][T25241] ? __rcu_read_unlock+0x4f/0x70 [ 521.890117][T25241] ? __fget_files+0x184/0x1c0 [ 521.890161][T25241] __secure_computing+0x82/0x150 [ 521.890198][T25241] syscall_trace_enter+0xcf/0x1e0 [ 521.890239][T25241] do_syscall_64+0xac/0x200 [ 521.890311][T25241] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 521.890349][T25241] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 521.890393][T25241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.890491][T25241] RIP: 0033:0x7ff490b5f6c9 [ 521.890512][T25241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.890536][T25241] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 521.890561][T25241] RAX: ffffffffffffffda RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 521.890578][T25241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.890606][T25241] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 521.890622][T25241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.890639][T25241] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 521.890668][T25241] [ 522.169326][T25243] 9pnet_fd: Insufficient options for proto=fd [ 522.175897][T25243] 9pnet_fd: Insufficient options for proto=fd [ 522.183940][T25243] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 522.194601][T25247] FAULT_INJECTION: forcing a failure. [ 522.194601][T25247] name failslab, interval 1, probability 0, space 0, times 0 [ 522.207384][T25247] CPU: 1 UID: 0 PID: 25247 Comm: syz.1.7373 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 522.207462][T25247] Tainted: [W]=WARN [ 522.207520][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.207535][T25247] Call Trace: [ 522.207543][T25247] [ 522.207551][T25247] __dump_stack+0x1d/0x30 [ 522.207575][T25247] dump_stack_lvl+0xe8/0x140 [ 522.207678][T25247] dump_stack+0x15/0x1b [ 522.207703][T25247] should_fail_ex+0x265/0x280 [ 522.207770][T25247] ? find_css_set+0x56b/0xd20 [ 522.207791][T25247] should_failslab+0x8c/0xb0 [ 522.207828][T25247] __kmalloc_cache_noprof+0x4c/0x4a0 [ 522.207876][T25247] find_css_set+0x56b/0xd20 [ 522.207992][T25247] cgroup_migrate_prepare_dst+0x75/0x3f0 [ 522.208020][T25247] cgroup_attach_task+0x1a6/0x420 [ 522.208053][T25247] __cgroup1_procs_write+0x1c8/0x230 [ 522.208161][T25247] ? __pfx_cgroup1_tasks_write+0x10/0x10 [ 522.208186][T25247] cgroup1_tasks_write+0x27/0x40 [ 522.208234][T25247] cgroup_file_write+0x197/0x350 [ 522.208278][T25247] ? __pfx_cgroup_file_write+0x10/0x10 [ 522.208317][T25247] kernfs_fop_write_iter+0x1eb/0x300 [ 522.208348][T25247] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 522.208380][T25247] vfs_write+0x52a/0x960 [ 522.208424][T25247] ksys_write+0xda/0x1a0 [ 522.208472][T25247] __x64_sys_write+0x40/0x50 [ 522.208501][T25247] x64_sys_call+0x2802/0x3000 [ 522.208562][T25247] do_syscall_64+0xd2/0x200 [ 522.208618][T25247] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 522.208656][T25247] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 522.208692][T25247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.208730][T25247] RIP: 0033:0x7ff490b5f6c9 [ 522.208751][T25247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.208834][T25247] RSP: 002b:00007ff48f5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 522.208867][T25247] RAX: ffffffffffffffda RBX: 00007ff490db5fa0 RCX: 00007ff490b5f6c9 [ 522.208887][T25247] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000007 [ 522.208900][T25247] RBP: 00007ff48f5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 522.208913][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.208926][T25247] R13: 00007ff490db6038 R14: 00007ff490db5fa0 R15: 00007ffce3d98298 [ 522.209027][T25247] [ 522.468629][T25243] loop6: detected capacity change from 0 to 512 [ 522.475489][T25243] ext4: Bad value for 'journal_dev' [ 522.528918][T25250] loop8: detected capacity change from 0 to 4096 [ 522.544757][T25255] tipc: Enabled bearer , priority 0 [ 522.544951][T25250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.552058][T25255] syzkaller0: entered promiscuous mode [ 522.569616][T25255] syzkaller0: entered allmulticast mode [ 522.578999][T25254] tipc: Resetting bearer [ 522.588525][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.599536][T25254] tipc: Disabling bearer [ 522.669597][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7381'. [ 522.751768][T25269] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.817223][T25269] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.873540][T25269] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.930649][T25269] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.994389][T13498] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.012572][T13498] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.034516][T13498] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.058096][T13498] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.179025][T25281] FAULT_INJECTION: forcing a failure. [ 523.179025][T25281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.192140][T25281] CPU: 1 UID: 0 PID: 25281 Comm: syz.8.7384 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 523.192182][T25281] Tainted: [W]=WARN [ 523.192188][T25281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.192280][T25281] Call Trace: [ 523.192289][T25281] [ 523.192300][T25281] __dump_stack+0x1d/0x30 [ 523.192326][T25281] dump_stack_lvl+0xe8/0x140 [ 523.192367][T25281] dump_stack+0x15/0x1b [ 523.192386][T25281] should_fail_ex+0x265/0x280 [ 523.192412][T25281] should_fail+0xb/0x20 [ 523.192434][T25281] should_fail_usercopy+0x1a/0x20 [ 523.192529][T25281] _copy_to_user+0x20/0xa0 [ 523.192562][T25281] rng_dev_read+0x3ef/0x740 [ 523.192642][T25281] ? __pfx_rng_dev_read+0x10/0x10 [ 523.192666][T25281] vfs_readv+0x3fb/0x690 [ 523.192711][T25281] __x64_sys_preadv+0xfd/0x1c0 [ 523.192776][T25281] x64_sys_call+0x282e/0x3000 [ 523.192797][T25281] do_syscall_64+0xd2/0x200 [ 523.192815][T25281] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 523.192845][T25281] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 523.192951][T25281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.192971][T25281] RIP: 0033:0x7fbb1fdcf6c9 [ 523.192986][T25281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.193003][T25281] RSP: 002b:00007fbb1e837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 523.193019][T25281] RAX: ffffffffffffffda RBX: 00007fbb20025fa0 RCX: 00007fbb1fdcf6c9 [ 523.193096][T25281] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 523.193107][T25281] RBP: 00007fbb1e837090 R08: 0000000000000000 R09: 0000000000000000 [ 523.193118][T25281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.193129][T25281] R13: 00007fbb20026038 R14: 00007fbb20025fa0 R15: 00007ffebdddbeb8 [ 523.193150][T25281] [ 523.395595][T25283] siw: device registration error -23 [ 523.533197][T25285] lo speed is unknown, defaulting to 1000 [ 523.600883][T25289] loop7: detected capacity change from 0 to 4096 [ 523.637829][T25289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.643851][T25292] lo speed is unknown, defaulting to 1000 [ 523.657436][T25285] lo speed is unknown, defaulting to 1000 [ 523.681796][T25294] gretap0: entered promiscuous mode [ 523.708783][T25294] macsec1: entered promiscuous mode [ 523.714115][T25294] macsec1: entered allmulticast mode [ 523.719474][T25294] gretap0: entered allmulticast mode [ 523.725746][T24722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.791866][T25294] gretap0: left allmulticast mode [ 523.797171][T25294] gretap0: left promiscuous mode [ 523.829122][T25285] lo speed is unknown, defaulting to 1000 [ 523.866629][T25292] lo speed is unknown, defaulting to 1000 [ 523.907050][T25298] tipc: Enabled bearer , priority 0 [ 523.913866][T25292] lo speed is unknown, defaulting to 1000 [ 523.928428][T25298] syzkaller0: entered promiscuous mode [ 523.934018][T25298] syzkaller0: entered allmulticast mode [ 523.962914][T25297] tipc: Resetting bearer [ 523.975509][T25297] tipc: Disabling bearer [ 524.136327][T25308] FAULT_INJECTION: forcing a failure. [ 524.136327][T25308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.149629][T25308] CPU: 1 UID: 0 PID: 25308 Comm: syz.6.7393 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 524.149664][T25308] Tainted: [W]=WARN [ 524.149671][T25308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.149762][T25308] Call Trace: [ 524.149770][T25308] [ 524.149780][T25308] __dump_stack+0x1d/0x30 [ 524.149810][T25308] dump_stack_lvl+0xe8/0x140 [ 524.149840][T25308] dump_stack+0x15/0x1b [ 524.149865][T25308] should_fail_ex+0x265/0x280 [ 524.149915][T25308] should_fail+0xb/0x20 [ 524.149937][T25308] should_fail_usercopy+0x1a/0x20 [ 524.150035][T25308] _copy_from_user+0x1c/0xb0 [ 524.150070][T25308] ___sys_sendmsg+0xc1/0x1d0 [ 524.150116][T25308] __x64_sys_sendmsg+0xd4/0x160 [ 524.150151][T25308] x64_sys_call+0x191e/0x3000 [ 524.150183][T25308] do_syscall_64+0xd2/0x200 [ 524.150262][T25308] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 524.150296][T25308] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 524.150329][T25308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.150353][T25308] RIP: 0033:0x7fcdf426f6c9 [ 524.150470][T25308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.150492][T25308] RSP: 002b:00007fcdf2cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.150517][T25308] RAX: ffffffffffffffda RBX: 00007fcdf44c5fa0 RCX: 00007fcdf426f6c9 [ 524.150535][T25308] RDX: 0000000000000084 RSI: 0000200000001440 RDI: 0000000000000003 [ 524.150552][T25308] RBP: 00007fcdf2cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.150569][T25308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.150632][T25308] R13: 00007fcdf44c6038 R14: 00007fcdf44c5fa0 R15: 00007fffdba12968 [ 524.150673][T25308] [ 524.535943][T25319] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 524.569868][T25321] loop6: detected capacity change from 0 to 4096 [ 524.576783][T25323] loop8: detected capacity change from 0 to 2048 [ 524.583989][T25323] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 524.586668][T25325] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 524.600150][T25323] syz.8.7400 (25323): attempted to duplicate a private mapping with mremap. This is not supported. [ 524.613978][T25321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.627996][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 524.628012][ T29] audit: type=1326 audit(2000000257.654:49860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.658028][ T29] audit: type=1326 audit(2000000257.654:49861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.681890][ T29] audit: type=1326 audit(2000000257.654:49862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.706918][ T29] audit: type=1326 audit(2000000257.654:49863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.731144][ T29] audit: type=1326 audit(2000000257.654:49864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.756089][ T29] audit: type=1326 audit(2000000257.654:49865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.780146][ T29] audit: type=1326 audit(2000000257.654:49866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.804220][ T29] audit: type=1326 audit(2000000257.654:49867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.828786][ T29] audit: type=1326 audit(2000000257.654:49868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.839653][T25334] tipc: Started in network mode [ 524.853096][ T29] audit: type=1326 audit(2000000257.654:49869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25322 comm="syz.8.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1fdcf6c9 code=0x7ffc0000 [ 524.857980][T25334] tipc: Node identity debfee825556, cluster identity 4711 [ 524.858028][T25334] tipc: Enabled bearer , priority 0 [ 524.869002][T25334] syzkaller0: entered promiscuous mode [ 524.896753][T25333] loop8: detected capacity change from 0 to 1024 [ 524.902116][T25334] syzkaller0: entered allmulticast mode [ 524.914941][T25333] EXT4-fs: Ignoring removed orlov option [ 524.921894][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.934995][T25333] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 524.947679][T25329] tipc: Resetting bearer [ 524.956003][T25329] tipc: Disabling bearer [ 524.963842][T25335] __nla_validate_parse: 3 callbacks suppressed [ 524.963860][T25335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7402'. [ 525.006350][T25333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.023902][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7402'. [ 525.048678][T25339] netlink: 'syz.1.7406': attribute type 1 has an invalid length. [ 525.061334][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.086488][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7407'. [ 525.125551][T25353] loop8: detected capacity change from 0 to 1024 [ 525.132745][T25343] loop6: detected capacity change from 0 to 1024 [ 525.132899][T25353] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 525.139731][T25343] EXT4-fs: Ignoring removed nobh option [ 525.149088][T25353] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 525.154611][T25343] EXT4-fs: Ignoring removed bh option [ 525.172173][T25353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 525.191360][T25353] System zones: 0-1, 4-36, 102-102 [ 525.201512][T25353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.220966][T25353] No source specified [ 525.237112][T25343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.251827][T25343] FAULT_INJECTION: forcing a failure. [ 525.251827][T25343] name failslab, interval 1, probability 0, space 0, times 0 [ 525.264561][T25343] CPU: 0 UID: 0 PID: 25343 Comm: syz.6.7407 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 525.264599][T25343] Tainted: [W]=WARN [ 525.264606][T25343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.264619][T25343] Call Trace: [ 525.264625][T25343] [ 525.264649][T25343] __dump_stack+0x1d/0x30 [ 525.264679][T25343] dump_stack_lvl+0xe8/0x140 [ 525.264708][T25343] dump_stack+0x15/0x1b [ 525.264733][T25343] should_fail_ex+0x265/0x280 [ 525.264787][T25343] should_failslab+0x8c/0xb0 [ 525.264817][T25343] __kmalloc_noprof+0xa5/0x570 [ 525.264848][T25343] ? ext4_find_extent+0x16b/0x7a0 [ 525.264887][T25343] ext4_find_extent+0x16b/0x7a0 [ 525.264997][T25343] ext4_ext_map_blocks+0x11f/0x38a0 [ 525.265074][T25343] ? __rcu_read_unlock+0x4f/0x70 [ 525.265113][T25343] ? folio_mark_accessed+0x240/0x3a0 [ 525.265160][T25343] ext4_map_blocks+0x5ee/0xd00 [ 525.265271][T25343] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 525.265378][T25343] _ext4_get_block+0x10a/0x350 [ 525.265593][T25343] ext4_get_block_unwritten+0x2a/0xb0 [ 525.265646][T25343] ext4_block_write_begin+0x5e8/0xc00 [ 525.265708][T25343] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 525.265749][T25343] ext4_convert_inline_data_to_extent+0x3df/0x7d0 [ 525.265805][T25343] ext4_try_to_write_inline_data+0x54/0x90 [ 525.265899][T25343] ext4_write_begin+0x1b3/0xeb0 [ 525.265952][T25343] ext4_da_write_begin+0x1fb/0x6e0 [ 525.266047][T25343] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 525.266079][T25343] generic_perform_write+0x184/0x490 [ 525.266114][T25343] ext4_buffered_write_iter+0x1ee/0x3c0 [ 525.266149][T25343] ext4_file_write_iter+0x387/0xf60 [ 525.266172][T25343] ? kstrtouint_from_user+0x9f/0xf0 [ 525.266315][T25343] ? 0xffffffff81000000 [ 525.266329][T25343] ? __rcu_read_unlock+0x4f/0x70 [ 525.266443][T25343] ? avc_policy_seqno+0x15/0x30 [ 525.266469][T25343] ? selinux_file_permission+0x1e4/0x320 [ 525.266513][T25343] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 525.266584][T25343] vfs_write+0x52a/0x960 [ 525.266624][T25343] __x64_sys_pwrite64+0xfd/0x150 [ 525.266692][T25343] x64_sys_call+0xc4d/0x3000 [ 525.266723][T25343] do_syscall_64+0xd2/0x200 [ 525.266750][T25343] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 525.266787][T25343] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 525.266847][T25343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.266876][T25343] RIP: 0033:0x7fcdf426f6c9 [ 525.266895][T25343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.266913][T25343] RSP: 002b:00007fcdf2cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 525.266937][T25343] RAX: ffffffffffffffda RBX: 00007fcdf44c5fa0 RCX: 00007fcdf426f6c9 [ 525.267024][T25343] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007 [ 525.267037][T25343] RBP: 00007fcdf2cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 525.267049][T25343] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 525.267062][T25343] R13: 00007fcdf44c6038 R14: 00007fcdf44c5fa0 R15: 00007fffdba12968 [ 525.267090][T25343] [ 525.454653][T25363] lo speed is unknown, defaulting to 1000 [ 525.491297][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.498434][T25364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7411'. [ 525.602125][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.641255][T25364] gretap0: entered promiscuous mode [ 525.646758][T25364] macsec1: entered promiscuous mode [ 525.652043][T25364] macsec1: entered allmulticast mode [ 525.657381][T25364] gretap0: entered allmulticast mode [ 525.665019][T25364] gretap0: left allmulticast mode [ 525.670193][T25364] gretap0: left promiscuous mode [ 525.679801][T25363] lo speed is unknown, defaulting to 1000 [ 525.686338][T25363] lo speed is unknown, defaulting to 1000 [ 525.722391][T25370] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7414'. [ 525.913311][T25379] tipc: Enabled bearer , priority 0 [ 525.940194][T25379] syzkaller0: entered promiscuous mode [ 525.945747][T25379] syzkaller0: entered allmulticast mode [ 525.978133][T25378] tipc: Resetting bearer [ 525.997387][T25378] tipc: Disabling bearer [ 526.212306][T25385] loop7: detected capacity change from 0 to 1024 [ 526.229363][T25385] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 526.252229][T25385] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 526.266058][T25385] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 526.276388][T25385] System zones: 0-1, 4-36, 102-102 [ 526.282242][T25385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.296737][T25385] No source specified [ 526.317530][T24722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.351194][T25394] loop7: detected capacity change from 0 to 128 [ 526.361718][T25394] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 526.373920][T25394] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 526.449027][T25396] tipc: Started in network mode [ 526.453961][T25396] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 526.463036][T25396] tipc: Enabled bearer , priority 10 [ 526.472043][T13498] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 526.510457][T25401] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7426'. [ 526.614565][T25405] tipc: Enabled bearer , priority 0 [ 526.627386][T25405] syzkaller0: entered promiscuous mode [ 526.633024][T25405] syzkaller0: entered allmulticast mode [ 526.652165][T25411] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.665348][T25404] tipc: Resetting bearer [ 526.675758][T25404] tipc: Disabling bearer [ 526.689238][T25415] loop6: detected capacity change from 0 to 1024 [ 526.699335][T25415] EXT4-fs: Ignoring removed orlov option [ 526.706414][T25411] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.710875][T25415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.744469][T17557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.786519][T25411] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.803914][T25427] loop0: detected capacity change from 0 to 1024 [ 526.811963][T25427] EXT4-fs: Ignoring removed orlov option [ 526.825029][T25427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.827301][T25434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25434 comm=syz.6.7440 [ 526.839110][T25435] loop9: detected capacity change from 0 to 7 [ 526.862713][T25411] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.874642][T19882] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.910435][T13490] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.925842][T13490] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.938531][T13490] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.952581][T13490] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.660947][ T3397] tipc: Node number set to 4269801488 [ 527.669882][T25487] FAULT_INJECTION: forcing a failure. [ 527.669882][T25487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.683114][T25487] CPU: 1 UID: 0 PID: 25487 Comm: syz.6.7460 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 527.683274][T25487] Tainted: [W]=WARN [ 527.683281][T25487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.683295][T25487] Call Trace: [ 527.683304][T25487] [ 527.683315][T25487] __dump_stack+0x1d/0x30 [ 527.683342][T25487] dump_stack_lvl+0xe8/0x140 [ 527.683368][T25487] dump_stack+0x15/0x1b [ 527.683389][T25487] should_fail_ex+0x265/0x280 [ 527.683413][T25487] should_fail+0xb/0x20 [ 527.683478][T25487] should_fail_usercopy+0x1a/0x20 [ 527.683501][T25487] _copy_to_user+0x20/0xa0 [ 527.683537][T25487] simple_read_from_buffer+0xb5/0x130 [ 527.683573][T25487] proc_fail_nth_read+0x10e/0x150 [ 527.683679][T25487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.683715][T25487] vfs_read+0x1a8/0x770 [ 527.683739][T25487] ? __rcu_read_unlock+0x4f/0x70 [ 527.683813][T25487] ? __fget_files+0x184/0x1c0 [ 527.683910][T25487] ksys_read+0xda/0x1a0 [ 527.683947][T25487] __x64_sys_read+0x40/0x50 [ 527.683990][T25487] x64_sys_call+0x27c0/0x3000 [ 527.684014][T25487] do_syscall_64+0xd2/0x200 [ 527.684073][T25487] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 527.684180][T25487] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 527.684274][T25487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.684362][T25487] RIP: 0033:0x7fcdf426e0dc [ 527.684379][T25487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 527.684403][T25487] RSP: 002b:00007fcdf2cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.684423][T25487] RAX: ffffffffffffffda RBX: 00007fcdf44c5fa0 RCX: 00007fcdf426e0dc [ 527.684436][T25487] RDX: 000000000000000f RSI: 00007fcdf2cd70a0 RDI: 0000000000000007 [ 527.684448][T25487] RBP: 00007fcdf2cd7090 R08: 0000000000000000 R09: 000000000000001c [ 527.684480][T25487] R10: 0000000024000881 R11: 0000000000000246 R12: 0000000000000001 [ 527.684496][T25487] R13: 00007fcdf44c6038 R14: 00007fcdf44c5fa0 R15: 00007fffdba12968 [ 527.684518][T25487] [ 527.910794][T25489] hub 5-0:1.0: USB hub found [ 527.917185][T25489] hub 5-0:1.0: 8 ports detected [ 527.921960][T25491] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7462'. [ 527.935607][T25491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.945633][T25491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.955590][T25491] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 527.964967][T25491] bond0 (unregistering): Released all slaves [ 527.994484][T25493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7463'. [ 528.045072][T25496] tipc: Enabled bearer , priority 0 [ 528.053686][T25496] tipc: Resetting bearer [ 528.063707][T25495] tipc: Disabling bearer [ 528.359030][T25517] loop0: detected capacity change from 0 to 1024 [ 528.369679][T25517] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 528.382297][T25517] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 528.393000][T25517] JBD2: no valid journal superblock found [ 528.398851][T25517] EXT4-fs (loop0): Could not load journal inode [ 528.399229][T25519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7472'. [ 528.466692][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7473'. [ 528.513275][T25527] loop8: detected capacity change from 0 to 512 [ 528.542036][T25527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.564004][T25527] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.575663][T25527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.701140][T25539] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 528.763024][T25539] loop8: detected capacity change from 0 to 512 [ 528.815507][T25539] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7477: EA inode hash validation failed [ 528.820894][T25539] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.7477: corrupted inode contents [ 528.845226][T25539] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #15: comm syz.8.7477: mark_inode_dirty error [ 528.858682][T25539] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.7477: corrupted inode contents [ 528.872040][T25539] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2996: inode #15: comm syz.8.7477: mark_inode_dirty error [ 528.872783][T25539] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.7477: mark inode dirty (error -117) [ 528.885688][T25539] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 528.886447][T25539] EXT4-fs (loop8): 1 orphan inode deleted [ 528.926975][T25539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.974402][T25547] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 528.974456][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.010816][T25551] wg2: entered promiscuous mode [ 529.010870][T25551] wg2: entered allmulticast mode [ 529.147093][T25562] hub 5-0:1.0: USB hub found [ 529.147291][T25562] hub 5-0:1.0: 8 ports detected [ 529.259604][T25564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.268904][T25564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.278606][T25564] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 529.280835][T25564] bond0 (unregistering): Released all slaves [ 529.399894][ T29] kauditd_printk_skb: 936 callbacks suppressed [ 529.399913][ T29] audit: type=1326 audit(2000000262.665:50806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6093e6567 code=0x7ffc0000 [ 529.400047][ T29] audit: type=1326 audit(2000000262.665:50807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60938b779 code=0x7ffc0000 [ 529.400314][ T29] audit: type=1326 audit(2000000262.665:50808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd6093ef6c9 code=0x7ffc0000 [ 529.431077][ T29] audit: type=1326 audit(2000000262.707:50809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6093e6567 code=0x7ffc0000 [ 529.431135][ T29] audit: type=1326 audit(2000000262.707:50810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60938b779 code=0x7ffc0000 [ 529.431238][ T29] audit: type=1326 audit(2000000262.707:50811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd6093ef6c9 code=0x7ffc0000 [ 529.465923][ T29] audit: type=1326 audit(2000000262.738:50812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6093e6567 code=0x7ffc0000 [ 529.465971][ T29] audit: type=1326 audit(2000000262.738:50813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60938b779 code=0x7ffc0000 [ 529.466076][ T29] audit: type=1326 audit(2000000262.738:50814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd6093ef6c9 code=0x7ffc0000 [ 529.466285][ T29] audit: type=1326 audit(2000000262.738:50815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.7.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6093e6567 code=0x7ffc0000 [ 529.777547][T25591] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 529.805528][T25593] FAULT_INJECTION: forcing a failure. [ 529.805528][T25593] name failslab, interval 1, probability 0, space 0, times 0 [ 529.818309][T25593] CPU: 0 UID: 0 PID: 25593 Comm: syz.0.7496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 529.818379][T25593] Tainted: [W]=WARN [ 529.818388][T25593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.818405][T25593] Call Trace: [ 529.818413][T25593] [ 529.818421][T25593] __dump_stack+0x1d/0x30 [ 529.818447][T25593] dump_stack_lvl+0xe8/0x140 [ 529.818476][T25593] dump_stack+0x15/0x1b [ 529.818573][T25593] should_fail_ex+0x265/0x280 [ 529.818599][T25593] should_failslab+0x8c/0xb0 [ 529.818637][T25593] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 529.818733][T25593] ? __get_vm_area_node+0x106/0x1d0 [ 529.818776][T25593] __get_vm_area_node+0x106/0x1d0 [ 529.818822][T25593] __vmalloc_node_range_noprof+0x28c/0xed0 [ 529.818862][T25593] ? ip_set_sockfn_get+0x10a/0x6b0 [ 529.818891][T25593] ? cred_has_capability+0x210/0x280 [ 529.819047][T25593] ? selinux_capable+0x31/0x40 [ 529.819074][T25593] ? ip_set_sockfn_get+0x10a/0x6b0 [ 529.819185][T25593] vmalloc_noprof+0x82/0xc0 [ 529.819217][T25593] ? ip_set_sockfn_get+0x10a/0x6b0 [ 529.819291][T25593] ip_set_sockfn_get+0x10a/0x6b0 [ 529.819322][T25593] nf_getsockopt+0x190/0x1b0 [ 529.819398][T25593] ip_getsockopt+0x137/0x180 [ 529.819444][T25593] raw_getsockopt+0xb0/0x190 [ 529.819472][T25593] sock_common_getsockopt+0x60/0x70 [ 529.819511][T25593] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 529.819599][T25593] do_sock_getsockopt+0x200/0x240 [ 529.819648][T25593] __x64_sys_getsockopt+0x11e/0x1a0 [ 529.819696][T25593] x64_sys_call+0x2bca/0x3000 [ 529.819778][T25593] do_syscall_64+0xd2/0x200 [ 529.819885][T25593] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 529.819931][T25593] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 529.820120][T25593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.820151][T25593] RIP: 0033:0x7ff175a1f6c9 [ 529.820173][T25593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.820196][T25593] RSP: 002b:00007ff17447f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 529.820221][T25593] RAX: ffffffffffffffda RBX: 00007ff175c75fa0 RCX: 00007ff175a1f6c9 [ 529.820237][T25593] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 529.820298][T25593] RBP: 00007ff17447f090 R08: 0000200000000040 R09: 0000000000000000 [ 529.820314][T25593] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.820405][T25593] R13: 00007ff175c76038 R14: 00007ff175c75fa0 R15: 00007ffeb4916ac8 [ 529.820435][T25593] [ 529.820470][T25593] syz.0.7496: vmalloc error: size 44, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 530.085669][T25593] CPU: 0 UID: 0 PID: 25593 Comm: syz.0.7496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 530.085710][T25593] Tainted: [W]=WARN [ 530.085732][T25593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.085748][T25593] Call Trace: [ 530.085757][T25593] [ 530.085768][T25593] __dump_stack+0x1d/0x30 [ 530.085801][T25593] dump_stack_lvl+0xe8/0x140 [ 530.085823][T25593] dump_stack+0x15/0x1b [ 530.085854][T25593] warn_alloc+0x12b/0x1a0 [ 530.085969][T25593] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 530.086041][T25593] ? cred_has_capability+0x210/0x280 [ 530.086110][T25593] ? selinux_capable+0x31/0x40 [ 530.086140][T25593] ? ip_set_sockfn_get+0x10a/0x6b0 [ 530.086167][T25593] vmalloc_noprof+0x82/0xc0 [ 530.086260][T25593] ? ip_set_sockfn_get+0x10a/0x6b0 [ 530.086331][T25593] ip_set_sockfn_get+0x10a/0x6b0 [ 530.086362][T25593] nf_getsockopt+0x190/0x1b0 [ 530.086397][T25593] ip_getsockopt+0x137/0x180 [ 530.086443][T25593] raw_getsockopt+0xb0/0x190 [ 530.086518][T25593] sock_common_getsockopt+0x60/0x70 [ 530.086554][T25593] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 530.086600][T25593] do_sock_getsockopt+0x200/0x240 [ 530.086640][T25593] __x64_sys_getsockopt+0x11e/0x1a0 [ 530.086678][T25593] x64_sys_call+0x2bca/0x3000 [ 530.086818][T25593] do_syscall_64+0xd2/0x200 [ 530.086842][T25593] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 530.086880][T25593] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 530.086924][T25593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.086954][T25593] RIP: 0033:0x7ff175a1f6c9 [ 530.086974][T25593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.086998][T25593] RSP: 002b:00007ff17447f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 530.087023][T25593] RAX: ffffffffffffffda RBX: 00007ff175c75fa0 RCX: 00007ff175a1f6c9 [ 530.087041][T25593] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 530.087055][T25593] RBP: 00007ff17447f090 R08: 0000200000000040 R09: 0000000000000000 [ 530.087068][T25593] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.087080][T25593] R13: 00007ff175c76038 R14: 00007ff175c75fa0 R15: 00007ffeb4916ac8 [ 530.087139][T25593] [ 530.087146][T25593] Mem-Info: [ 530.313748][T25593] active_anon:17544 inactive_anon:14 isolated_anon:0 [ 530.313748][T25593] active_file:24709 inactive_file:2655 isolated_file:0 [ 530.313748][T25593] unevictable:0 dirty:632 writeback:0 [ 530.313748][T25593] slab_reclaimable:3848 slab_unreclaimable:19830 [ 530.313748][T25593] mapped:32045 shmem:11170 pagetables:2904 [ 530.313748][T25593] sec_pagetables:0 bounce:0 [ 530.313748][T25593] kernel_misc_reclaimable:0 [ 530.313748][T25593] free:1810443 free_pcp:13166 free_cma:0 [ 530.359458][T25593] Node 0 active_anon:71452kB inactive_anon:56kB active_file:98836kB inactive_file:10620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129340kB dirty:2528kB writeback:0kB shmem:45840kB kernel_stack:5568kB pagetables:11616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.387458][T25593] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.399929][T25604] loop7: detected capacity change from 0 to 1024 [ 530.417245][T25593] lowmem_reserve[]: 0 2881 7859 7859 [ 530.417294][T25593] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 530.460193][T25593] lowmem_reserve[]: 0 0 4978 4978 [ 530.465316][T25593] Node 0 Normal free:4279020kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75184kB inactive_anon:56kB active_file:98836kB inactive_file:10628kB unevictable:0kB writepending:2532kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:44832kB local_pcp:28316kB free_cma:0kB [ 530.498555][T25593] lowmem_reserve[]: 0 0 0 0 [ 530.503188][T25593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 530.516180][T25593] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 530.532368][T25593] Node 0 Normal: 72*4kB (UME) 46*8kB (UE) 41*16kB (UME) 493*32kB (UME) 435*64kB (UME) 265*128kB (UME) 235*256kB (UME) 99*512kB (UME) 101*1024kB (UME) 89*2048kB (UME) 928*4096kB (UM) = 4276480kB [ 530.551732][T25593] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 530.561086][T25593] 40706 total pagecache pages [ 530.565875][T25593] 15 pages in swap cache [ 530.570176][T25593] Free swap = 124936kB [ 530.574449][T25593] Total swap = 124996kB [ 530.578665][T25593] 2097051 pages RAM [ 530.582546][T25593] 0 pages HighMem/MovableOnly [ 530.587289][T25593] 81086 pages reserved [ 530.609751][T25604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.696606][T25604] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz.7.7499: directory missing '.' [ 530.759793][T25616] loop0: detected capacity change from 0 to 164 [ 530.829852][T24722] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /61/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 530.912478][T25348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.025149][T25629] wg2: entered promiscuous mode [ 531.030156][T25629] wg2: entered allmulticast mode [ 531.041821][T25631] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 531.077016][T25633] __nla_validate_parse: 3 callbacks suppressed [ 531.077030][T25633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 531.130906][T13490] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.186710][T13490] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.242855][T13490] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.301647][T13490] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.361082][T13490] bridge_slave_1: left allmulticast mode [ 531.367305][T13490] bridge_slave_1: left promiscuous mode [ 531.373205][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.381789][T13490] bridge_slave_0: left allmulticast mode [ 531.387689][T13490] bridge_slave_0: left promiscuous mode [ 531.393443][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.496843][T13490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.507158][T13490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.518358][T13490] bond0 (unregistering): Released all slaves [ 531.533443][T25640] lo speed is unknown, defaulting to 1000 [ 531.574222][T13490] tipc: Left network mode [ 531.584905][T25640] lo speed is unknown, defaulting to 1000 [ 531.591798][T25640] lo speed is unknown, defaulting to 1000 [ 531.647824][T25655] FAULT_INJECTION: forcing a failure. [ 531.647824][T25655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.661089][T25655] CPU: 1 UID: 0 PID: 25655 Comm: syz.8.7513 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.661184][T25655] Tainted: [W]=WARN [ 531.661190][T25655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.661202][T25655] Call Trace: [ 531.661218][T25655] [ 531.661225][T25655] __dump_stack+0x1d/0x30 [ 531.661246][T25655] dump_stack_lvl+0xe8/0x140 [ 531.661267][T25655] dump_stack+0x15/0x1b [ 531.661337][T25655] should_fail_ex+0x265/0x280 [ 531.661361][T25655] should_fail+0xb/0x20 [ 531.661376][T25655] should_fail_usercopy+0x1a/0x20 [ 531.661396][T25655] _copy_from_iter+0xd2/0xe80 [ 531.661418][T25655] ? __build_skb_around+0x1ab/0x200 [ 531.661447][T25655] ? __alloc_skb+0x223/0x320 [ 531.661480][T25655] netlink_sendmsg+0x471/0x6b0 [ 531.661502][T25655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.661521][T25655] __sock_sendmsg+0x145/0x180 [ 531.661562][T25655] ____sys_sendmsg+0x31e/0x4e0 [ 531.661679][T25655] ___sys_sendmsg+0x17b/0x1d0 [ 531.661717][T25655] __x64_sys_sendmsg+0xd4/0x160 [ 531.661741][T25655] x64_sys_call+0x191e/0x3000 [ 531.661762][T25655] do_syscall_64+0xd2/0x200 [ 531.661781][T25655] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 531.661868][T25655] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 531.661900][T25655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.661933][T25655] RIP: 0033:0x7fbb1fdcf6c9 [ 531.662022][T25655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.662039][T25655] RSP: 002b:00007fbb1e837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.662056][T25655] RAX: ffffffffffffffda RBX: 00007fbb20025fa0 RCX: 00007fbb1fdcf6c9 [ 531.662068][T25655] RDX: 0000000024004800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 531.662080][T25655] RBP: 00007fbb1e837090 R08: 0000000000000000 R09: 0000000000000000 [ 531.662091][T25655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.662103][T25655] R13: 00007fbb20026038 R14: 00007fbb20025fa0 R15: 00007ffebdddbeb8 [ 531.662156][T25655] [ 531.662235][T13490] hsr_slave_0: left promiscuous mode [ 531.881811][T13490] hsr_slave_1: left promiscuous mode [ 531.893577][T13490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.901155][T13490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.910141][T13490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.917810][T13490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.933724][T13490] veth1_macvtap: left promiscuous mode [ 531.940093][T13490] veth0_macvtap: left promiscuous mode [ 531.946173][T13490] veth1_vlan: left promiscuous mode [ 531.952973][T13490] veth0_vlan: left promiscuous mode [ 532.033780][T25672] hub 5-0:1.0: USB hub found [ 532.049865][T25672] hub 5-0:1.0: 8 ports detected [ 532.106698][T13490] team0 (unregistering): Port device team_slave_1 removed [ 532.118425][T13490] team0 (unregistering): Port device team_slave_0 removed [ 532.198596][T25677] ================================================================== [ 532.206826][T25677] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 532.213544][T25677] [ 532.215898][T25677] write to 0xffff888130839b48 of 136 bytes by task 25640 on cpu 1: [ 532.223840][T25677] __bpf_get_stackid+0x761/0x800 [ 532.228834][T25677] bpf_get_stackid+0xe9/0x120 [ 532.233542][T25677] bpf_get_stackid_raw_tp+0xf6/0x120 [ 532.238877][T25677] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 532.244351][T25677] bpf_trace_run2+0x107/0x1c0 [ 532.249073][T25677] __traceiter_kfree+0x2e/0x50 [ 532.253874][T25677] kfree+0x351/0x400 [ 532.257808][T25677] rtnl_newlink+0x1282/0x12d0 [ 532.262514][T25677] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 532.267493][T25677] netlink_rcv_skb+0x123/0x220 [ 532.272302][T25677] rtnetlink_rcv+0x1c/0x30 [ 532.276749][T25677] netlink_unicast+0x5c0/0x690 [ 532.281557][T25677] netlink_sendmsg+0x58b/0x6b0 [ 532.286345][T25677] __sock_sendmsg+0x145/0x180 [ 532.291058][T25677] __sys_sendto+0x268/0x330 [ 532.295603][T25677] __x64_sys_sendto+0x76/0x90 [ 532.300323][T25677] x64_sys_call+0x2d14/0x3000 [ 532.305036][T25677] do_syscall_64+0xd2/0x200 [ 532.309561][T25677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.315484][T25677] [ 532.317826][T25677] read to 0xffff888130839b80 of 8 bytes by task 25677 on cpu 0: [ 532.325466][T25677] bcmp+0x23/0x90 [ 532.329120][T25677] __bpf_get_stackid+0x371/0x800 [ 532.334076][T25677] bpf_get_stackid+0xe9/0x120 [ 532.338771][T25677] bpf_get_stackid_raw_tp+0xf6/0x120 [ 532.344084][T25677] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 532.349657][T25677] bpf_trace_run2+0x107/0x1c0 [ 532.354356][T25677] __traceiter_kfree+0x2e/0x50 [ 532.359130][T25677] kfree+0x351/0x400 [ 532.363040][T25677] ___sys_recvmsg+0x135/0x370 [ 532.367723][T25677] do_recvmmsg+0x1ef/0x540 [ 532.372160][T25677] __x64_sys_recvmmsg+0xe5/0x170 [ 532.377110][T25677] x64_sys_call+0x27aa/0x3000 [ 532.381808][T25677] do_syscall_64+0xd2/0x200 [ 532.388152][T25677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.394156][T25677] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 532.396496][T25677] value changed: 0xffffffff844e3f65 -> 0xffffffff8475a5c3 [ 532.403631][T25677] [ 532.405964][T25677] Reported by Kernel Concurrency Sanitizer on: [ 532.412133][T25677] CPU: 0 UID: 0 PID: 25677 Comm: syz.0.7515 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 532.423785][T25677] Tainted: [W]=WARN [ 532.427679][T25677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.437835][T25677] ================================================================== [ 533.002058][T13482] bond0 (unregistering): Released all slaves [ 533.228604][T13482] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.290262][T13482] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.346473][T13482] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.412941][T13482] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.493370][T13482] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.517945][T13482] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.565753][T13482] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.622646][T13482] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.674547][T13482] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.699250][T13482] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.765336][T13482] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.822672][T13482] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.892475][T13482] bridge_slave_1: left allmulticast mode [ 533.898279][T13482] bridge_slave_1: left promiscuous mode [ 533.903990][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.911790][T13482] bridge_slave_0: left promiscuous mode [ 533.917912][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.927503][T13482] bridge_slave_1: left allmulticast mode [ 533.933299][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.941218][T13482] bridge_slave_0: left allmulticast mode [ 533.946927][T13482] bridge_slave_0: left promiscuous mode [ 533.952582][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.960876][T13482] bridge_slave_1: left allmulticast mode [ 533.966554][T13482] bridge_slave_1: left promiscuous mode [ 533.972215][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.980101][T13482] bridge_slave_0: left allmulticast mode [ 533.985788][T13482] bridge_slave_0: left promiscuous mode [ 533.991484][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.222603][T13482] bond1 (unregistering): Released all slaves [ 534.261853][T13482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.271782][T13482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.281587][T13482] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 534.290900][T13482] bond0 (unregistering): Released all slaves [ 534.394876][T13482] tipc: Left network mode [ 534.399488][T13482] tipc: Left network mode [ 534.406370][T13482] IPVS: stopping backup sync thread 23567 ... [ 534.465568][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.473065][T13482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.482458][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.489925][T13482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.497460][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.504907][T13482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.516587][T13482] veth1_macvtap: left promiscuous mode [ 534.522180][T13482] veth0_macvtap: left promiscuous mode [ 534.528324][T13482] veth1_macvtap: left promiscuous mode [ 534.534221][T13482] veth0_macvtap: left promiscuous mode [ 534.539906][T13482] veth1_vlan: left promiscuous mode [ 534.545393][T13482] veth0_vlan: left promiscuous mode [ 534.551273][T13482] veth1_macvtap: left promiscuous mode [ 534.556754][T13482] veth0_macvtap: left promiscuous mode [ 534.562414][T13482] veth1_vlan: left promiscuous mode [ 534.567699][T13482] veth0_vlan: left promiscuous mode [ 534.675554][T13482] team0 (unregistering): Port device team_slave_1 removed [ 534.685380][T13482] team0 (unregistering): Port device team_slave_0 removed [ 534.715581][T13482] pim6reg (unregistering): left allmulticast mode [ 534.741724][T13482] team0 (unregistering): Port device team_slave_1 removed [ 534.751813][T13482] team0 (unregistering): Port device team_slave_0 removed [ 534.805485][T13482] team0 (unregistering): Port device team_slave_1 removed [ 534.814916][T13482] team0 (unregistering): Port device team_slave_0 removed [ 535.470501][T13482] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.507979][T13482] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.564698][T13482] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.603054][T13482] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.701052][T13482] bridge_slave_1: left allmulticast mode [ 535.706769][T13482] bridge_slave_1: left promiscuous mode [ 535.712442][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.720141][T13482] bridge_slave_0: left allmulticast mode [ 535.725808][T13482] bridge_slave_0: left promiscuous mode [ 535.731519][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.831194][T13482] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 535.839298][T13482] bridge2 (unregistering): left promiscuous mode [ 535.870013][T13482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.880025][T13482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.889578][T13482] bond0 (unregistering): Released all slaves [ 535.898172][T13482] bond1 (unregistering): Released all slaves [ 535.906745][ T3390] infiniband syb2: ib_query_port failed (-19) [ 535.965405][T13482] tipc: Disabling bearer [ 535.970650][T13482] tipc: Left network mode [ 535.992109][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.999544][T13482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.007028][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.014533][T13482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.024211][T13482] veth1_macvtap: left promiscuous mode [ 536.029727][T13482] veth0_macvtap: left promiscuous mode [ 536.091005][T24341] lo speed is unknown, defaulting to 1000 [ 536.096845][T24341] infiniband syz2: ib_query_port failed (-19)