last executing test programs: 31.830780708s ago: executing program 3 (id=529): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x0, 0xa000, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 31.746682639s ago: executing program 3 (id=531): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") (async) r0 = socket(0xa, 0x2, 0xffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x11000002) 31.74656433s ago: executing program 3 (id=532): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 1) 31.505782855s ago: executing program 3 (id=534): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000003c0)={&(0x7f0000000280)=""/208, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xf}, {0xfff2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x34}}, 0x14000000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) preadv(r15, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x2000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 30.179589261s ago: executing program 3 (id=549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) (fail_nth: 1) 29.410674097s ago: executing program 3 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x1, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 29.406659187s ago: executing program 32 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x1, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 11.752628063s ago: executing program 2 (id=816): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 11.752020783s ago: executing program 2 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="027d85e6679b00004a1be92c00080000000c00000000eb69e748d76bdbe9fdda453c73eee4dca33c4582ab7166de000b515fe583c0afbd72f882d3e4460cdf44d98ee6f3f69590f4490f7c2204ee79effcf210df1b94ff62dea0bd315d25860ddd631131d233c8ad0868dfc14b767e3007dbf5ea3312daec0e220d1ea1ae1af9be75a76a6d09f28cd29d48fc9250d90e2788c15fbf357a411ba6633026d88120708fc2f455f8bf8357a7a5db19fb1decdac6c4c8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 11.703813014s ago: executing program 2 (id=820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b", 0x55) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7f) 11.670117975s ago: executing program 2 (id=821): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000003c0)={&(0x7f0000000280)=""/208, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xf}, {0xfff2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x34}}, 0x14000000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) preadv(r15, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x2000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 10.633327016s ago: executing program 2 (id=849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e20000000000000001000000000000000300"/376], 0x178) close(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 10.452225239s ago: executing program 2 (id=846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x1, 0x0, 0xff, 0x0, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x32}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) (fail_nth: 3) 10.41007864s ago: executing program 33 (id=846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x1, 0x0, 0xff, 0x0, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x32}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) (fail_nth: 3) 8.794188473s ago: executing program 5 (id=870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8.734553354s ago: executing program 5 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="027d85e6679b00004a1be92c00080000000c00000000eb69e748d76bdbe9fdda453c73eee4dca33c4582ab7166de000b515fe583c0afbd72f882d3e4460cdf44d98ee6f3f69590f4490f7c2204ee79effcf210df1b94ff62dea0bd315d25860ddd631131d233c8ad0868dfc14b767e3007dbf5ea3312daec0e220d1ea1ae1af9be75a76a6d09f28cd29d48fc9250d90e2788c15fbf357a411ba6633026d88120708fc2f455f8bf8357a7a5db19fb1decdac6c4c8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 8.697453725s ago: executing program 5 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 8.679023355s ago: executing program 5 (id=875): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000003c0)={&(0x7f0000000280)=""/208, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xf}, {0xfff2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x34}}, 0x14000000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.721678814s ago: executing program 5 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000100000000000000000000000000000000043852c7242ad9b8a97d68c6270edae50f5f2994a5440ac5df35bacae21ea6363fdaafd8c3c756735539af6ff37bbfd538e5240bd61487fa25c554daa47b66a348d26aa0be21ff0a83f42fbe12f98f92f34353663fb5180573e8f714d696b5396eb561ba2f007867b316a1140f4d8c2a9a4d5af5e3b7570d8bffa667de674ba"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x7, 0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) r9 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000000180)={0x6, r9, 0x15, {0x6, 0x3}, 0x7f}, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7.274631334s ago: executing program 5 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 7.274399903s ago: executing program 34 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.738656125s ago: executing program 1 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a050000400000000000000a0000010900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x440c4) 4.713175295s ago: executing program 1 (id=934): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffffd}, 0x18) pipe2(0x0, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x1, 0x18) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.712786845s ago: executing program 4 (id=935): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000680)="f5df123d435754be234534e9acb554f1fa0479fa5619f5ed53ee8602154cad1cf767d742629c48253c11dea6c199fee31c01d15e1edd0ae40c0e6adea75f83e049", 0x41}], 0x1, &(0x7f00000019c0)=ANY=[], 0x108}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)='V]', 0x2}], 0x1}}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 4.669462276s ago: executing program 6 (id=936): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 3.306719544s ago: executing program 7 (id=940): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xe5}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.99655827s ago: executing program 6 (id=943): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x30, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@mcast1, @private0, @remote, 0x0, 0x0, 0x5, 0x0, 0x4000000000000009, 0x10200}) connect$can_bcm(r0, &(0x7f0000000040), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r6 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r6) sendmsg$NFT_BATCH(r5, 0x0, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_getevents(r7, 0x4, 0x0, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104fcffffff80000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r11, @ANYBLOB="84e1129a72cdf348c052fa3f63e8c1643bedb8b72246a01314dbe036c7a829ed3a04bfcda97efe862097787a5602c333f606053d1191778c6cf3f6410f4cb0959630085115df5baf96ad3d6a669938901285e36db8dc1352b238fe768bd311f5f11a9204e4348151bec965851b3f2e3f5b74899137"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.526718119s ago: executing program 6 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a050000400000000000000a0000010900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x440c4) 2.51093701s ago: executing program 6 (id=947): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000003c0)={&(0x7f0000000280)=""/208, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xf}, {0xfff2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x34}}, 0x14000000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.414382331s ago: executing program 7 (id=949): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x6fcf, 0xf8, "b72ca7a26413ef6ca5a76bf8224be84e070856", 0x1, 0x3}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x0, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4ed", 0xc5}], 0x1}, 0x8810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0xf8) 2.398711972s ago: executing program 0 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000000000000009000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r2, @ANYRES64=r3, @ANYBLOB="00000000010000"], 0x48}}, 0x0) 2.379643922s ago: executing program 0 (id=951): mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x2000003) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0x0) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x12) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r5, 0x0, 0x9, 0x8800000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x4000081, 0x0, 0x0) 2.313347914s ago: executing program 1 (id=952): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") 2.154508107s ago: executing program 0 (id=953): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000003c0)={&(0x7f0000000280)=""/208, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xf}, {0xfff2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x34}}, 0x14000000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.648690777s ago: executing program 4 (id=954): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 1.398636292s ago: executing program 7 (id=955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000800)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff1d) perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x80, 0x8, 0x40, 0x8, 0x0, 0x0, 0x5, 0x800, 0x7ff288102092df04, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x81, 0x20000000000001, 0x3, 0x8, 0x2a0, 0x1, 0xc0, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x1000000004, 0xffffffffffffffff, 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2102) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 1.279162405s ago: executing program 0 (id=956): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x101402) write$evdev(r1, &(0x7f0000000040)=[{{0x0, 0xea60}, 0x0, 0x2, 0x4}], 0x18) 1.277947635s ago: executing program 4 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a050000400000000000000a0000010900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x440c4) 1.240877125s ago: executing program 6 (id=958): unshare(0x12000100) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffb}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0xfffffeed) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x5e, 0x22, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x0, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x0, 0x7, 0xc25}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x7fffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x44000) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) 1.179162326s ago: executing program 4 (id=959): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffeea) r1 = syz_open_dev$vcsn(&(0x7f0000000600), 0x1, 0x8c00) preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/66, 0x42}], 0x1, 0x10001, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nomblk_io_submit}, {@debug}, {@errors_continue}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@jqfmt_vfsv1}, {@acl}, {@jqfmt_vfsv1}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000840)='ext4_allocate_blocks\x00', r3, 0x0, 0x4}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) unshare(0x2c040000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 970.225251ms ago: executing program 4 (id=960): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000680)="c4506ee0e338209d46b2c943649f04a05f8a5ee3c1235272e5dd3fea7a16edce5995b5d2bf0577f9b4911b7ce412246ab265e1c6ab9cd724dd1044c5d8d5ac171827ef0e00516aa2e7a0e1580491267e2ccc92db6dc995b3d74f18bd6a31efd4c1e70da92f48dede22940d4e5d55397e0924fbd1e22034ce", 0x78}], 0x1, 0x0, 0x30, 0x4085}], 0x1, 0x40440c1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffe3a, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000958cde77a0ba90f9b7b1"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r4, 0x917, 0x0, 0x4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf2505000000080019e07f00002308000c000400000005001300020000000c0010000f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x84804}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001780)={0x0, r8, "5b5bf151774bae82239db0592c237da4c97fec572f922ec1d18d5802c110ca91866868c19715741e02941d172b9d119eb355eb050f0db66f840503e26fa90227cb0b564d88103662f5524d48b2e033fa8f220c15f641f4c607ebf14ed41862990143aeb0856e584fc307f2ef3f6625b17bd48f2a450b3173db3b997cf66b1785ca7fcf12e45ef26c1401aa91a91b745ba3fb6130818e86c82e584e9786574916ac13a26e47d7273300fa02c21fff6e4b7ddc6e12837de1b4ed7a4f1827271ad141004ae42a73698ac8310531831fd9f069cb094baef3e13c1a69e7cabf6236911b4a2b5a3c49328d2d27709c67c5458907e7062be1c931425336682cf14f8a4c", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f00000005c0)={r8, 0x4}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f00000019c0)={r8, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x8, 0xa, 0x100000) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0x4, 0x6, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 405.811152ms ago: executing program 1 (id=961): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r7}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r7, &(0x7f0000000100)) r8 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r7, r8) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, r7, &(0x7f00000001c0)) socket$can_j1939(0x1d, 0x2, 0x7) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, r7, &(0x7f0000000040)={0x9, 0x1, 0x1, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r4}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) 404.624672ms ago: executing program 0 (id=962): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000003c0)={'wg2\x00', 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r6 = syz_clone(0x20b44040, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getattr(r6, &(0x7f0000000100)={0x38}, 0x38, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0xc000, 0x0) setreuid(0xee01, 0x0) 404.035182ms ago: executing program 6 (id=963): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffffd}, 0x18) pipe2(0x0, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x1, 0x18) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 359.337763ms ago: executing program 35 (id=963): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffffd}, 0x18) pipe2(0x0, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x1, 0x18) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 328.548544ms ago: executing program 7 (id=965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x20, 0x40, 0x7f, 0x7fff, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x67, 0x0, 0xd, 0x29, 0x0, @private=0xa010101, @broadcast, {[@ra={0x94, 0x4}, @noop, @noop, @rr={0x7, 0x7, 0x80, [@remote]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigqueueinfo(0x0, 0x33, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r4}, 0x18) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket(0x25, 0x5, 0x4) r7 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x80, &(0x7f00000000c0)=@nl=@unspec}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x4, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) 327.324554ms ago: executing program 1 (id=966): r0 = io_uring_setup(0x7c01, &(0x7f0000000000)={0x0, 0x947e, 0x10, 0x1, 0x68}) r1 = syz_io_uring_setup(0x72da, &(0x7f0000000100)={0x0, 0xcb8b, 0x10000, 0x4, 0x400208, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x47f8, 0x0, 0x64, 0x0, 0x0) 258.098485ms ago: executing program 1 (id=967): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000003c0)={&(0x7f0000000280)=""/208, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltclass={0x34, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xf}, {0xfff2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x34}}, 0x14000000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 161.328217ms ago: executing program 7 (id=968): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 66.380009ms ago: executing program 4 (id=969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000380)="aefddadd640303005a90f57f703aeff0f64e9fdc5770aa50c4ee07962c220af1dab4515add34f12e9dd82acd8d79", 0x2e}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETFEATURES(r8, 0x5452, &(0x7f00000013c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012dbd7000fcdbdf25010000000000000007410000004c00180000000473797a3000000000000000000000000000000000b2cfd78d6de8ca38954c924d9e00"/98], 0x68}}, 0x48080) syz_io_uring_setup(0x1308, &(0x7f00000006c0)={0x0, 0xf759, 0x1000, 0x1, 0x1bf}, &(0x7f0000000300)=0x0, &(0x7f0000000680)) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r12, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r13 = syz_open_pts(r12, 0x0) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0xa, "aa32b73986bbee6bd231334cbfa0b758261a93"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 18.24267ms ago: executing program 0 (id=970): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r9, 0x10, 0x6, 0x10001) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000008181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x14, r11, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) 0s ago: executing program 7 (id=971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x1, 0xf3}]}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @broadcast}, {0x306, @local}, 0x2c, {0x2, 0x4e22, @empty}}) r3 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t tainted syzkaller #0 PREEMPT(voluntary) [ 75.464879][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.464887][ T5551] Call Trace: [ 75.464892][ T5551] [ 75.464965][ T5551] __dump_stack+0x1d/0x30 [ 75.464978][ T5551] dump_stack_lvl+0xe8/0x140 [ 75.464989][ T5551] dump_stack+0x15/0x1b [ 75.464998][ T5551] should_fail_ex+0x265/0x280 [ 75.465085][ T5551] should_fail+0xb/0x20 [ 75.465096][ T5551] should_fail_usercopy+0x1a/0x20 [ 75.465111][ T5551] strncpy_from_user+0x25/0x230 [ 75.465192][ T5551] ? put_dec_trunc8+0x119/0x140 [ 75.465228][ T5551] strncpy_from_user_nofault+0x68/0xf0 [ 75.465241][ T5551] bpf_probe_read_compat_str+0xb4/0x130 [ 75.465260][ T5551] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 75.465370][ T5551] bpf_trace_run4+0x114/0x1d0 [ 75.465386][ T5551] __traceiter_sched_switch+0x3f/0x60 [ 75.465417][ T5551] __schedule+0xa17/0xb30 [ 75.465431][ T5551] ? audit_log_d_path+0x8d/0x150 [ 75.465448][ T5551] __cond_resched+0x4e/0x90 [ 75.465516][ T5551] __kmalloc_cache_noprof+0x42/0x320 [ 75.465533][ T5551] audit_log_d_path+0x8d/0x150 [ 75.465599][ T5551] audit_log_d_path_exe+0x42/0x70 [ 75.465616][ T5551] audit_log_task+0x1e9/0x250 [ 75.465631][ T5551] audit_seccomp+0x61/0x100 [ 75.465645][ T5551] ? __seccomp_filter+0x68c/0x10d0 [ 75.465698][ T5551] __seccomp_filter+0x69d/0x10d0 [ 75.465710][ T5551] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 75.465723][ T5551] ? perf_cgroup_switch+0x10c/0x480 [ 75.465767][ T5551] __secure_computing+0x82/0x150 [ 75.465779][ T5551] syscall_trace_enter+0xcf/0x1e0 [ 75.465793][ T5551] do_syscall_64+0xac/0x200 [ 75.465890][ T5551] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.465903][ T5551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.465919][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.465931][ T5551] RIP: 0033:0x7f700594eec9 [ 75.465940][ T5551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.466000][ T5551] RSP: 002b:00007f70043b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 75.466011][ T5551] RAX: ffffffffffffffda RBX: 00007f7005ba5fa0 RCX: 00007f700594eec9 [ 75.466019][ T5551] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 75.466026][ T5551] RBP: 00007f70043b7090 R08: 0000200000000000 R09: 0000000000000000 [ 75.466032][ T5551] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 75.466040][ T5551] R13: 00007f7005ba6038 R14: 00007f7005ba5fa0 R15: 00007ffd554cb878 [ 75.466073][ T5551] [ 75.831032][ T5555] 9pnet_fd: Insufficient options for proto=fd [ 75.935768][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 75.935783][ T29] audit: type=1326 audit(1758641614.226:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f700594d8dc code=0x7ffc0000 [ 75.965408][ T29] audit: type=1326 audit(1758641614.226:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f700594d97f code=0x7ffc0000 [ 76.021504][ T5565] loop5: detected capacity change from 0 to 4096 [ 76.033174][ T5565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.044837][ T29] audit: type=1326 audit(1758641614.226:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f700594db2a code=0x7ffc0000 [ 76.068193][ T29] audit: type=1326 audit(1758641614.226:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 76.091721][ T29] audit: type=1326 audit(1758641614.256:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 76.115048][ T29] audit: type=1326 audit(1758641614.256:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 76.138346][ T29] audit: type=1326 audit(1758641614.256:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 76.161832][ T29] audit: type=1326 audit(1758641614.256:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 76.185238][ T29] audit: type=1326 audit(1758641614.256:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 76.208692][ T29] audit: type=1326 audit(1758641614.256:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.5.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 76.271800][ T5565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.498561][ T5598] veth1_macvtap: left promiscuous mode [ 76.507647][ T5598] macsec0: entered promiscuous mode [ 76.512962][ T5598] macsec0: entered allmulticast mode [ 76.539550][ T5596] veth1_macvtap: entered promiscuous mode [ 76.545472][ T5596] veth1_macvtap: entered allmulticast mode [ 76.552140][ T5596] macsec0: left promiscuous mode [ 76.557231][ T5596] macsec0: left allmulticast mode [ 76.562345][ T5596] veth1_macvtap: left allmulticast mode [ 76.574741][ T5596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5596 comm=syz.0.627 [ 76.715048][ T5612] vhci_hcd: invalid port number 96 [ 76.720198][ T5612] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 76.765749][ T5366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.788380][ T5620] FAULT_INJECTION: forcing a failure. [ 76.788380][ T5620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 76.801709][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz.5.636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.801773][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.801785][ T5620] Call Trace: [ 76.801792][ T5620] [ 76.801801][ T5620] __dump_stack+0x1d/0x30 [ 76.801822][ T5620] dump_stack_lvl+0xe8/0x140 [ 76.801839][ T5620] dump_stack+0x15/0x1b [ 76.801929][ T5620] should_fail_ex+0x265/0x280 [ 76.802003][ T5620] should_fail_alloc_page+0xf2/0x100 [ 76.802028][ T5620] __alloc_frozen_pages_noprof+0xff/0x360 [ 76.802116][ T5620] alloc_pages_mpol+0xb3/0x250 [ 76.802294][ T5620] vma_alloc_folio_noprof+0x1aa/0x300 [ 76.802322][ T5620] handle_mm_fault+0xec2/0x2c20 [ 76.802348][ T5620] do_user_addr_fault+0x636/0x1090 [ 76.802412][ T5620] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 76.802445][ T5620] exc_page_fault+0x62/0xa0 [ 76.802470][ T5620] asm_exc_page_fault+0x26/0x30 [ 76.802523][ T5620] RIP: 0033:0x7f7d384b0c03 [ 76.802537][ T5620] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 76.802557][ T5620] RSP: 002b:00007f7d370564a0 EFLAGS: 00010206 [ 76.802573][ T5620] RAX: 0000000000009000 RBX: 00007f7d37056540 RCX: 00007f7d2ec37000 [ 76.802584][ T5620] RDX: 00007f7d370566e0 RSI: 0000000000000003 RDI: 00007f7d370565e0 [ 76.802595][ T5620] RBP: 0000000000000035 R08: 000000000000000a R09: 00000000000003e8 [ 76.802651][ T5620] R10: 00000000000003ea R11: 00007f7d37056540 R12: 0000000000000001 [ 76.802664][ T5620] R13: 00007f7d3868db80 R14: 00000000000000ff R15: 00007f7d370565e0 [ 76.802682][ T5620] [ 76.820386][ T5623] loop2: detected capacity change from 0 to 1024 [ 76.822513][ T5620] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.827608][ T5623] EXT4-fs: Ignoring removed orlov option [ 76.833132][ T5620] loop5: detected capacity change from 0 to 164 [ 76.865963][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.895779][ T5630] FAULT_INJECTION: forcing a failure. [ 76.895779][ T5630] name failslab, interval 1, probability 0, space 0, times 0 [ 76.940205][ T5620] ISOFS: unable to read i-node block [ 76.948218][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.948244][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.948256][ T5630] Call Trace: [ 76.948263][ T5630] [ 76.948324][ T5630] __dump_stack+0x1d/0x30 [ 76.948345][ T5630] dump_stack_lvl+0xe8/0x140 [ 76.948364][ T5630] dump_stack+0x15/0x1b [ 76.948380][ T5630] should_fail_ex+0x265/0x280 [ 76.948468][ T5630] should_failslab+0x8c/0xb0 [ 76.948542][ T5630] kmem_cache_alloc_noprof+0x50/0x310 [ 76.948568][ T5630] ? dst_alloc+0xbd/0x100 [ 76.948593][ T5630] dst_alloc+0xbd/0x100 [ 76.948732][ T5630] rt_dst_clone+0x3b/0x2e0 [ 76.948763][ T5630] NF_HOOK+0x65/0x200 [ 76.948841][ T5630] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 76.948871][ T5630] ip_mc_output+0x139/0x340 [ 76.948923][ T5630] ? __pfx_dst_output+0x10/0x10 [ 76.948951][ T5630] ip_send_skb+0x151/0x160 [ 76.948979][ T5630] udp_send_skb+0x6e3/0xa40 [ 76.949042][ T5630] udp_sendmsg+0x1050/0x13c0 [ 76.949070][ T5630] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 76.949112][ T5630] ? __pfx_udp_sendmsg+0x10/0x10 [ 76.949138][ T5630] inet_sendmsg+0xac/0xd0 [ 76.949206][ T5630] __sock_sendmsg+0x102/0x180 [ 76.949237][ T5630] ____sys_sendmsg+0x345/0x4e0 [ 76.949318][ T5630] ___sys_sendmsg+0x17b/0x1d0 [ 76.949355][ T5630] __sys_sendmmsg+0x178/0x300 [ 76.949389][ T5630] __x64_sys_sendmmsg+0x57/0x70 [ 76.949466][ T5630] x64_sys_call+0x1c4a/0x2ff0 [ 76.949548][ T5630] do_syscall_64+0xd2/0x200 [ 76.949597][ T5630] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.949621][ T5630] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.949691][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.949713][ T5630] RIP: 0033:0x7f99ebaaeec9 [ 76.949792][ T5630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.949862][ T5630] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.949891][ T5630] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 76.949904][ T5630] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 76.949916][ T5630] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 76.949928][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.949940][ T5630] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 76.949958][ T5630] [ 77.264541][ T5620] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 77.275450][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.325614][ T5639] FAULT_INJECTION: forcing a failure. [ 77.325614][ T5639] name failslab, interval 1, probability 0, space 0, times 0 [ 77.338465][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.5.643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.338546][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.338558][ T5639] Call Trace: [ 77.338564][ T5639] [ 77.338571][ T5639] __dump_stack+0x1d/0x30 [ 77.338644][ T5639] dump_stack_lvl+0xe8/0x140 [ 77.338665][ T5639] dump_stack+0x15/0x1b [ 77.338682][ T5639] should_fail_ex+0x265/0x280 [ 77.338748][ T5639] should_failslab+0x8c/0xb0 [ 77.338774][ T5639] kmem_cache_alloc_noprof+0x50/0x310 [ 77.338882][ T5639] ? audit_log_start+0x365/0x6c0 [ 77.338914][ T5639] audit_log_start+0x365/0x6c0 [ 77.339015][ T5639] audit_seccomp+0x48/0x100 [ 77.339040][ T5639] ? __seccomp_filter+0x68c/0x10d0 [ 77.339062][ T5639] __seccomp_filter+0x69d/0x10d0 [ 77.339085][ T5639] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.339186][ T5639] ? vfs_write+0x7e8/0x960 [ 77.339203][ T5639] ? kmem_cache_free+0xdf/0x300 [ 77.339248][ T5639] __secure_computing+0x82/0x150 [ 77.339265][ T5639] syscall_trace_enter+0xcf/0x1e0 [ 77.339285][ T5639] do_syscall_64+0xac/0x200 [ 77.339310][ T5639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.339401][ T5639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.339425][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.339442][ T5639] RIP: 0033:0x7f7d385eeec9 [ 77.339455][ T5639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.339469][ T5639] RSP: 002b:00007f7d37057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 77.339531][ T5639] RAX: ffffffffffffffda RBX: 00007f7d38845fa0 RCX: 00007f7d385eeec9 [ 77.339542][ T5639] RDX: 0000000000000034 RSI: 0000200000000040 RDI: 0000000000000000 [ 77.339552][ T5639] RBP: 00007f7d37057090 R08: 0000000000003000 R09: 0000000000000000 [ 77.339562][ T5639] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 77.339572][ T5639] R13: 00007f7d38846038 R14: 00007f7d38845fa0 R15: 00007ffef430c588 [ 77.339588][ T5639] [ 77.554450][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.574840][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.592076][ T5649] syzkaller1: entered promiscuous mode [ 77.597800][ T5649] syzkaller1: entered allmulticast mode [ 77.607390][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.625400][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.625545][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.625659][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.625776][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.625913][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.626075][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.626169][ T5643] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 77.711743][ T5663] netlink: 'syz.0.651': attribute type 6 has an invalid length. [ 77.793032][ T5676] FAULT_INJECTION: forcing a failure. [ 77.793032][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 77.805781][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz.0.655 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.805807][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.805817][ T5676] Call Trace: [ 77.805824][ T5676] [ 77.805830][ T5676] __dump_stack+0x1d/0x30 [ 77.805893][ T5676] dump_stack_lvl+0xe8/0x140 [ 77.805988][ T5676] dump_stack+0x15/0x1b [ 77.806023][ T5676] should_fail_ex+0x265/0x280 [ 77.806044][ T5676] should_failslab+0x8c/0xb0 [ 77.806068][ T5676] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 77.806177][ T5676] ? kstrdup_const+0x3e/0x50 [ 77.806203][ T5676] kstrdup+0x3e/0xd0 [ 77.806224][ T5676] kstrdup_const+0x3e/0x50 [ 77.806311][ T5676] alloc_vfsmnt+0xe7/0x300 [ 77.806380][ T5676] clone_mnt+0x46/0x630 [ 77.806411][ T5676] copy_tree+0x2cd/0x8c0 [ 77.806435][ T5676] copy_mnt_ns+0x120/0x5c0 [ 77.806457][ T5676] ? kmem_cache_alloc_noprof+0x220/0x310 [ 77.806479][ T5676] ? create_new_namespaces+0x3c/0x3d0 [ 77.806556][ T5676] create_new_namespaces+0x83/0x3d0 [ 77.806587][ T5676] unshare_nsproxy_namespaces+0xe8/0x120 [ 77.806617][ T5676] ksys_unshare+0x3d0/0x6d0 [ 77.806713][ T5676] ? ksys_write+0x192/0x1a0 [ 77.806763][ T5676] __x64_sys_unshare+0x1f/0x30 [ 77.806790][ T5676] x64_sys_call+0x2911/0x2ff0 [ 77.806811][ T5676] do_syscall_64+0xd2/0x200 [ 77.806855][ T5676] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.806884][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.806905][ T5676] RIP: 0033:0x7f99ebaaeec9 [ 77.806926][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.806943][ T5676] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 77.806963][ T5676] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 77.806987][ T5676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 77.806998][ T5676] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 77.807009][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.807020][ T5676] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 77.807070][ T5676] [ 78.088722][ T5687] FAULT_INJECTION: forcing a failure. [ 78.088722][ T5687] name failslab, interval 1, probability 0, space 0, times 0 [ 78.101444][ T5687] CPU: 0 UID: 0 PID: 5687 Comm: syz.0.660 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.101469][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.101479][ T5687] Call Trace: [ 78.101485][ T5687] [ 78.101492][ T5687] __dump_stack+0x1d/0x30 [ 78.101512][ T5687] dump_stack_lvl+0xe8/0x140 [ 78.101632][ T5687] dump_stack+0x15/0x1b [ 78.101710][ T5687] should_fail_ex+0x265/0x280 [ 78.101731][ T5687] ? sctp_add_bind_addr+0x71/0x1e0 [ 78.101756][ T5687] should_failslab+0x8c/0xb0 [ 78.101811][ T5682] loop2: detected capacity change from 0 to 512 [ 78.101840][ T5687] __kmalloc_cache_noprof+0x4c/0x320 [ 78.101866][ T5687] sctp_add_bind_addr+0x71/0x1e0 [ 78.101918][ T5687] sctp_copy_local_addr_list+0x199/0x220 [ 78.102017][ T5687] sctp_copy_one_addr+0x7f/0x280 [ 78.102044][ T5687] sctp_bind_addr_copy+0x79/0x290 [ 78.102081][ T5687] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 78.102109][ T5687] sctp_connect_new_asoc+0x1c3/0x3a0 [ 78.102155][ T5687] sctp_sendmsg+0xf10/0x18d0 [ 78.102176][ T5687] ? selinux_socket_sendmsg+0x91/0x1b0 [ 78.102207][ T5687] ? __pfx_sctp_sendmsg+0x10/0x10 [ 78.102227][ T5687] inet_sendmsg+0xc2/0xd0 [ 78.102320][ T5687] __sock_sendmsg+0x102/0x180 [ 78.102351][ T5687] ____sys_sendmsg+0x345/0x4e0 [ 78.102378][ T5687] ___sys_sendmsg+0x17b/0x1d0 [ 78.102448][ T5687] __sys_sendmmsg+0x178/0x300 [ 78.102482][ T5687] __x64_sys_sendmmsg+0x57/0x70 [ 78.102507][ T5687] x64_sys_call+0x1c4a/0x2ff0 [ 78.102592][ T5687] do_syscall_64+0xd2/0x200 [ 78.102683][ T5687] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.102706][ T5687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.102778][ T5687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.102799][ T5687] RIP: 0033:0x7f99ebaaeec9 [ 78.102814][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.102831][ T5687] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.102915][ T5687] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 78.102927][ T5687] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 78.102939][ T5687] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 78.102951][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.102963][ T5687] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 78.102982][ T5687] [ 78.383392][ T5682] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 78.391780][ T5682] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.536311][ T5682] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.658: corrupted inode contents [ 78.548607][ T5682] EXT4-fs (loop2): Remounting filesystem read-only [ 78.557005][ T5682] EXT4-fs (loop2): 1 truncate cleaned up [ 78.587762][ T5697] loop1: detected capacity change from 0 to 1024 [ 78.595077][ T5697] EXT4-fs: Ignoring removed bh option [ 78.600603][ T5697] EXT4-fs: inline encryption not supported [ 78.607667][ T5697] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.618770][ T5697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 78.628350][ T5697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.637077][ T5697] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.663: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.652720][ T5697] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.663: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.667835][ T5697] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.663: Failed to acquire dquot type 0 [ 78.679360][ T5697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 78.689728][ T5697] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.663: mark_inode_dirty error [ 78.701245][ T5697] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 78.712538][ T5697] EXT4-fs (loop1): 1 orphan inode deleted [ 79.677234][ T4146] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.687909][ T4146] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.700114][ T4146] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.711400][ T4146] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 79.725855][ T4146] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:33: Failed to release dquot type 0 [ 79.738296][ T5682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.738365][ T5697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.765472][ T5682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.790736][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.816686][ T5705] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 79.900886][ T5712] FAULT_INJECTION: forcing a failure. [ 79.900886][ T5712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.914186][ T5712] CPU: 0 UID: 0 PID: 5712 Comm: syz.1.669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.914212][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.914239][ T5712] Call Trace: [ 79.914245][ T5712] [ 79.914253][ T5712] __dump_stack+0x1d/0x30 [ 79.914274][ T5712] dump_stack_lvl+0xe8/0x140 [ 79.914291][ T5712] dump_stack+0x15/0x1b [ 79.914308][ T5712] should_fail_ex+0x265/0x280 [ 79.914347][ T5712] should_fail+0xb/0x20 [ 79.914367][ T5712] should_fail_usercopy+0x1a/0x20 [ 79.914472][ T5712] _copy_to_user+0x20/0xa0 [ 79.914501][ T5712] copy_siginfo_to_user+0x22/0xb0 [ 79.914524][ T5712] x64_setup_rt_frame+0x2b5/0x580 [ 79.914544][ T5712] arch_do_signal_or_restart+0x27c/0x480 [ 79.914601][ T5712] exit_to_user_mode_loop+0x7a/0x100 [ 79.914689][ T5712] do_syscall_64+0x1d6/0x200 [ 79.914715][ T5712] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.914735][ T5712] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.914797][ T5712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.914820][ T5712] RIP: 0033:0x7fd207a2eec7 [ 79.914837][ T5712] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 79.914854][ T5712] RSP: 002b:00007fd20648f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.914874][ T5712] RAX: 00000000000000ca RBX: 00007fd207c85fa0 RCX: 00007fd207a2eec9 [ 79.914885][ T5712] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 79.914911][ T5712] RBP: 00007fd20648f090 R08: 0000000000000000 R09: 00000000fffffffc [ 79.914925][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.914988][ T5712] R13: 00007fd207c86038 R14: 00007fd207c85fa0 R15: 00007ffef1fc1988 [ 79.915004][ T5712] [ 80.301106][ T5723] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 80.338197][ T5723] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 80.418508][ T5730] loop1: detected capacity change from 0 to 1024 [ 80.433840][ T5723] veth7: entered promiscuous mode [ 80.441283][ T5723] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 80.482639][ T5730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.870988][ T3914] hid_parser_main: 37 callbacks suppressed [ 80.871005][ T3914] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 80.899615][ T3914] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.962287][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 80.962302][ T29] audit: type=1326 audit(1758641619.246:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 80.997770][ T29] audit: type=1326 audit(1758641619.246:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.097733][ T29] audit: type=1326 audit(1758641619.286:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.121112][ T29] audit: type=1326 audit(1758641619.286:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.144507][ T29] audit: type=1326 audit(1758641619.286:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.167859][ T29] audit: type=1326 audit(1758641619.286:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.191509][ T29] audit: type=1326 audit(1758641619.286:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.214963][ T29] audit: type=1326 audit(1758641619.286:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700594eec9 code=0x7ffc0000 [ 81.238495][ T29] audit: type=1400 audit(1758641619.326:5578): avc: denied { audit_write } for pid=5757 comm="syz.2.683" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.260050][ T29] audit: type=1326 audit(1758641619.506:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906062eec9 code=0x7ffc0000 [ 81.260314][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.528769][ T5796] loop1: detected capacity change from 0 to 1024 [ 81.539889][ T5796] EXT4-fs: Ignoring removed nobh option [ 81.545595][ T5796] EXT4-fs: inline encryption not supported [ 81.567212][ T5796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.587268][ T5796] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.694: Allocating blocks 385-513 which overlap fs metadata [ 81.634998][ T5796] EXT4-fs (loop1): pa ffff888106eca230: logic 16, phys. 129, len 24 [ 81.643076][ T5796] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 81.658346][ T5796] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 81.670644][ T5796] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.670644][ T5796] [ 81.680439][ T5796] EXT4-fs (loop1): Total free blocks count 0 [ 81.686580][ T5796] EXT4-fs (loop1): Free/Dirty block details [ 81.692723][ T5796] EXT4-fs (loop1): free_blocks=128 [ 81.697836][ T5796] EXT4-fs (loop1): dirty_blocks=0 [ 81.702916][ T5796] EXT4-fs (loop1): Block reservation details [ 81.708923][ T5796] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 81.729090][ T5796] syz.1.694 (5796) used greatest stack depth: 9576 bytes left [ 81.772772][ T5814] loop4: detected capacity change from 0 to 164 [ 81.779685][ T5814] iso9660: Unknown parameter '0x0000000000000003' [ 81.798961][ T5821] FAULT_INJECTION: forcing a failure. [ 81.798961][ T5821] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.812594][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.1.701 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.812685][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.812758][ T5821] Call Trace: [ 81.812765][ T5821] [ 81.812771][ T5821] __dump_stack+0x1d/0x30 [ 81.812792][ T5821] dump_stack_lvl+0xe8/0x140 [ 81.812806][ T5821] dump_stack+0x15/0x1b [ 81.812820][ T5821] should_fail_ex+0x265/0x280 [ 81.812916][ T5821] should_fail_alloc_page+0xf2/0x100 [ 81.812939][ T5821] __alloc_frozen_pages_noprof+0xff/0x360 [ 81.812969][ T5821] alloc_pages_mpol+0xb3/0x250 [ 81.812995][ T5821] vma_alloc_folio_noprof+0x1aa/0x300 [ 81.813121][ T5821] handle_mm_fault+0xec2/0x2c20 [ 81.813141][ T5821] ? __rcu_read_unlock+0x4f/0x70 [ 81.813165][ T5821] do_user_addr_fault+0x3fe/0x1090 [ 81.813276][ T5821] exc_page_fault+0x62/0xa0 [ 81.813370][ T5821] asm_exc_page_fault+0x26/0x30 [ 81.813390][ T5821] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 81.813442][ T5821] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 81.813457][ T5821] RSP: 0018:ffffc9000f73fd50 EFLAGS: 00050206 [ 81.813472][ T5821] RAX: ffff88810358dd20 RBX: 0000000000001000 RCX: 0000000000000248 [ 81.813483][ T5821] RDX: 0000000000000000 RSI: ffff8881212dadb8 RDI: 0000200000010000 [ 81.813494][ T5821] RBP: ffff8881212da000 R08: 00000000000006e9 R09: 0000000000000000 [ 81.813504][ T5821] R10: 00018881212da000 R11: 00018881212dafff R12: 0000200000010248 [ 81.813594][ T5821] R13: 00007ffffffff000 R14: 000020000000f248 R15: ffff8881212da000 [ 81.813610][ T5821] _copy_to_user+0x7c/0xa0 [ 81.813636][ T5821] pagemap_read+0x379/0x5e0 [ 81.813659][ T5821] ? __pfx_pagemap_read+0x10/0x10 [ 81.813699][ T5821] vfs_read+0x1a5/0x770 [ 81.813716][ T5821] ? __fget_files+0x184/0x1c0 [ 81.813795][ T5821] ? __rcu_read_unlock+0x4f/0x70 [ 81.813812][ T5821] ? __fget_files+0x184/0x1c0 [ 81.813833][ T5821] __x64_sys_pread64+0xfd/0x150 [ 81.813853][ T5821] x64_sys_call+0x29e2/0x2ff0 [ 81.813905][ T5821] do_syscall_64+0xd2/0x200 [ 81.813930][ T5821] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.814021][ T5821] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.814092][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.814109][ T5821] RIP: 0033:0x7fd207a2eec9 [ 81.814121][ T5821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.814135][ T5821] RSP: 002b:00007fd20648f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 81.814150][ T5821] RAX: ffffffffffffffda RBX: 00007fd207c85fa0 RCX: 00007fd207a2eec9 [ 81.814180][ T5821] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000003 [ 81.814190][ T5821] RBP: 00007fd20648f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.814200][ T5821] R10: 0000000fffff7ff8 R11: 0000000000000246 R12: 0000000000000002 [ 81.814211][ T5821] R13: 00007fd207c86038 R14: 00007fd207c85fa0 R15: 00007ffef1fc1988 [ 81.814226][ T5821] [ 82.163504][ T5814] syzkaller1: entered promiscuous mode [ 82.169013][ T5814] syzkaller1: entered allmulticast mode [ 82.176591][ T5822] tipc: Started in network mode [ 82.181500][ T5822] tipc: Node identity f2367895a029, cluster identity 4711 [ 82.181808][ T5814] loop4: detected capacity change from 0 to 512 [ 82.188959][ T5822] tipc: Enabled bearer , priority 0 [ 82.197163][ T5814] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 82.221775][ T5814] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.228713][ T5814] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.702: Block bitmap for bg 0 marked uninitialized [ 82.242655][ T5814] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 82.253168][ T5822] syzkaller0: entered promiscuous mode [ 82.258831][ T5822] syzkaller0: entered allmulticast mode [ 82.262823][ T5814] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.702: Block bitmap for bg 0 marked uninitialized [ 82.281265][ T5814] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 82.303000][ T5814] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.702: Block bitmap for bg 0 marked uninitialized [ 82.321348][ T5814] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 82.330483][ T5814] EXT4-fs (loop4): 1 orphan inode deleted [ 82.338302][ T5814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.393412][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.413583][ T5819] tipc: Resetting bearer [ 82.421612][ T5819] tipc: Disabling bearer [ 82.464580][ T5842] FAULT_INJECTION: forcing a failure. [ 82.464580][ T5842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.477958][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.4.712 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.477983][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.478071][ T5842] Call Trace: [ 82.478078][ T5842] [ 82.478086][ T5842] __dump_stack+0x1d/0x30 [ 82.478106][ T5842] dump_stack_lvl+0xe8/0x140 [ 82.478123][ T5842] dump_stack+0x15/0x1b [ 82.478210][ T5842] should_fail_ex+0x265/0x280 [ 82.478232][ T5842] should_fail_alloc_page+0xf2/0x100 [ 82.478255][ T5842] __alloc_frozen_pages_noprof+0xff/0x360 [ 82.478287][ T5842] alloc_pages_mpol+0xb3/0x250 [ 82.478359][ T5842] vma_alloc_folio_noprof+0x1aa/0x300 [ 82.478387][ T5842] do_wp_page+0x5db/0x24e0 [ 82.478407][ T5842] ? css_rstat_updated+0xb7/0x240 [ 82.478577][ T5842] ? __rcu_read_lock+0x37/0x50 [ 82.478690][ T5842] handle_mm_fault+0x77d/0x2c20 [ 82.478712][ T5842] ? __rcu_read_unlock+0x4f/0x70 [ 82.478737][ T5842] do_user_addr_fault+0x3fe/0x1090 [ 82.478822][ T5842] exc_page_fault+0x62/0xa0 [ 82.478846][ T5842] asm_exc_page_fault+0x26/0x30 [ 82.478874][ T5842] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 82.478896][ T5842] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 82.478978][ T5842] RSP: 0018:ffffc9000fa2f888 EFLAGS: 00050206 [ 82.479001][ T5842] RAX: ffff88810453bc20 RBX: ffff88810bff8000 RCX: 0000000000000200 [ 82.479013][ T5842] RDX: 0000000000000000 RSI: ffff88810bfffe00 RDI: 000020000001c000 [ 82.479026][ T5842] RBP: 0000200000014200 R08: 0000000000000bf2 R09: 0000000000000000 [ 82.479038][ T5842] R10: 000188810bff8000 R11: 000188810bffffff R12: 000020000001c200 [ 82.479051][ T5842] R13: ffffc9000fa2fe80 R14: 0000000000008000 R15: 00007ffffffff000 [ 82.479072][ T5842] _copy_to_iter+0x141/0xe70 [ 82.479115][ T5842] ? refill_obj_stock+0x254/0x2e0 [ 82.479142][ T5842] ? skb_free_head+0xb8/0x150 [ 82.479233][ T5842] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 82.479256][ T5842] __skb_datagram_iter+0x2f4/0x690 [ 82.479280][ T5842] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 82.479349][ T5842] skb_copy_datagram_iter+0x3d/0x110 [ 82.479408][ T5842] unix_stream_read_actor+0x43/0x70 [ 82.479439][ T5842] unix_stream_read_generic+0x6b1/0x1580 [ 82.479475][ T5842] unix_stream_recvmsg+0xc3/0xf0 [ 82.479500][ T5842] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 82.479537][ T5842] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 82.479562][ T5842] sock_recvmsg+0x136/0x170 [ 82.479596][ T5842] ____sys_recvmsg+0xf5/0x280 [ 82.479660][ T5842] ___sys_recvmsg+0x11f/0x370 [ 82.479703][ T5842] __x64_sys_recvmsg+0xd1/0x160 [ 82.479804][ T5842] x64_sys_call+0x2b42/0x2ff0 [ 82.479870][ T5842] do_syscall_64+0xd2/0x200 [ 82.479897][ T5842] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.479920][ T5842] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.479947][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.480020][ T5842] RIP: 0033:0x7f700594eec9 [ 82.480036][ T5842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.480052][ T5842] RSP: 002b:00007f7004396038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 82.480070][ T5842] RAX: ffffffffffffffda RBX: 00007f7005ba6090 RCX: 00007f700594eec9 [ 82.480156][ T5842] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000005 [ 82.480169][ T5842] RBP: 00007f7004396090 R08: 0000000000000000 R09: 0000000000000000 [ 82.480182][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.480193][ T5842] R13: 00007f7005ba6128 R14: 00007f7005ba6090 R15: 00007ffd554cb878 [ 82.480211][ T5842] [ 83.257423][ T5863] FAULT_INJECTION: forcing a failure. [ 83.257423][ T5863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.270666][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.0.720 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.270691][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.270701][ T5863] Call Trace: [ 83.270781][ T5863] [ 83.270788][ T5863] __dump_stack+0x1d/0x30 [ 83.270807][ T5863] dump_stack_lvl+0xe8/0x140 [ 83.270823][ T5863] dump_stack+0x15/0x1b [ 83.270836][ T5863] should_fail_ex+0x265/0x280 [ 83.270856][ T5863] should_fail+0xb/0x20 [ 83.270872][ T5863] should_fail_usercopy+0x1a/0x20 [ 83.270930][ T5863] _copy_from_user+0x1c/0xb0 [ 83.270953][ T5863] __sys_bpf+0x178/0x7b0 [ 83.271016][ T5863] __x64_sys_bpf+0x41/0x50 [ 83.271035][ T5863] x64_sys_call+0x2aea/0x2ff0 [ 83.271052][ T5863] do_syscall_64+0xd2/0x200 [ 83.271192][ T5863] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.271223][ T5863] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.271245][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.271341][ T5863] RIP: 0033:0x7f99ebaaeec9 [ 83.271355][ T5863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.271368][ T5863] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.271384][ T5863] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 83.271454][ T5863] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 83.271463][ T5863] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 83.271473][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.271482][ T5863] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 83.271496][ T5863] [ 83.457912][ T5871] 9pnet_fd: Insufficient options for proto=fd [ 83.461732][ T5868] __nla_validate_parse: 31 callbacks suppressed [ 83.461749][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 83.505667][ T5874] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.627412][ T5878] syzkaller0: entered promiscuous mode [ 83.632954][ T5878] syzkaller0: entered allmulticast mode [ 83.828642][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'. [ 84.191352][ T5895] loop2: detected capacity change from 0 to 512 [ 84.198848][ T5895] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.211140][ T5895] EXT4-fs (loop2): 1 truncate cleaned up [ 84.217625][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.247506][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.266364][ T5904] loop2: detected capacity change from 0 to 512 [ 84.273493][ T5904] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.284959][ T5904] EXT4-fs (loop2): 1 truncate cleaned up [ 84.291252][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.309002][ T5906] loop4: detected capacity change from 0 to 128 [ 84.317797][ T5904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.329720][ T5906] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.337635][ T5906] FAT-fs (loop4): Filesystem has been set read-only [ 84.345304][ T5906] syz.4.735: attempt to access beyond end of device [ 84.345304][ T5906] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 84.359759][ T5906] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.367635][ T5906] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 84.376105][ T5906] syz.4.735: attempt to access beyond end of device [ 84.376105][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.390448][ T5906] syz.4.735: attempt to access beyond end of device [ 84.390448][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.409211][ T5906] syz.4.735: attempt to access beyond end of device [ 84.409211][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.423639][ T5906] syz.4.735: attempt to access beyond end of device [ 84.423639][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.437822][ T5906] syz.4.735: attempt to access beyond end of device [ 84.437822][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.451576][ T5906] syz.4.735: attempt to access beyond end of device [ 84.451576][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.466455][ T5906] syz.4.735: attempt to access beyond end of device [ 84.466455][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.480016][ T5906] syz.4.735: attempt to access beyond end of device [ 84.480016][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.499854][ T5912] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 84.507681][ T5912] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 84.509236][ T5906] syz.4.735: attempt to access beyond end of device [ 84.509236][ T5906] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.565723][ T5919] vlan0: entered promiscuous mode [ 84.570894][ T5919] macvtap0: entered promiscuous mode [ 84.616191][ T5919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5919 comm=syz.0.740 [ 84.867726][ T5929] FAULT_INJECTION: forcing a failure. [ 84.867726][ T5929] name failslab, interval 1, probability 0, space 0, times 0 [ 84.881545][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.881695][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.881787][ T5929] Call Trace: [ 84.881792][ T5929] [ 84.881799][ T5929] __dump_stack+0x1d/0x30 [ 84.881821][ T5929] dump_stack_lvl+0xe8/0x140 [ 84.881880][ T5929] dump_stack+0x15/0x1b [ 84.881956][ T5929] should_fail_ex+0x265/0x280 [ 84.882031][ T5929] ? tipc_udp_rcast_add+0x47/0x1a0 [ 84.882054][ T5929] should_failslab+0x8c/0xb0 [ 84.882097][ T5929] __kmalloc_cache_noprof+0x4c/0x320 [ 84.882124][ T5929] ? _raw_spin_unlock+0x26/0x50 [ 84.882149][ T5929] tipc_udp_rcast_add+0x47/0x1a0 [ 84.882224][ T5929] tipc_udp_enable+0xa4f/0xb10 [ 84.882356][ T5929] ? __pfx_tipc_udp_recv+0x10/0x10 [ 84.882398][ T5929] __tipc_nl_bearer_enable+0x942/0xda0 [ 84.882430][ T5929] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 84.882467][ T5929] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 84.882517][ T5929] tipc_nl_bearer_enable+0x22/0x40 [ 84.882546][ T5929] genl_family_rcv_msg_doit+0x143/0x1b0 [ 84.882582][ T5929] genl_rcv_msg+0x422/0x460 [ 84.882661][ T5929] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 84.882723][ T5929] netlink_rcv_skb+0x120/0x220 [ 84.882746][ T5929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.882782][ T5929] genl_rcv+0x28/0x40 [ 84.882839][ T5929] netlink_unicast+0x5c0/0x690 [ 84.882860][ T5929] netlink_sendmsg+0x58b/0x6b0 [ 84.882939][ T5929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.882966][ T5929] __sock_sendmsg+0x145/0x180 [ 84.883056][ T5929] ____sys_sendmsg+0x31e/0x4e0 [ 84.883115][ T5929] ___sys_sendmsg+0x17b/0x1d0 [ 84.883204][ T5929] __x64_sys_sendmsg+0xd4/0x160 [ 84.883235][ T5929] x64_sys_call+0x191e/0x2ff0 [ 84.883257][ T5929] do_syscall_64+0xd2/0x200 [ 84.883328][ T5929] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.883349][ T5929] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.883373][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.883395][ T5929] RIP: 0033:0x7f99ebaaeec9 [ 84.883410][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.883476][ T5929] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.883501][ T5929] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 84.883521][ T5929] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 84.883532][ T5929] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 84.883542][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.883552][ T5929] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 84.883571][ T5929] [ 85.175199][ T5929] tipc: Enabling of bearer rejected, failed to enable media [ 85.208268][ T5933] loop5: detected capacity change from 0 to 128 [ 85.210165][ T5935] SELinux: ebitmap: truncated map [ 85.220887][ T5937] FAULT_INJECTION: forcing a failure. [ 85.220887][ T5937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.221625][ T5935] SELinux: failed to load policy [ 85.233959][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.0.747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.233983][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.234001][ T5937] Call Trace: [ 85.234009][ T5937] [ 85.234015][ T5937] __dump_stack+0x1d/0x30 [ 85.234037][ T5937] dump_stack_lvl+0xe8/0x140 [ 85.234057][ T5937] dump_stack+0x15/0x1b [ 85.234074][ T5937] should_fail_ex+0x265/0x280 [ 85.234136][ T5937] should_fail+0xb/0x20 [ 85.234213][ T5937] should_fail_usercopy+0x1a/0x20 [ 85.234237][ T5937] strncpy_from_user+0x25/0x230 [ 85.234267][ T5937] ? __rcu_read_unlock+0x34/0x70 [ 85.234355][ T5937] strncpy_from_user_nofault+0x68/0xf0 [ 85.234460][ T5937] bpf_probe_read_compat_str+0xb4/0x130 [ 85.234492][ T5937] bpf_prog_e42f6260c1b72fb3+0x3e/0x44 [ 85.234506][ T5937] bpf_trace_run3+0x10f/0x1d0 [ 85.234539][ T5937] ? __kfree_skb+0x109/0x150 [ 85.234561][ T5937] ? __rcu_read_unlock+0x4f/0x70 [ 85.234582][ T5937] ? __kfree_skb+0x109/0x150 [ 85.234601][ T5937] __traceiter_kmem_cache_free+0x38/0x60 [ 85.234685][ T5937] ? __kfree_skb+0x109/0x150 [ 85.234747][ T5937] kmem_cache_free+0x257/0x300 [ 85.234776][ T5937] __kfree_skb+0x109/0x150 [ 85.234797][ T5937] ? nlmon_xmit+0x4f/0x60 [ 85.234902][ T5937] consume_skb+0x49/0x150 [ 85.234924][ T5937] nlmon_xmit+0x4f/0x60 [ 85.234951][ T5937] dev_hard_start_xmit+0x125/0x3e0 [ 85.234977][ T5937] __dev_queue_xmit+0x10f9/0x2000 [ 85.235001][ T5937] ? __dev_queue_xmit+0x182/0x2000 [ 85.235103][ T5937] __netlink_deliver_tap+0x3c3/0x500 [ 85.235132][ T5937] netlink_unicast+0x66b/0x690 [ 85.235206][ T5937] netlink_sendmsg+0x58b/0x6b0 [ 85.235234][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.235258][ T5937] __sock_sendmsg+0x145/0x180 [ 85.235289][ T5937] ____sys_sendmsg+0x31e/0x4e0 [ 85.235397][ T5937] ___sys_sendmsg+0x17b/0x1d0 [ 85.235455][ T5937] __x64_sys_sendmsg+0xd4/0x160 [ 85.235485][ T5937] x64_sys_call+0x191e/0x2ff0 [ 85.235506][ T5937] do_syscall_64+0xd2/0x200 [ 85.235590][ T5937] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.235613][ T5937] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.235641][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.235661][ T5937] RIP: 0033:0x7f99ebaaeec9 [ 85.235677][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.235734][ T5937] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.235775][ T5937] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 85.235787][ T5937] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 85.235820][ T5937] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 85.235832][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.235844][ T5937] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 85.235863][ T5937] [ 85.237717][ T5933] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 85.266993][ T5939] FAULT_INJECTION: forcing a failure. [ 85.266993][ T5939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.271305][ T5937] tipc: New replicast peer: 255.255.255.255 [ 85.274396][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.1.748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.274448][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.274460][ T5939] Call Trace: [ 85.274467][ T5939] [ 85.274515][ T5939] __dump_stack+0x1d/0x30 [ 85.274535][ T5939] dump_stack_lvl+0xe8/0x140 [ 85.274554][ T5939] dump_stack+0x15/0x1b [ 85.274570][ T5939] should_fail_ex+0x265/0x280 [ 85.274595][ T5939] should_fail+0xb/0x20 [ 85.274675][ T5939] should_fail_usercopy+0x1a/0x20 [ 85.274699][ T5939] copy_folio_from_iter_atomic+0x278/0x11b0 [ 85.274733][ T5939] ? shmem_write_begin+0xa8/0x190 [ 85.274805][ T5939] ? shmem_write_begin+0xe1/0x190 [ 85.274825][ T5939] generic_perform_write+0x2c2/0x490 [ 85.274852][ T5939] shmem_file_write_iter+0xc5/0xf0 [ 85.274895][ T5939] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.274934][ T5939] vfs_write+0x527/0x960 [ 85.274961][ T5939] ksys_write+0xda/0x1a0 [ 85.274998][ T5939] __x64_sys_write+0x40/0x50 [ 85.275020][ T5939] x64_sys_call+0x27fe/0x2ff0 [ 85.275041][ T5939] do_syscall_64+0xd2/0x200 [ 85.275070][ T5939] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.275138][ T5939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.275166][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.275213][ T5939] RIP: 0033:0x7fd207a2d97f [ 85.275228][ T5939] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 85.275244][ T5939] RSP: 002b:00007fd20648edf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 85.275263][ T5939] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fd207a2d97f [ 85.275276][ T5939] RDX: 0000000000040000 RSI: 00007fd1fe06f000 RDI: 0000000000000006 [ 85.275288][ T5939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000465 [ 85.275356][ T5939] R10: 00000000000003be R11: 0000000000000293 R12: 0000000000000006 [ 85.275368][ T5939] R13: 00007fd20648eef0 R14: 00007fd20648eeb0 R15: 00007fd1fe06f000 [ 85.275387][ T5939] [ 85.276753][ T5939] loop1: detected capacity change from 0 to 512 [ 85.278848][ T5937] tipc: Enabled bearer , priority 10 [ 85.320222][ T5933] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 85.367093][ T5939] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.748: missing EA_INODE flag [ 85.403664][ T5933] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.746: Directory block failed checksum [ 85.484952][ T5939] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.748: error while reading EA inode 11 err=-117 [ 85.703855][ T5952] netlink: 'syz.0.751': attribute type 13 has an invalid length. [ 85.707785][ T5939] EXT4-fs (loop1): 1 orphan inode deleted [ 85.715922][ T5952] netlink: 164 bytes leftover after parsing attributes in process `syz.0.751'. [ 85.724916][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.953496][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.022537][ T5366] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.286546][ T3914] tipc: Node number set to 4294246401 [ 86.399254][ T5982] loop2: detected capacity change from 0 to 2048 [ 86.410145][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 86.410209][ T29] audit: type=1326 audit(1758641624.676:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.440312][ T29] audit: type=1326 audit(1758641624.676:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.463784][ T29] audit: type=1326 audit(1758641624.676:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.487252][ T29] audit: type=1326 audit(1758641624.676:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.510587][ T29] audit: type=1326 audit(1758641624.676:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.534111][ T29] audit: type=1326 audit(1758641624.676:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.557531][ T29] audit: type=1326 audit(1758641624.676:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.580928][ T29] audit: type=1326 audit(1758641624.676:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.604403][ T29] audit: type=1326 audit(1758641624.676:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.627744][ T29] audit: type=1326 audit(1758641624.676:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.1.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd207a2eec9 code=0x7ffc0000 [ 86.655732][ T5994] FAULT_INJECTION: forcing a failure. [ 86.655732][ T5994] name failslab, interval 1, probability 0, space 0, times 0 [ 86.668512][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.4.763 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.668539][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.668550][ T5994] Call Trace: [ 86.668558][ T5994] [ 86.668566][ T5994] __dump_stack+0x1d/0x30 [ 86.668620][ T5994] dump_stack_lvl+0xe8/0x140 [ 86.668639][ T5994] dump_stack+0x15/0x1b [ 86.668653][ T5994] should_fail_ex+0x265/0x280 [ 86.668674][ T5994] should_failslab+0x8c/0xb0 [ 86.668736][ T5994] kmem_cache_alloc_noprof+0x50/0x310 [ 86.668791][ T5994] ? copy_pid_ns+0x17f/0x550 [ 86.668846][ T5994] copy_pid_ns+0x17f/0x550 [ 86.668864][ T5994] ? copy_mnt_ns+0x567/0x5c0 [ 86.668888][ T5994] create_new_namespaces+0x176/0x3d0 [ 86.668958][ T5994] unshare_nsproxy_namespaces+0xe8/0x120 [ 86.669031][ T5994] ksys_unshare+0x3d0/0x6d0 [ 86.669060][ T5994] ? ksys_write+0x192/0x1a0 [ 86.669100][ T5994] __x64_sys_unshare+0x1f/0x30 [ 86.669123][ T5994] x64_sys_call+0x2911/0x2ff0 [ 86.669142][ T5994] do_syscall_64+0xd2/0x200 [ 86.669173][ T5982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.669245][ T5994] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.669286][ T5994] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.669361][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.669383][ T5994] RIP: 0033:0x7f700594eec9 [ 86.669399][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.669414][ T5994] RSP: 002b:00007f70043b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.669433][ T5994] RAX: ffffffffffffffda RBX: 00007f7005ba5fa0 RCX: 00007f700594eec9 [ 86.669462][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 86.669474][ T5994] RBP: 00007f70043b7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.669486][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.669498][ T5994] R13: 00007f7005ba6038 R14: 00007f7005ba5fa0 R15: 00007ffd554cb878 [ 86.669514][ T5994] [ 86.879184][ T5982] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.897544][ T3386] kernel write not supported for file /snd/seq (pid: 3386 comm: kworker/0:4) [ 86.909525][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 86.919532][ T5999] xfrm0: entered allmulticast mode [ 86.935231][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.983236][ T6012] FAULT_INJECTION: forcing a failure. [ 86.983236][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 86.996118][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.5.770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.996144][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.996156][ T6012] Call Trace: [ 86.996161][ T6012] [ 86.996168][ T6012] __dump_stack+0x1d/0x30 [ 86.996257][ T6012] dump_stack_lvl+0xe8/0x140 [ 86.996277][ T6012] dump_stack+0x15/0x1b [ 86.996293][ T6012] should_fail_ex+0x265/0x280 [ 86.996316][ T6012] should_failslab+0x8c/0xb0 [ 86.996349][ T6012] __kmalloc_cache_node_noprof+0x54/0x320 [ 86.996376][ T6012] ? __get_vm_area_node+0x106/0x1d0 [ 86.996406][ T6012] __get_vm_area_node+0x106/0x1d0 [ 86.996483][ T6012] __vmalloc_node_range_noprof+0x273/0xe00 [ 86.996513][ T6012] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 86.996539][ T6012] ? perf_callchain_kernel+0x301/0x330 [ 86.996571][ T6012] ? avc_has_perm_noaudit+0x1b1/0x200 [ 86.996650][ T6012] ? cred_has_capability+0x210/0x280 [ 86.996672][ T6012] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 86.996699][ T6012] __vmalloc_noprof+0x83/0xc0 [ 86.996802][ T6012] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 86.996829][ T6012] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 86.996854][ T6012] ? bpf_prog_alloc+0x2a/0x150 [ 86.996920][ T6012] bpf_prog_alloc+0x3c/0x150 [ 86.996945][ T6012] bpf_prog_load+0x514/0x1070 [ 86.996979][ T6012] ? security_bpf+0x2b/0x90 [ 86.996997][ T6012] __sys_bpf+0x462/0x7b0 [ 86.997104][ T6012] __x64_sys_bpf+0x41/0x50 [ 86.997127][ T6012] x64_sys_call+0x2aea/0x2ff0 [ 86.997150][ T6012] do_syscall_64+0xd2/0x200 [ 86.997192][ T6012] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.997221][ T6012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.997290][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.997311][ T6012] RIP: 0033:0x7f7d385eeec9 [ 86.997326][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.997422][ T6012] RSP: 002b:00007f7d37057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.997441][ T6012] RAX: ffffffffffffffda RBX: 00007f7d38845fa0 RCX: 00007f7d385eeec9 [ 86.997454][ T6012] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 86.997466][ T6012] RBP: 00007f7d37057090 R08: 0000000000000000 R09: 0000000000000000 [ 86.997479][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.997491][ T6012] R13: 00007f7d38846038 R14: 00007f7d38845fa0 R15: 00007ffef430c588 [ 86.997510][ T6012] [ 86.997519][ T6012] syz.5.770: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 87.017933][ T6012] ,cpuset=/,mems_allowed=0 [ 87.262337][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.5.770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.262417][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.262424][ T6012] Call Trace: [ 87.262428][ T6012] [ 87.262433][ T6012] __dump_stack+0x1d/0x30 [ 87.262446][ T6012] dump_stack_lvl+0xe8/0x140 [ 87.262457][ T6012] dump_stack+0x15/0x1b [ 87.262495][ T6012] warn_alloc+0x12b/0x1a0 [ 87.262516][ T6012] __vmalloc_node_range_noprof+0x297/0xe00 [ 87.262583][ T6012] ? perf_callchain_kernel+0x301/0x330 [ 87.262621][ T6012] ? avc_has_perm_noaudit+0x1b1/0x200 [ 87.262645][ T6012] ? cred_has_capability+0x210/0x280 [ 87.262665][ T6012] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 87.262761][ T6012] __vmalloc_noprof+0x83/0xc0 [ 87.262853][ T6012] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 87.262875][ T6012] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 87.262896][ T6012] ? bpf_prog_alloc+0x2a/0x150 [ 87.262924][ T6012] bpf_prog_alloc+0x3c/0x150 [ 87.262950][ T6012] bpf_prog_load+0x514/0x1070 [ 87.262984][ T6012] ? security_bpf+0x2b/0x90 [ 87.263049][ T6012] __sys_bpf+0x462/0x7b0 [ 87.263079][ T6012] __x64_sys_bpf+0x41/0x50 [ 87.263130][ T6012] x64_sys_call+0x2aea/0x2ff0 [ 87.263152][ T6012] do_syscall_64+0xd2/0x200 [ 87.263183][ T6012] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.263225][ T6012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.263248][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.263268][ T6012] RIP: 0033:0x7f7d385eeec9 [ 87.263283][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.263297][ T6012] RSP: 002b:00007f7d37057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.263356][ T6012] RAX: ffffffffffffffda RBX: 00007f7d38845fa0 RCX: 00007f7d385eeec9 [ 87.263369][ T6012] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 87.263382][ T6012] RBP: 00007f7d37057090 R08: 0000000000000000 R09: 0000000000000000 [ 87.263419][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.263432][ T6012] R13: 00007f7d38846038 R14: 00007f7d38845fa0 R15: 00007ffef430c588 [ 87.263486][ T6012] [ 87.479788][ T6012] Mem-Info: [ 87.483576][ T6012] active_anon:3845 inactive_anon:7 isolated_anon:0 [ 87.483576][ T6012] active_file:18702 inactive_file:2518 isolated_file:0 [ 87.483576][ T6012] unevictable:0 dirty:57 writeback:29 [ 87.483576][ T6012] slab_reclaimable:3302 slab_unreclaimable:43503 [ 87.483576][ T6012] mapped:30436 shmem:457 pagetables:1055 [ 87.483576][ T6012] sec_pagetables:0 bounce:0 [ 87.483576][ T6012] kernel_misc_reclaimable:0 [ 87.483576][ T6012] free:1839430 free_pcp:30819 free_cma:0 [ 87.529014][ T6012] Node 0 active_anon:15380kB inactive_anon:28kB active_file:74808kB inactive_file:10072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121744kB dirty:228kB writeback:116kB shmem:1828kB kernel_stack:4144kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 87.557021][ T6012] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.585821][ T6012] lowmem_reserve[]: 0 2883 7862 7862 [ 87.591199][ T6012] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 87.621634][ T6012] lowmem_reserve[]: 0 0 4978 4978 [ 87.626896][ T6012] Node 0 Normal free:4397596kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15428kB inactive_anon:28kB active_file:74808kB inactive_file:10080kB unevictable:0kB writepending:300kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:114432kB local_pcp:69484kB free_cma:0kB [ 87.659085][ T6012] lowmem_reserve[]: 0 0 0 0 [ 87.663715][ T6012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.676455][ T6012] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 87.692706][ T6012] Node 0 Normal: 470*4kB (UME) 163*8kB (UM) 231*16kB (UME) 213*32kB (UM) 159*64kB (UME) 139*128kB (UME) 102*256kB (UME) 71*512kB (UME) 39*1024kB (UE) 29*2048kB (UM) 1024*4096kB (UM) = 4397760kB [ 87.711979][ T6012] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 87.721322][ T6012] 21706 total pagecache pages [ 87.726020][ T6012] 34 pages in swap cache [ 87.730260][ T6012] Free swap = 124860kB [ 87.734456][ T6012] Total swap = 124996kB [ 87.738609][ T6012] 2097051 pages RAM [ 87.742406][ T6012] 0 pages HighMem/MovableOnly [ 87.747094][ T6012] 80446 pages reserved [ 87.757685][ T6023] FAULT_INJECTION: forcing a failure. [ 87.757685][ T6023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.771294][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.772 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.771350][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.771361][ T6023] Call Trace: [ 87.771367][ T6023] [ 87.771376][ T6023] __dump_stack+0x1d/0x30 [ 87.771424][ T6023] dump_stack_lvl+0xe8/0x140 [ 87.771445][ T6023] dump_stack+0x15/0x1b [ 87.771462][ T6023] should_fail_ex+0x265/0x280 [ 87.771527][ T6023] should_fail_alloc_page+0xf2/0x100 [ 87.771554][ T6023] __alloc_frozen_pages_noprof+0xff/0x360 [ 87.771646][ T6023] alloc_pages_mpol+0xb3/0x250 [ 87.771680][ T6023] vma_alloc_folio_noprof+0x1aa/0x300 [ 87.771728][ T6023] handle_mm_fault+0xec2/0x2c20 [ 87.771756][ T6023] do_user_addr_fault+0x636/0x1090 [ 87.771785][ T6023] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 87.771816][ T6023] exc_page_fault+0x62/0xa0 [ 87.771873][ T6023] asm_exc_page_fault+0x26/0x30 [ 87.771892][ T6023] RIP: 0033:0x7fd2078f0cb0 [ 87.771907][ T6023] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 87.771924][ T6023] RSP: 002b:00007fd20648e4a0 EFLAGS: 00010202 [ 87.772041][ T6023] RAX: 0000000000028000 RBX: 00007fd20648e540 RCX: 0000000000000063 [ 87.772051][ T6023] RDX: 0000000000006c4e RSI: 0000000000004c4f RDI: 00007fd20648e5e0 [ 87.772065][ T6023] RBP: 0000000000000064 R08: 00007fd1fe06f000 R09: 0000000000000073 [ 87.772077][ T6023] R10: 00002000000009c2 R11: 0000000000000517 R12: 0000000000004001 [ 87.772091][ T6023] R13: 00007fd207acdb80 R14: 000000000000001c R15: 00007fd20648e5e0 [ 87.772111][ T6023] [ 87.772121][ T6023] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 87.811065][ T6025] loop2: detected capacity change from 0 to 764 [ 87.813222][ T6023] loop1: detected capacity change from 0 to 512 [ 87.956884][ T6023] EXT4-fs: Ignoring removed nobh option [ 87.974616][ T6023] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.772: corrupted inode contents [ 87.991951][ T6023] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.772: mark_inode_dirty error [ 88.014419][ T6023] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.772: corrupted inode contents [ 88.026422][ T6023] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.772: mark_inode_dirty error [ 88.038872][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.776'. [ 88.053482][ T6033] team1: entered promiscuous mode [ 88.058617][ T6033] team1: entered allmulticast mode [ 88.067521][ T6023] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.772: Failed to acquire dquot type 0 [ 88.097159][ T6023] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.772: corrupted inode contents [ 88.109544][ T6023] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.772: mark_inode_dirty error [ 88.121424][ T6023] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.772: corrupted inode contents [ 88.135535][ T6023] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.772: mark_inode_dirty error [ 88.147200][ T6023] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.772: corrupted inode contents [ 88.160006][ T6023] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 88.169405][ T6023] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.772: corrupted inode contents [ 88.182281][ T6023] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.772: mark_inode_dirty error [ 88.196926][ T6023] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 88.207574][ T6023] EXT4-fs (loop1): 1 truncate cleaned up [ 88.213689][ T6023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.226536][ T6023] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.238444][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.279184][ T6052] loop2: detected capacity change from 0 to 512 [ 88.321747][ T6054] tipc: Started in network mode [ 88.326725][ T6054] tipc: Node identity 0a25d61ed3d9, cluster identity 4711 [ 88.334216][ T6054] tipc: Enabled bearer , priority 0 [ 88.345191][ T6054] syzkaller0: entered promiscuous mode [ 88.350687][ T6054] syzkaller0: entered allmulticast mode [ 88.364503][ T6052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.378570][ T6052] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.396194][ T6052] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.784: corrupted inode contents [ 88.408852][ T6052] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.784: mark_inode_dirty error [ 88.420856][ T6052] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.784: corrupted inode contents [ 88.443692][ T6052] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.784: mark_inode_dirty error [ 88.481736][ T6052] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.784: corrupted inode contents [ 88.494660][ T6052] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.784: mark_inode_dirty error [ 88.509945][ T6052] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.784: corrupted inode contents [ 88.524520][ T6052] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.784: corrupted inode contents [ 88.586089][ T6052] EXT4-fs error (device loop2): add_dirent_to_buf:2153: inode #2: comm syz.2.784: mark_inode_dirty error [ 88.603343][ T6061] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.784: corrupted inode contents [ 88.629214][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.647278][ T6053] tipc: Resetting bearer [ 88.657374][ T6053] tipc: Disabling bearer [ 88.856249][ T6093] FAULT_INJECTION: forcing a failure. [ 88.856249][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 88.869109][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.0.797 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.869137][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.869159][ T6093] Call Trace: [ 88.869167][ T6093] [ 88.869175][ T6093] __dump_stack+0x1d/0x30 [ 88.869199][ T6093] dump_stack_lvl+0xe8/0x140 [ 88.869221][ T6093] dump_stack+0x15/0x1b [ 88.869239][ T6093] should_fail_ex+0x265/0x280 [ 88.869294][ T6093] should_failslab+0x8c/0xb0 [ 88.869322][ T6093] kmem_cache_alloc_node_noprof+0x57/0x320 [ 88.869352][ T6093] ? blk_alloc_queue+0x39/0x360 [ 88.869383][ T6093] ? pcpu_memcg_post_alloc_hook+0xf8/0x150 [ 88.869472][ T6093] blk_alloc_queue+0x39/0x360 [ 88.869494][ T6093] __blk_alloc_disk+0x4c/0xd0 [ 88.869531][ T6093] md_alloc+0x4d5/0x9c0 [ 88.869599][ T6093] ? __pfx_md_probe+0x10/0x10 [ 88.869625][ T6093] md_alloc_and_put+0x18/0x170 [ 88.869649][ T6093] md_probe+0x68/0x80 [ 88.869673][ T6093] blk_request_module+0x1bd/0x1e0 [ 88.869720][ T6093] blkdev_get_no_open+0x4b/0x100 [ 88.869821][ T6093] bdev_file_open_by_dev+0xa5/0x250 [ 88.869853][ T6093] swsusp_check+0x3f/0x290 [ 88.869882][ T6093] software_resume+0x41/0x2f0 [ 88.869981][ T6093] resume_store+0x2d9/0x3d0 [ 88.870007][ T6093] ? __pfx_resume_store+0x10/0x10 [ 88.870030][ T6093] kobj_attr_store+0x4a/0x70 [ 88.870050][ T6093] ? __pfx_kobj_attr_store+0x10/0x10 [ 88.870073][ T6093] sysfs_kf_write+0xfb/0x120 [ 88.870093][ T6093] ? __pfx_sysfs_kf_write+0x10/0x10 [ 88.870138][ T6093] kernfs_fop_write_iter+0x1e8/0x300 [ 88.870168][ T6093] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 88.870229][ T6093] vfs_write+0x527/0x960 [ 88.870254][ T6093] ksys_write+0xda/0x1a0 [ 88.870276][ T6093] __x64_sys_write+0x40/0x50 [ 88.870296][ T6093] x64_sys_call+0x27fe/0x2ff0 [ 88.870314][ T6093] do_syscall_64+0xd2/0x200 [ 88.870346][ T6093] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.870443][ T6093] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.870468][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.870486][ T6093] RIP: 0033:0x7f99ebaaeec9 [ 88.870502][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.870518][ T6093] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.870641][ T6093] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 88.870653][ T6093] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 88.870667][ T6093] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 88.870679][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.870693][ T6093] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 88.870713][ T6093] [ 88.870753][ T6093] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.411741][ T6113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.495607][ T6113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.518607][ T6122] loop1: detected capacity change from 0 to 164 [ 89.527314][ T6122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.536035][ T6122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.545726][ T6122] rock: directory entry would overflow storage [ 89.551978][ T6122] rock: sig=0x4f50, size=4, remaining=3 [ 89.557691][ T6122] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.567128][ T6113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.580085][ T6122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.589585][ T6122] rock: directory entry would overflow storage [ 89.595917][ T6122] rock: sig=0x4f50, size=4, remaining=3 [ 89.601487][ T6122] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.611135][ T6122] binfmt_misc: register: failed to install interpreter file ./file2 [ 89.644484][ T6113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.700483][ T4160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.721739][ T4160] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.730831][ T4160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.739140][ T4160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.767624][ T6128] loop2: detected capacity change from 0 to 164 [ 89.775449][ T6128] Unable to read rock-ridge attributes [ 89.783309][ T6128] veth0: entered promiscuous mode [ 89.788724][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 89.956056][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.814'. [ 89.966666][ T6141] loop5: detected capacity change from 0 to 128 [ 89.994955][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 90.009251][ T6148] team1: entered promiscuous mode [ 90.009269][ T6148] team1: entered allmulticast mode [ 90.026229][ T6151] loop5: detected capacity change from 0 to 512 [ 90.033255][ T6151] EXT4-fs: Ignoring removed nobh option [ 90.039627][ T6151] EXT4-fs (loop5): fragment/cluster size (131072) != block size (4096) [ 90.080623][ T6155] loop2: detected capacity change from 0 to 2048 [ 90.095013][ T6159] FAULT_INJECTION: forcing a failure. [ 90.095013][ T6159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.105657][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.108341][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.5.823 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.108368][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.108460][ T6159] Call Trace: [ 90.108467][ T6159] [ 90.108476][ T6159] __dump_stack+0x1d/0x30 [ 90.108497][ T6159] dump_stack_lvl+0xe8/0x140 [ 90.108554][ T6159] dump_stack+0x15/0x1b [ 90.108570][ T6159] should_fail_ex+0x265/0x280 [ 90.108594][ T6159] should_fail+0xb/0x20 [ 90.108643][ T6159] should_fail_usercopy+0x1a/0x20 [ 90.108667][ T6159] _copy_to_user+0x20/0xa0 [ 90.108697][ T6159] simple_read_from_buffer+0xb5/0x130 [ 90.108720][ T6159] proc_fail_nth_read+0x10e/0x150 [ 90.108747][ T6159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.108795][ T6159] vfs_read+0x1a5/0x770 [ 90.108829][ T6159] ? __rcu_read_unlock+0x4f/0x70 [ 90.108849][ T6159] ? __fget_files+0x184/0x1c0 [ 90.108871][ T6159] ? tiocsti+0x19b/0x1d0 [ 90.108960][ T6159] ksys_read+0xda/0x1a0 [ 90.108982][ T6159] __x64_sys_read+0x40/0x50 [ 90.109003][ T6159] x64_sys_call+0x27bc/0x2ff0 [ 90.109199][ T6159] do_syscall_64+0xd2/0x200 [ 90.109230][ T6159] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.109303][ T6159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.109332][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.109353][ T6159] RIP: 0033:0x7f7d385ed8dc [ 90.109369][ T6159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.109386][ T6159] RSP: 002b:00007f7d37057030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.109410][ T6159] RAX: ffffffffffffffda RBX: 00007f7d38845fa0 RCX: 00007f7d385ed8dc [ 90.109422][ T6159] RDX: 000000000000000f RSI: 00007f7d370570a0 RDI: 0000000000000006 [ 90.109435][ T6159] RBP: 00007f7d37057090 R08: 0000000000000000 R09: 0000000000000000 [ 90.109447][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.109502][ T6159] R13: 00007f7d38846038 R14: 00007f7d38845fa0 R15: 00007ffef430c588 [ 90.109521][ T6159] [ 90.409206][ T6172] vlan0: entered allmulticast mode [ 90.414429][ T6172] dummy0: entered allmulticast mode [ 90.431025][ T6173] loop5: detected capacity change from 0 to 1024 [ 90.479303][ T6173] EXT4-fs: Ignoring removed bh option [ 90.523960][ T6173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.576511][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 90.882885][ T5997] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 90.996973][ T5366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.113827][ T6213] loop5: detected capacity change from 0 to 2048 [ 91.124629][ T6213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.136921][ T6213] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.149108][ T36] kernel write not supported for file /snd/seq (pid: 36 comm: kworker/1:1) [ 91.169973][ T5366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.186479][ T6219] netlink: 156 bytes leftover after parsing attributes in process `syz.5.840'. [ 91.235868][ T6174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.251589][ T6223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.842'. [ 91.289011][ T4127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.338638][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 91.361132][ T4127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.379316][ T6245] team1: entered promiscuous mode [ 91.384449][ T6245] team1: entered allmulticast mode [ 91.393338][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.851'. [ 91.402463][ T6251] netem: change failed [ 91.426497][ T4127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.449712][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 91.449727][ T29] audit: type=1400 audit(1758641629.736:6395): avc: denied { write } for pid=6261 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.475601][ T29] audit: type=1400 audit(1758641629.736:6394): avc: denied { write } for pid=6261 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.483639][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 91.509573][ T4127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.514192][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 91.530819][ T6247] ucma_write: process 532 (syz.0.848) changed security contexts after opening file descriptor, this is not allowed. [ 91.556966][ T6258] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.852' sets config #0 [ 91.582745][ T6272] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 91.643331][ T29] audit: type=1326 audit(1758641629.936:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.650244][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 91.666894][ T29] audit: type=1326 audit(1758641629.936:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.697009][ T29] audit: type=1326 audit(1758641629.936:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.720434][ T29] audit: type=1326 audit(1758641629.936:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.743826][ T29] audit: type=1326 audit(1758641629.936:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.767211][ T29] audit: type=1326 audit(1758641629.936:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.790604][ T29] audit: type=1326 audit(1758641629.936:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.814015][ T29] audit: type=1326 audit(1758641629.936:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.5.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d385eeec9 code=0x7ffc0000 [ 91.840618][ T6280] netlink: 'syz.5.858': attribute type 12 has an invalid length. [ 91.848477][ T6280] netlink: 'syz.5.858': attribute type 29 has an invalid length. [ 91.857647][ T4127] bridge_slave_1: left allmulticast mode [ 91.863420][ T4127] bridge_slave_1: left promiscuous mode [ 91.869186][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.878596][ T4127] bridge_slave_0: left allmulticast mode [ 91.884388][ T4127] bridge_slave_0: left promiscuous mode [ 91.890092][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.975383][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.984975][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.994540][ T4127] bond0 (unregistering): Released all slaves [ 92.024161][ T6289] team2: entered promiscuous mode [ 92.029245][ T6289] team2: entered allmulticast mode [ 92.048662][ T4127] tipc: Left network mode [ 92.059924][ T4127] hsr_slave_0: left promiscuous mode [ 92.066439][ T4127] hsr_slave_1: left promiscuous mode [ 92.085254][ T4127] veth1_macvtap: left promiscuous mode [ 92.090927][ T4127] veth0_macvtap: left promiscuous mode [ 92.100087][ T4127] veth1_vlan: left promiscuous mode [ 92.108426][ T4127] veth0_vlan: left promiscuous mode [ 92.270690][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 92.293816][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 92.322740][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.329823][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.337253][ T6248] bridge_slave_0: entered allmulticast mode [ 92.344297][ T6248] bridge_slave_0: entered promiscuous mode [ 92.364260][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.371356][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.380926][ T6248] bridge_slave_1: entered allmulticast mode [ 92.388385][ T6248] bridge_slave_1: entered promiscuous mode [ 92.424729][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.436138][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.458309][ T6248] team0: Port device team_slave_0 added [ 92.465666][ T6248] team0: Port device team_slave_1 added [ 92.505493][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.512605][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.538624][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.566204][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.573319][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.599345][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.630729][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.644895][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.663711][ T6248] hsr_slave_0: entered promiscuous mode [ 92.675795][ T6248] hsr_slave_1: entered promiscuous mode [ 92.689611][ T6248] debugfs: 'hsr0' already exists in 'hsr' [ 92.695540][ T6248] Cannot create hsr debugfs directory [ 92.838605][ T6248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 92.854494][ T6248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.864517][ T6248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 92.879661][ T6248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 92.909080][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.916220][ T6248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.923585][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.930660][ T6248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.977799][ T6324] team3: entered promiscuous mode [ 92.983114][ T6324] team3: entered allmulticast mode [ 93.008349][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.021014][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.030094][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.071181][ T6330] loop5: detected capacity change from 0 to 2048 [ 93.091430][ T6331] rdma_op ffff88810489ed80 conn xmit_rdma 0000000000000000 [ 93.130701][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.149599][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.156717][ T4132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.193731][ T4127] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.200820][ T4127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.275008][ T6336] vlan2: entered allmulticast mode [ 93.280276][ T6336] dummy0: entered allmulticast mode [ 93.361161][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.472625][ T6345] FAULT_INJECTION: forcing a failure. [ 93.472625][ T6345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.485683][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.0.878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.485701][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.485724][ T6345] Call Trace: [ 93.485728][ T6345] [ 93.485734][ T6345] __dump_stack+0x1d/0x30 [ 93.485768][ T6345] dump_stack_lvl+0xe8/0x140 [ 93.485779][ T6345] dump_stack+0x15/0x1b [ 93.485863][ T6345] should_fail_ex+0x265/0x280 [ 93.485877][ T6345] should_fail+0xb/0x20 [ 93.485905][ T6345] should_fail_usercopy+0x1a/0x20 [ 93.485919][ T6345] strncpy_from_user+0x25/0x230 [ 93.486005][ T6345] ? bcmp+0x2e/0x90 [ 93.486045][ T6345] strncpy_from_user_nofault+0x68/0xf0 [ 93.486062][ T6345] bpf_probe_read_compat_str+0xb4/0x130 [ 93.486091][ T6345] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 93.486101][ T6345] bpf_trace_run4+0x114/0x1d0 [ 93.486179][ T6345] __traceiter_sched_switch+0x3f/0x60 [ 93.486199][ T6345] __schedule+0xa17/0xb30 [ 93.486214][ T6345] __cond_resched+0x4e/0x90 [ 93.486227][ T6345] down_read+0x13/0xe0 [ 93.486242][ T6345] __se_sys_move_pages+0x61f/0x1360 [ 93.486326][ T6345] ? get_pid_task+0x96/0xd0 [ 93.486387][ T6345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.486459][ T6345] ? __fget_files+0x184/0x1c0 [ 93.486535][ T6345] ? fput+0x8f/0xc0 [ 93.486550][ T6345] ? ksys_write+0x192/0x1a0 [ 93.486563][ T6345] __x64_sys_move_pages+0x78/0x90 [ 93.486597][ T6345] x64_sys_call+0x2f78/0x2ff0 [ 93.486667][ T6345] do_syscall_64+0xd2/0x200 [ 93.486715][ T6345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.486729][ T6345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.486745][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.486757][ T6345] RIP: 0033:0x7f99ebaaeec9 [ 93.486766][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.486813][ T6345] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 93.486825][ T6345] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 93.486832][ T6345] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 93.486840][ T6345] RBP: 00007f99ea517090 R08: 0000200000000000 R09: 0000000000000000 [ 93.486847][ T6345] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 93.486854][ T6345] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 93.486864][ T6345] [ 93.770333][ T6365] team1: entered promiscuous mode [ 93.775428][ T6365] team1: entered allmulticast mode [ 93.842833][ T6248] veth0_vlan: entered promiscuous mode [ 93.850791][ T6248] veth1_vlan: entered promiscuous mode [ 93.871234][ T6248] veth0_macvtap: entered promiscuous mode [ 93.882099][ T6248] veth1_macvtap: entered promiscuous mode [ 93.895073][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.906845][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.919948][ T4160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929059][ T4160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.958286][ T4160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988868][ T4160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.015715][ T6380] FAULT_INJECTION: forcing a failure. [ 94.015715][ T6380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.015877][ T5366] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 94.029068][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.0.887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.029097][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.029110][ T6380] Call Trace: [ 94.029116][ T6380] [ 94.029124][ T6380] __dump_stack+0x1d/0x30 [ 94.029146][ T6380] dump_stack_lvl+0xe8/0x140 [ 94.029166][ T6380] dump_stack+0x15/0x1b [ 94.029182][ T6380] should_fail_ex+0x265/0x280 [ 94.029205][ T6380] should_fail_alloc_page+0xf2/0x100 [ 94.029289][ T6380] __alloc_frozen_pages_noprof+0xff/0x360 [ 94.029324][ T6380] alloc_pages_mpol+0xb3/0x250 [ 94.029417][ T6380] vma_alloc_folio_noprof+0x1aa/0x300 [ 94.029448][ T6380] do_wp_page+0x5db/0x24e0 [ 94.029469][ T6380] ? css_rstat_updated+0xb7/0x240 [ 94.029502][ T6380] ? __rcu_read_lock+0x37/0x50 [ 94.029525][ T6380] handle_mm_fault+0x77d/0x2c20 [ 94.029555][ T6380] do_user_addr_fault+0x636/0x1090 [ 94.029587][ T6380] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 94.029646][ T6380] exc_page_fault+0x62/0xa0 [ 94.029672][ T6380] asm_exc_page_fault+0x26/0x30 [ 94.029708][ T6380] RIP: 0033:0x7f99eb970cb0 [ 94.029723][ T6380] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 94.029739][ T6380] RSP: 002b:00007f99ea5164a0 EFLAGS: 00010202 [ 94.029754][ T6380] RAX: 0000000000009005 RBX: 00007f99ea516540 RCX: 0000000000000101 [ 94.029766][ T6380] RDX: 00000000000010ff RSI: 0000000000000400 RDI: 00007f99ea5165e0 [ 94.029779][ T6380] RBP: 0000000000000102 R08: 00007f99e20f7000 R09: 0000000000000004 [ 94.029791][ T6380] R10: 0000200000000982 R11: 0000000000000559 R12: 0000000000000301 [ 94.029810][ T6380] R13: 00007f99ebb4db80 R14: 0000000000000013 R15: 00007f99ea5165e0 [ 94.029828][ T6380] [ 94.029838][ T6380] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 94.081195][ T6382] loop4: detected capacity change from 0 to 512 [ 94.244259][ T6382] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.889: error while reading EA inode 32 err=-116 [ 94.260897][ T6382] EXT4-fs (loop4): 1 orphan inode deleted [ 94.290679][ T6391] loop6: detected capacity change from 0 to 256 [ 94.340910][ T6401] team2: entered promiscuous mode [ 94.346053][ T6401] team2: entered allmulticast mode [ 94.376539][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 94.384785][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.446515][ T4132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.486832][ T4132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.535279][ T4132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.596901][ T4132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.624163][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 94.676159][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.683536][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.690744][ T6409] bridge_slave_0: entered allmulticast mode [ 94.697579][ T6409] bridge_slave_0: entered promiscuous mode [ 94.704802][ T4132] bridge_slave_1: left allmulticast mode [ 94.710480][ T4132] bridge_slave_1: left promiscuous mode [ 94.716185][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.725725][ T4132] bridge_slave_0: left allmulticast mode [ 94.731504][ T4132] bridge_slave_0: left promiscuous mode [ 94.737309][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.796246][ T4132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.807039][ T4132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.817183][ T4132] bond0 (unregistering): Released all slaves [ 94.825276][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.832405][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.839695][ T6409] bridge_slave_1: entered allmulticast mode [ 94.846396][ T6409] bridge_slave_1: entered promiscuous mode [ 94.862823][ T6433] lo speed is unknown, defaulting to 1000 [ 94.864241][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.883333][ T4132] hsr_slave_0: left promiscuous mode [ 94.888938][ T4132] hsr_slave_1: left promiscuous mode [ 94.894665][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.902028][ T4132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.909793][ T4132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.917248][ T4132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.927350][ T4132] veth1_macvtap: left promiscuous mode [ 94.932849][ T4132] veth0_macvtap: left promiscuous mode [ 94.938445][ T4132] veth1_vlan: left promiscuous mode [ 94.943766][ T4132] veth0_vlan: left promiscuous mode [ 95.010874][ T4132] team0 (unregistering): Port device team_slave_1 removed [ 95.021098][ T4132] team0 (unregistering): Port device team_slave_0 removed [ 95.053449][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.067695][ T6433] lo speed is unknown, defaulting to 1000 [ 95.075395][ T6433] lo speed is unknown, defaulting to 1000 [ 95.082040][ T6409] team0: Port device team_slave_0 added [ 95.087107][ T6433] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.094463][ T6409] team0: Port device team_slave_1 added [ 95.101471][ T6433] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.122161][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.129182][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.155154][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.166181][ T6433] lo speed is unknown, defaulting to 1000 [ 95.174350][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.181304][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.201690][ T6438] netlink: 'syz.4.904': attribute type 10 has an invalid length. [ 95.207467][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.233972][ T6438] team0: Device hsr_slave_0 failed to register rx_handler [ 95.244041][ T6433] lo speed is unknown, defaulting to 1000 [ 95.255473][ T6440] __nla_validate_parse: 10 callbacks suppressed [ 95.255487][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.905'. [ 95.271794][ T6433] lo speed is unknown, defaulting to 1000 [ 95.274271][ T6409] hsr_slave_0: entered promiscuous mode [ 95.284570][ T6409] hsr_slave_1: entered promiscuous mode [ 95.298063][ T6440] team1: entered promiscuous mode [ 95.303260][ T6440] team1: entered allmulticast mode [ 95.309312][ T6433] lo speed is unknown, defaulting to 1000 [ 95.326137][ T6433] lo speed is unknown, defaulting to 1000 [ 95.431272][ T6409] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 95.440030][ T6409] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 95.455682][ T6409] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 95.467410][ T6409] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 95.507766][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.524470][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.534889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.542016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.561320][ T6409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.571758][ T6409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.586070][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.593208][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.668009][ T6479] lo speed is unknown, defaulting to 1000 [ 95.671147][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.770929][ T6483] loop6: detected capacity change from 0 to 8192 [ 95.815855][ T6483] msdos: Unknown parameter 'A' [ 95.841109][ T6479] sctp: [Deprecated]: syz.6.914 (pid 6479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.841109][ T6479] Use struct sctp_sack_info instead [ 95.876962][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 95.908753][ T6496] team2: entered promiscuous mode [ 95.914071][ T6496] team2: entered allmulticast mode [ 96.064523][ T6513] FAULT_INJECTION: forcing a failure. [ 96.064523][ T6513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.077703][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.077797][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.077807][ T6513] Call Trace: [ 96.077813][ T6513] [ 96.077819][ T6513] __dump_stack+0x1d/0x30 [ 96.077857][ T6513] dump_stack_lvl+0xe8/0x140 [ 96.077874][ T6513] dump_stack+0x15/0x1b [ 96.077887][ T6513] should_fail_ex+0x265/0x280 [ 96.077908][ T6513] should_fail+0xb/0x20 [ 96.077943][ T6513] should_fail_usercopy+0x1a/0x20 [ 96.078028][ T6513] copy_to_user_nofault+0x7f/0x120 [ 96.078137][ T6513] bpf_probe_write_user+0x83/0xc0 [ 96.078163][ T6513] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 96.078178][ T6513] bpf_trace_run2+0x104/0x1c0 [ 96.078269][ T6513] ? ethnl_update_bitset32+0xdcf/0xde0 [ 96.078369][ T6513] ? ethnl_update_bitset32+0xdcf/0xde0 [ 96.078391][ T6513] kfree+0x27b/0x320 [ 96.078430][ T6513] ethnl_update_bitset32+0xdcf/0xde0 [ 96.078453][ T6513] ? __rcu_read_unlock+0x4f/0x70 [ 96.078486][ T6513] ? __kmalloc_node_track_caller_noprof+0x28b/0x410 [ 96.078547][ T6513] ethnl_set_debug+0xc5/0x160 [ 96.078611][ T6513] ethnl_default_set_doit+0x3f6/0x6c0 [ 96.078637][ T6513] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 96.078680][ T6513] genl_family_rcv_msg_doit+0x143/0x1b0 [ 96.078788][ T6513] genl_rcv_msg+0x422/0x460 [ 96.078819][ T6513] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 96.078849][ T6513] netlink_rcv_skb+0x120/0x220 [ 96.078870][ T6513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.078946][ T6513] genl_rcv+0x28/0x40 [ 96.078972][ T6513] netlink_unicast+0x5c0/0x690 [ 96.079049][ T6513] netlink_sendmsg+0x58b/0x6b0 [ 96.079128][ T6513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.079151][ T6513] __sock_sendmsg+0x145/0x180 [ 96.079183][ T6513] ____sys_sendmsg+0x31e/0x4e0 [ 96.079260][ T6513] ___sys_sendmsg+0x17b/0x1d0 [ 96.079297][ T6513] __x64_sys_sendmsg+0xd4/0x160 [ 96.079326][ T6513] x64_sys_call+0x191e/0x2ff0 [ 96.079347][ T6513] do_syscall_64+0xd2/0x200 [ 96.079424][ T6513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.079446][ T6513] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.079498][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.079518][ T6513] RIP: 0033:0x7fd207a2eec9 [ 96.079533][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.079551][ T6513] RSP: 002b:00007fd20648f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.079583][ T6513] RAX: ffffffffffffffda RBX: 00007fd207c85fa0 RCX: 00007fd207a2eec9 [ 96.079672][ T6513] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000005 [ 96.079685][ T6513] RBP: 00007fd20648f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.079698][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.079711][ T6513] R13: 00007fd207c86038 R14: 00007fd207c85fa0 R15: 00007ffef1fc1988 [ 96.079754][ T6513] [ 96.405737][ T6409] veth0_vlan: entered promiscuous mode [ 96.407646][ T6409] veth1_vlan: entered promiscuous mode [ 96.433856][ T6409] veth0_macvtap: entered promiscuous mode [ 96.435431][ T6518] SELinux: Context system_u:object is not valid (left unmapped). [ 96.437888][ T6506] netlink: 304 bytes leftover after parsing attributes in process `syz.6.920'. [ 96.438225][ T6409] veth1_macvtap: entered promiscuous mode [ 96.459193][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.463971][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.482327][ T4132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482396][ T4132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482426][ T4132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482510][ T4132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.495463][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 96.495479][ T29] audit: type=1326 audit(1758641634.786:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.495542][ T29] audit: type=1326 audit(1758641634.786:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.538068][ T29] audit: type=1326 audit(1758641634.826:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.538553][ T29] audit: type=1326 audit(1758641634.826:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.538642][ T29] audit: type=1326 audit(1758641634.826:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.538917][ T6526] usb usb8: usbfs: process 6526 (GPL) did not claim interface 0 before use [ 96.542614][ T29] audit: type=1326 audit(1758641634.826:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.542676][ T29] audit: type=1326 audit(1758641634.826:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.542699][ T29] audit: type=1326 audit(1758641634.826:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.542797][ T29] audit: type=1326 audit(1758641634.826:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.542822][ T29] audit: type=1326 audit(1758641634.826:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.6.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450e8feec9 code=0x7ffc0000 [ 96.613728][ T6536] sd 0:0:1:0: device reset [ 96.768032][ T6544] loop7: detected capacity change from 0 to 1024 [ 96.802935][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.929'. [ 96.813789][ T3379] IPVS: starting estimator thread 0... [ 96.896563][ T6544] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.926852][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 96.935788][ T6544] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.957656][ T6544] JBD2: no valid journal superblock found [ 96.957677][ T6544] EXT4-fs (loop7): Could not load journal inode [ 96.962728][ T6549] team3: entered promiscuous mode [ 96.979781][ T6549] team3: entered allmulticast mode [ 97.058989][ T6547] IPVS: using max 2352 ests per chain, 117600 per kthread [ 97.282348][ T6565] loop6: detected capacity change from 0 to 512 [ 97.289330][ T6565] EXT4-fs: Ignoring removed oldalloc option [ 97.538322][ T6570] FAULT_INJECTION: forcing a failure. [ 97.538322][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 97.551096][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.0.937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.551123][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.551134][ T6570] Call Trace: [ 97.551141][ T6570] [ 97.551150][ T6570] __dump_stack+0x1d/0x30 [ 97.551196][ T6570] dump_stack_lvl+0xe8/0x140 [ 97.551215][ T6570] dump_stack+0x15/0x1b [ 97.551233][ T6570] should_fail_ex+0x265/0x280 [ 97.551258][ T6570] should_failslab+0x8c/0xb0 [ 97.551284][ T6570] kmem_cache_alloc_node_noprof+0x57/0x320 [ 97.551372][ T6570] ? dup_task_struct+0x70/0x6a0 [ 97.551476][ T6570] dup_task_struct+0x70/0x6a0 [ 97.551498][ T6570] ? _parse_integer+0x27/0x40 [ 97.551524][ T6570] copy_process+0x399/0x2000 [ 97.551544][ T6570] ? kstrtouint+0x76/0xc0 [ 97.551626][ T6570] ? kstrtouint_from_user+0x9f/0xf0 [ 97.551647][ T6570] ? __rcu_read_unlock+0x4f/0x70 [ 97.551667][ T6570] kernel_clone+0x16c/0x5c0 [ 97.551694][ T6570] ? vfs_write+0x7e8/0x960 [ 97.551743][ T6570] __x64_sys_clone+0xe6/0x120 [ 97.551770][ T6570] x64_sys_call+0x119c/0x2ff0 [ 97.551792][ T6570] do_syscall_64+0xd2/0x200 [ 97.551848][ T6570] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.551932][ T6570] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.551962][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.551985][ T6570] RIP: 0033:0x7f99ebaaeec9 [ 97.552001][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.552087][ T6570] RSP: 002b:00007f99ea516fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 97.552107][ T6570] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 97.552118][ T6570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 97.552129][ T6570] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 97.552139][ T6570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 97.552149][ T6570] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 97.552165][ T6570] [ 98.185490][ T6565] EXT4-fs (loop6): 1 truncate cleaned up [ 98.191607][ T6565] EXT4-fs mount: 4 callbacks suppressed [ 98.191620][ T6565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.740760][ T6248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.770585][ T6587] netlink: 3 bytes leftover after parsing attributes in process `syz.0.944'. [ 98.784400][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.943'. [ 98.794284][ T6587] 0ªX¹¦À: renamed from caif0 [ 98.799722][ T6587] FAULT_INJECTION: forcing a failure. [ 98.799722][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 98.813190][ T6587] CPU: 1 UID: 0 PID: 6587 Comm: syz.0.944 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.813240][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.813251][ T6587] Call Trace: [ 98.813258][ T6587] [ 98.813267][ T6587] __dump_stack+0x1d/0x30 [ 98.813289][ T6587] dump_stack_lvl+0xe8/0x140 [ 98.813306][ T6587] dump_stack+0x15/0x1b [ 98.813324][ T6587] should_fail_ex+0x265/0x280 [ 98.813393][ T6587] should_failslab+0x8c/0xb0 [ 98.813419][ T6587] __kmalloc_noprof+0xa5/0x3e0 [ 98.813446][ T6587] ? __register_sysctl_table+0x54/0xc00 [ 98.813511][ T6587] __register_sysctl_table+0x54/0xc00 [ 98.813546][ T6587] register_net_sysctl_sz+0x19e/0x1c0 [ 98.813652][ T6587] __addrconf_sysctl_register+0x240/0x340 [ 98.813702][ T6587] ? kfree+0x193/0x320 [ 98.813726][ T6587] addrconf_sysctl_register+0xe6/0x130 [ 98.813753][ T6587] addrconf_notify+0x548/0x930 [ 98.813805][ T6587] ? __pfx_addrconf_notify+0x10/0x10 [ 98.813826][ T6587] raw_notifier_call_chain+0x6f/0x1b0 [ 98.813893][ T6587] ? call_netdevice_notifiers_info+0x9c/0x100 [ 98.813926][ T6587] call_netdevice_notifiers_info+0xae/0x100 [ 98.813959][ T6587] netif_change_name+0x415/0x6b0 [ 98.813993][ T6587] ? nla_strscpy+0xec/0x120 [ 98.814095][ T6587] do_setlink+0x80b/0x2810 [ 98.814116][ T6587] ? save_fpregs_to_fpstate+0x100/0x160 [ 98.814154][ T6587] ? _raw_spin_unlock+0x26/0x50 [ 98.814220][ T6587] ? finish_task_switch+0xad/0x2b0 [ 98.814241][ T6587] ? __schedule+0x6b9/0xb30 [ 98.814340][ T6587] rtnl_setlink+0x311/0x420 [ 98.814388][ T6587] ? selinux_capable+0x31/0x40 [ 98.814417][ T6587] ? security_capable+0x83/0x90 [ 98.814500][ T6587] ? ns_capable+0x7d/0xb0 [ 98.814532][ T6587] ? __pfx_rtnl_setlink+0x10/0x10 [ 98.814563][ T6587] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 98.814597][ T6587] netlink_rcv_skb+0x120/0x220 [ 98.814669][ T6587] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.814704][ T6587] rtnetlink_rcv+0x1c/0x30 [ 98.814731][ T6587] netlink_unicast+0x5c0/0x690 [ 98.814807][ T6587] netlink_sendmsg+0x58b/0x6b0 [ 98.814835][ T6587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.814862][ T6587] __sock_sendmsg+0x145/0x180 [ 98.814937][ T6587] sock_write_iter+0x165/0x1b0 [ 98.814966][ T6587] do_iter_readv_writev+0x499/0x540 [ 98.814991][ T6587] vfs_writev+0x2df/0x8b0 [ 98.815057][ T6587] do_writev+0xe7/0x210 [ 98.815160][ T6587] __x64_sys_writev+0x45/0x50 [ 98.815180][ T6587] x64_sys_call+0x1e9a/0x2ff0 [ 98.815201][ T6587] do_syscall_64+0xd2/0x200 [ 98.815231][ T6587] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.815306][ T6587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.815335][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.815357][ T6587] RIP: 0033:0x7f99ebaaeec9 [ 98.815373][ T6587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.815390][ T6587] RSP: 002b:00007f99ea517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 98.815484][ T6587] RAX: ffffffffffffffda RBX: 00007f99ebd05fa0 RCX: 00007f99ebaaeec9 [ 98.815497][ T6587] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 98.815526][ T6587] RBP: 00007f99ea517090 R08: 0000000000000000 R09: 0000000000000000 [ 98.815538][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.815571][ T6587] R13: 00007f99ebd06038 R14: 00007f99ebd05fa0 R15: 00007fff16b19298 [ 98.815590][ T6587] [ 99.238859][ T6594] loop6: detected capacity change from 0 to 2048 [ 99.294209][ T6597] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 99.302031][ T6597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.948'. [ 99.384178][ T6594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.499225][ T6610] vlan2: entered allmulticast mode [ 99.510024][ T6610] dummy0: entered allmulticast mode [ 99.632419][ T6615] loop1: detected capacity change from 0 to 512 [ 99.639188][ T6615] EXT4-fs: Ignoring removed oldalloc option [ 99.648380][ T6615] EXT4-fs (loop1): 1 truncate cleaned up [ 99.655078][ T6615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.166734][ T6620] loop4: detected capacity change from 0 to 512 [ 100.220552][ T6620] EXT4-fs: Ignoring removed oldalloc option [ 100.319347][ T6620] EXT4-fs (loop4): 1 truncate cleaned up [ 100.344276][ T6620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.373937][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.955'. [ 100.416130][ T6623] veth1_macvtap: left promiscuous mode [ 100.469945][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.494585][ T6248] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 100.573896][ T6631] loop4: detected capacity change from 0 to 1024 [ 100.580606][ T6631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.604710][ T6631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 100.613066][ T6631] System zones: 0-1, 3-12 [ 100.618261][ T6631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.637313][ T6631] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.959: bg 0: block 88: padding at end of block bitmap is not set [ 100.735168][ T6611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.765745][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.860819][ T4127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.985971][ T4127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.086348][ T4127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.195894][ T4127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.268582][ T4127] bridge_slave_1: left allmulticast mode [ 101.274309][ T4127] bridge_slave_1: left promiscuous mode [ 101.279935][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.289428][ T4127] bridge_slave_0: left allmulticast mode [ 101.295118][ T4127] bridge_slave_0: left promiscuous mode [ 101.300897][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.336326][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.375303][ T6642] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 101.383056][ T6642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.961'. [ 101.446407][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.481935][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.502689][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 101.502704][ T29] audit: type=1326 audit(1758641639.786:6899): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ebaaeec9 code=0x7ffc0000 [ 101.509396][ T29] audit: type=1326 audit(1758641639.796:6900): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6637 comm="syz.0.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ebaaeec9 code=0x7ffc0000 [ 101.557583][ T6659] loop1: detected capacity change from 0 to 2048 [ 101.567206][ T4127] bond0 (unregistering): Released all slaves [ 101.579734][ T6659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.580838][ T6664] loop7: detected capacity change from 0 to 512 [ 101.607760][ T6664] EXT4-fs: Ignoring removed oldalloc option [ 101.634189][ T4127] hsr_slave_0: left promiscuous mode [ 101.644072][ T6664] EXT4-fs (loop7): 1 truncate cleaned up [ 101.657757][ T4127] hsr_slave_1: left promiscuous mode [ 101.674049][ T6664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.697492][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.704944][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.719931][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.727396][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.736412][ T4132] ================================================================== [ 101.737894][ T6409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.744500][ T4132] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 101.761997][ T4132] [ 101.764316][ T4132] write to 0xffff8881048ead08 of 44 bytes by task 6671 on cpu 1: [ 101.772033][ T4132] tty_set_termios+0xc0/0x8c0 [ 101.776715][ T4132] set_termios+0x496/0x4e0 [ 101.781131][ T4132] tty_mode_ioctl+0x379/0x5c0 [ 101.785812][ T4132] n_tty_ioctl_helper+0x91/0x210 [ 101.790741][ T4132] n_tty_ioctl+0x101/0x200 [ 101.795146][ T4132] tty_ioctl+0x845/0xb80 [ 101.799373][ T4132] __se_sys_ioctl+0xce/0x140 [ 101.803945][ T4132] __x64_sys_ioctl+0x43/0x50 [ 101.808519][ T4132] x64_sys_call+0x1816/0x2ff0 [ 101.813180][ T4132] do_syscall_64+0xd2/0x200 [ 101.817674][ T4132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.823560][ T4132] [ 101.825872][ T4132] read to 0xffff8881048ead22 of 1 bytes by task 4132 on cpu 0: [ 101.833401][ T4132] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 101.839233][ T4132] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 101.844774][ T4132] tty_port_default_lookahead_buf+0x91/0xc0 [ 101.850655][ T4132] flush_to_ldisc+0x285/0x340 [ 101.855315][ T4132] process_scheduled_works+0x4cb/0x9d0 [ 101.860765][ T4132] worker_thread+0x582/0x770 [ 101.865344][ T4132] kthread+0x489/0x510 [ 101.869396][ T4132] ret_from_fork+0x11f/0x1b0 [ 101.873972][ T4132] ret_from_fork_asm+0x1a/0x30 [ 101.878720][ T4132] [ 101.881033][ T4132] value changed: 0x13 -> 0x31 [ 101.885685][ T4132] [ 101.888030][ T4132] Reported by Kernel Concurrency Sanitizer on: [ 101.894157][ T4132] CPU: 0 UID: 0 PID: 4132 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.904554][ T4132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.915024][ T4132] Workqueue: events_unbound flush_to_ldisc [ 101.920840][ T4132] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.942742][ T29] audit: type=1400 audit(1758641640.226:6901): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[2546]" dev="pipefs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 101.976106][ T4127] veth1_macvtap: left promiscuous mode [ 101.981718][ T4127] veth0_macvtap: left promiscuous mode [ 101.995303][ T4127] veth1_vlan: left promiscuous mode [ 102.000543][ T4127] veth0_vlan: left promiscuous mode [ 102.106704][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 102.115663][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 102.339741][ T6674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.495495][ T4127] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.554292][ T4127] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.604022][ T4127] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.673898][ T4127] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.926815][ T4127] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.985348][ T4127] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.035075][ T4127] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.104884][ T4127] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.176540][ T4127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.235033][ T4127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.284747][ T4127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.334556][ T4127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.385244][ T4127] bridge_slave_1: left allmulticast mode [ 103.390910][ T4127] bridge_slave_1: left promiscuous mode [ 103.396670][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.404523][ T4127] bridge_slave_0: left allmulticast mode [ 103.410205][ T4127] bridge_slave_0: left promiscuous mode [ 103.415899][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.424356][ T4127] bridge_slave_1: left allmulticast mode [ 103.430082][ T4127] bridge_slave_1: left promiscuous mode [ 103.435766][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.443530][ T4127] bridge_slave_0: left allmulticast mode [ 103.449146][ T4127] bridge_slave_0: left promiscuous mode [ 103.454901][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.462964][ T4127] bridge_slave_1: left allmulticast mode [ 103.468597][ T4127] bridge_slave_1: left promiscuous mode [ 103.474319][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.482101][ T4127] bridge_slave_0: left allmulticast mode [ 103.487763][ T4127] bridge_slave_0: left promiscuous mode [ 103.493416][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.501567][ T4127] bridge_slave_1: left allmulticast mode [ 103.507229][ T4127] bridge_slave_1: left promiscuous mode [ 103.512915][ T4127] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.520449][ T4127] bridge_slave_0: left allmulticast mode [ 103.526115][ T4127] bridge_slave_0: left promiscuous mode [ 103.531773][ T4127] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.634491][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.644181][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.653390][ T4127] bond0 (unregistering): Released all slaves [ 103.662971][ T4127] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 103.671303][ T4127] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 42:57:93:ea:04:0d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 103.714804][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.724100][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.733288][ T4127] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 103.741740][ T4127] bond0 (unregistering): Released all slaves [ 103.749874][ T4127] bond1 (unregistering): (slave veth7): Releasing backup interface [ 103.758732][ T4127] bond1 (unregistering): Released all slaves [ 103.805089][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.815047][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.824460][ T4127] bond0 (unregistering): Released all slaves [ 103.884594][ T4127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.894179][ T4127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.903559][ T4127] bond0 (unregistering): Released all slaves [ 103.946503][ T4127] tipc: Disabling bearer [ 103.951537][ T4127] tipc: Left network mode [ 103.956128][ T4127] tipc: Left network mode [ 103.965431][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.972921][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.980361][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.987857][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.996938][ T4127] hsr_slave_0: left promiscuous mode [ 104.002998][ T4127] hsr_slave_1: left promiscuous mode [ 104.008682][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.016295][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.025217][ T4127] hsr_slave_0: left promiscuous mode [ 104.030869][ T4127] hsr_slave_1: left promiscuous mode [ 104.036533][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.043963][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.051404][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.058817][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.067676][ T4127] hsr_slave_0: left promiscuous mode [ 104.073291][ T4127] hsr_slave_1: left promiscuous mode [ 104.078816][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.086252][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.095899][ T4127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.103350][ T4127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.116453][ T4127] veth1_macvtap: left promiscuous mode [ 104.122242][ T4127] veth0_macvtap: left promiscuous mode [ 104.127879][ T4127] veth1_vlan: left promiscuous mode [ 104.133584][ T4127] veth0_vlan: left promiscuous mode [ 104.139233][ T4127] veth0_macvtap: left promiscuous mode [ 104.144829][ T4127] veth1_vlan: left promiscuous mode [ 104.150050][ T4127] veth0_vlan: left promiscuous mode [ 104.155978][ T4127] veth1_macvtap: left promiscuous mode [ 104.161543][ T4127] veth1_vlan: left promiscuous mode [ 104.166924][ T4127] veth0_vlan: left promiscuous mode [ 104.277366][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 104.286985][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 104.338007][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 104.348023][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 104.393040][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 104.402211][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 104.449647][ T4127] team0 (unregistering): Port device team_slave_1 removed [ 104.458538][ T4127] team0 (unregistering): Port device team_slave_0 removed [ 104.484520][ T3386] lo speed is unknown, defaulting to 1000 [ 104.490241][ T3386] infiniband syz2: ib_query_port failed (-19) [ 105.527507][ T4127] IPVS: stop unused estimator thread 0...