last executing test programs: 4.232706904s ago: executing program 0 (id=169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) writev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.913856569s ago: executing program 0 (id=172): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 3.84033364s ago: executing program 0 (id=173): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 2.835512366s ago: executing program 0 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x200, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00770a7eed11b4c6805f01ffc4910700004f78d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmmsg$unix(r10, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001e00), r9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) r11 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r11, 0x1, 0x1c, &(0x7f0000000000)=""/138, &(0x7f0000000100)=0x8a) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00'}) 2.789210506s ago: executing program 1 (id=189): socket$netlink(0x10, 0x3, 0xf) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 2.245420245s ago: executing program 4 (id=196): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 2.012894429s ago: executing program 3 (id=198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r2}, 0xc) 1.92953348s ago: executing program 1 (id=200): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) exit(0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x22a000, 0x800}, 0x20) close(r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) close(0x3) 1.582329425s ago: executing program 0 (id=201): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.559684436s ago: executing program 2 (id=202): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.543649816s ago: executing program 2 (id=203): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0xe8) lchown(&(0x7f0000000a80)='./file0\x00', r11, 0xee01) getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000300), 0x1, 0x4a3, &(0x7f00000005c0)="$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") r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_read_part_table(0x61a, &(0x7f0000000000)="$eJzs0z+IHFUcB/Dvm92d3QX1gkQQDXqgrSlME4sjd2iUIJrDP42N2AiCVcDCQm5DUmtja0RIIRamUauIFnIn+Pe0CVYiwcZKEUUIjMzszt1JLIQTD8PnU7x57/d+b94b3m/C/9zZ1aYp09ySDLrx0l3vJsOmaTaS2XCRVKdJSjJJRv3C5eTpd5546MlH19fa3EXwyE1dfulG89yS4892ncHurs3S/dtvffbgL7N8cc83W4N5WpLLVTJLTiQ7oS6QSQZvXPy+7AYhubSyuXSuasYZrbxQLwrugTJLW5FNa6OULjhZLBgnOfbRoqj2b9AXZCm58sgrV+/dPt5uV7XFv7X9x26tlnw+/TH9SW5PctvjO8dq0+a/0Kz7awbX7VO3Tf835v0PFl/CAevq7/yZ+uNhVpNcefPwD6VU3VSVqr3U35umGc6v+FozSe5ebqeuv2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9ubSyuVTvGR97/r6Td75WraYqyddtpOqnJm0zSPJlWURef+xf2f/c+TPTjBcvHSWpT/984eajX22NcvpCt++hpMyPUv11eb3vA3Cg5vc/yqsvr/w2mocmPy3mbv3uk43+gn+tJxuHX5q23Vmmk375e3teVU7sdvvO+O/2VDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGM7+fCp5fW16qmkKsNJkurQxc1uZta1TZPc8eEzb7/46dq3g7pfdS2nSp5r9rxnfTx/Xq6acY4kR4ftqM7V9nG2bQY7ueW/+TT+gT8DAAD//5i3aqc=") 1.508440937s ago: executing program 3 (id=204): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 1.385425729s ago: executing program 4 (id=205): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x5000000, &(0x7f00000009c0)=ANY=[], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r4}, 0x38) r5 = fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x70, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES16=r0, @ANYRES64=r7, @ANYRES16=r3, @ANYRESHEX=r7, @ANYRES16=r1], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") prlimit64(0xffffffffffffffff, 0x7c1a280e768f1140, &(0x7f0000000200)={0x8, 0xec00000000004}, 0x0) r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000840)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@mb_optimize_scan}, {@grpjquota}, {@norecovery}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x525, &(0x7f0000001a80)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r10}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r12, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) 1.252194241s ago: executing program 2 (id=206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x1, 0x3, 0x5, 0x0, 0x800001, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000006680)) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r4, 0x4e06b000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x44110) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='kfree\x00', r9}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r10, 0xffffffffffffffff, 0xee01) write$RDMA_USER_CM_CMD_NOTIFY(r10, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1.062583094s ago: executing program 1 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd29}, 0x24}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x3}, 0x18) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 710.385909ms ago: executing program 0 (id=208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgrcv(0x0, 0x0, 0x6, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x4, &(0x7f0000000000)=[{0xfe9, 0x7, 0x80, 0x800}, {0x4, 0x6, 0x57, 0xa}, {0xdbe, 0xa, 0x1, 0x9}, {0xf, 0x2, 0x1, 0x4}]}) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4075, 0xfeb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000800)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000100)={r9, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000380)={r9, 0xdf30, 0x5}, &(0x7f00000007c0)=0x8) syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYRES64=r5, @ANYRES32=r4, @ANYRES32=r10, @ANYBLOB="bb2101350000000014fa4eb10055f2e2c6a706b4c68f5d77052c5836c6650ca26ac3918823f5871394a6263761f854da2ed400000000b9b3a883eae8943a72ff7903243bd9d2ef1fd65c9306d808d80c", @ANYRESOCT=r6, @ANYRESOCT=r2, @ANYRES16=r1], 0x1c}}, 0x4000054) socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000440), &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0x0}}, './file0/../file0\x00'}) chown(&(0x7f0000000300)='./file0/../file0\x00', r11, r12) r13 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000980)={0x3, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000740)=""/49, 0x31}], &(0x7f0000000940)=[0x0, 0x8be9, 0x0, 0x7, 0x9, 0xa548]}, 0x20) r14 = fsmount(r13, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r14, &(0x7f0000000080)='./file0\x00') 626.51969ms ago: executing program 3 (id=209): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = dup(r0) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELTABLE={0x130, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xc8, 0x6, "82dfc232111b402c5b86d8e1aa7b711fa4c5b2907f8d5f580e33329b9e1c1cf6e3a66146dd9b66426528464f3aeccd0b14e74d8be342f5a070dbe336d253c81f3bbea9e48fe0e5d872447d7824a149e219d7cfc61bb11fde10cbfa4d1c1a620653526d45f41eee0b75d5248f12dbd667863e91c02f51018c060350426865225b27664d8b0b0d4cde217f6d0e63689edd45342dcffb6fe1b95f62ae813bca2f7dd8bbdaf5a00cb7af5df7cde6ee41661a761398383cd4b7b2f44121173f72e17df0707e6e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8001}, @NFTA_SET_USERDATA={0x17, 0xd, 0x1, 0x0, "a1ddab622e73f47c06337a21ff4a2191669a19"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x134, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x64, 0x6, "69d605e0a2954aabbcff50c2e163e0fa86bc12dd97202d4d72062d918befeb48fbdc9998cc9021561a8fceaa906c740d736d02e7793f400284ecca49b9d04272f6845a47e4d4a42e640e9c84c5c59362169daffcc778d4ebafa56066c8b5a751"}, @NFTA_TABLE_USERDATA={0x99, 0x6, "8168e4d08aa1413193fa78bd47b39d55b509162acdfde539906dc4588a3cd76ee8c04a7bfed7befbd4ebfce281f3e42eb955189f7da6bad7b26f689b78c81ef65aea0b1f24b380bc342bc328b84cfda511828a9b67475391f341b4a03bcbae04cc099c92dda56065faa774b71c3db699c42f9da019f362904599f55697c9c1fa496bd6c0eefde24e2f061fed5daf008ec2da0a8682"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x77, 0xd, 0x1, 0x0, "0b8ad73217101cf8e135f42d627246cd4fd6fe8d057719449eb568263cc0446ac6078338c1cd4b5865d2eab4a979852fd4bfc386a7a0bd16dce9dcb36abe48c8159d143599d299360e2566051ba727a239f8c690ce1253be7170a82e5fd7e72b9667de2c315d8b16f484021969f1292f255486"}, @NFTA_SET_USERDATA={0xae, 0xd, 0x1, 0x0, "39e3ca5dcc23202f6fa02ae21577e42dd3f5ee6c01bfd8d8a9f10b2316da09abe63a955b2d047bb78cdda95a67fa7d910ee3d9db87faf2954983d7cff3bac7b4790ccd5fb563999ad34441912e98c96e8e8c54fe475d704ed09fba2fc6f0fd5dbb26ec523716454a8cf3ade388518313e9dfae21527abe7f4893881cae192a15d3039ed1390724ede6f32865a7d9e00fe78fe591ee646680c036761960c88544af96189e0c32aca9f4c3"}]}, @NFT_MSG_DELFLOWTABLE={0x2bc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x45}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000940), &(0x7f0000000980)=0x4) timer_create(0x5, &(0x7f0000001a00)={0x0, 0x30, 0x2, @thr={&(0x7f00000009c0)="801cb8286c9d2df34131fcdc86a3", &(0x7f0000000a00)="9e57d69d8395a302aed3e471e481e93a90d2e2591eae74eabd4f24a07243b05b5a9b7f9e9dae0607a45b515f5a3b3225c1d7a90e367895d3bf08ddecd862395d3fa5e8afdb93282591afa2f04d6eb28dd450135f668be3107b494801e32e1aa5f25ba7bbfc729f3a6ae6e40fa4435ec0945e746ab6f2449225cca3bb5c7b5e94ce200714013350d696494704c93000f8391c0a9bec285b61c82571075c2263ebf08a29f1c80a2d358927c97fe978659e367665e0b11de39003c913ce545c1f4fda3e6333cd9b6bffe14aba6374b6cb96fc92d495321ff3c2f0ec27a4467071569a153c6d120e8fffb752f3a3146066726f7e459cd75685679163d0ab3b1b23997b0b67605021ebc29741733e8ede875bb7b21b1a0bf86141b568f9471e4e26402a7dfbe612d481ed13d8e4c9c1e54a812cf1da085ac72777d971c6d73da7ee048583715c888041419fc7cfbc0ef461d41e0040a19f7282b341edf70fa4ee2ceb391e4a5bcf36a10a92e2c3c521707562671f88ac92a53f135f33d8421598a6aa52af10eae61fbf2440ed51802fe4a91025f42c60595c673456656747162b223c94b455c2880d37a3eaf130f630f6f1a9b7a1dcb5566d19e5151c13800000b35d18239b48416a682839cc9045a9105b4c9c278b1c77d7d2ffe24c7918202b5eb907ce106e643fead1d687fa79687731358f8f808b755c447eb2f0f1df1505b35485cc1c7aa0b838fc01a038e33702d9b3e284c32fc7b130fc76d7c84316fc7571556cd4527ee8585f04f32ea981fecedbb4134b59e0f8edc7ae0a43506c705dc86b4126d0f93b2d602c150638e153b56f203eabdefab57382739ba3565fb5b7002bf59ec43642743087265edb908e29bcbd1c78690a43205e59b6833609d1cbcffde6be265a98ace36eb192337d47be6782fbbe47637bf27e2c1dd929e36842e8b50ea307f48181f8e3f855b5b5c9b8f78ca814bc4e6b1db3ed32f314254b9ce3045f5cd828f5a784cbfa2bb8c35fc047bc8c8e523b86fd8df5dc88ecc008a52a6ca43b8c50c8ad68492a514249212397d51269fc97c0a0b2f7488f569ccc6222c0b9804996a291cda57c6fdb587ba3eacaebadce9883493bc5146f8c3f5751b4f246b891cb32b01246313b3dfae29371032902067272aa494b2c977519f25469f1f0805e676ff8a419a1ad57b0d3e2cc47b1defe267ea2bfc4fcc1415404ec307a889efb00e5770bc4e6d93135e6106fb2470fa9bc98832a99816d7d2ab7ce5439b8038a3e8c3034363d7f441b5452f7c1d8ef18ee811086543588cfda6c4b44ebf45846c7a4bd9246fcd9e71e443c60e9f5af427a7735c3e6db08faa3e2b4f216d704e3f2ef76af96b1f814849aad04038d0bef7d670907b7a43c40516a0913f7cd777471faaa3d7b465cb8d16918ca1e990494e8b7fc04ceb071676e6c5db84b2bd4f10acf638aa4273ec04d8d751ac49c6ed6b6b088a7eab9fc70db0bd8bb0e6633ef3900ab8208565a189d9aa3eedb7e632f689e32935ebf495b68589c9b3f139767455c4381d145a5ffec4b28e4f8727cf5baaceeaa950a81c35c64276799632c7eb65e7aa360fce0f8432db8cfb53eb866ad31e1eee38d2af02eaa5766db86998e9215f7881dc72aef7cf99382678412e3822b53de3e7a8decb4791cbe38e7a8e9531ce23d9b5b6d6a2390db6c8296d352fb3b27302de953399dd644685588b9e685eea7bde945b79988cd9e720e8e400e26134dcf6619e802e6506aaaebc2b465882a4a78b84ad8ba880fd28c0eb514dbf06479d75a546f3f201352ced9c2a1f9166aafe0fc236526312663e96060e8225d288251bd973c630bea717a79207596cc5e3454a11571c0cf9c5394489db86f75368ea05e91431a2142c41092170ab3f816067bbdaf01927c8bef72ada9102e27e60f3bc9619c42cc4f6ee99d79bb13984b79942604e5d93f004ff2524632c401009a40b8cf891f5095e2ab156ed083995d43281f1eca24d3c11c5b8fde8d0c003c5e43b5b43d44e1d0628473e8e279537bd06c80ecd13ebf9646637017e5cf68f6dba63a5c9cc26f0fc156f42192d3377347ec16071b881fae45f6af6531767f0818413e56c2e1505721d82a11187e9a5748830de65e045638472b82dadaa2e798b09fad401ab326d454bd8066fbdb7fadf6bfd4343c8e845d733cc489051b704c2d95bb041e0909e51979c06444db11d3d81903b6acc1feb8ee75078510f2fdd665ecf9dd56c32bd9af4a61bf112a691f7409e6bb491484390de3a997abf36af41ad42c2e176ffed9443b9e819a1bfd8b70b4630821eacf416a32860c5072c321f3644e2375c1e517bb5e5886366bc5ad82a29712e826baf384be29789d3821cbf0a2e7687a337c6f5c5c6e2745d36844be2f895bb42a900ab55bf7f0de9d264126657601b02ea2e7fedfc79c959c2de29a3ba31a55e0f028df7794ac873f0519612a7a40f849327714217d49f3c38b7691360968453edae3da885d3df59baaed3686fe9bd2137d73f780132ac32ebecad64cfa1bab3d430140d75353b9f717a7dd24a9276dd964c8c6c9c47e6f8a0a180916db729da6d6a857280701736aef5ea23f32ebb892116863d937bceb981c484e1d36d197ded2fd65be00759b018fe3f7cf5e56fb6a28d708e6a54b90c25d19d417f89255499661c3a49b86a4f84380dc2d4c9f6b2dd541bbe353fba21cd0f7769479c0e4445d38ab03fb11f5aba2534de133da2d09697e0416d5342b964f2847ad52e9faf6bf6ce20a057f566db9787f8790259d817afef353d4b20377e99fd64c6a5cdbef2ff1d95126fa61979cc823530b2c39a575d2d3f4e56530219d484181494565cb0b4fd2a4ff0b55f300eaba46eb46ad270f3c684d7140b748167a59b673d0d992aac4d76797f9f92b25997110a897dd1a4d055835f8e626f06b5e93f42bc4af8d88a9bf752ef6f5ef932359476d9d53eefdf78082391f800dc237e2b02591ef0fcb5993e5b4125ed231cde7fb5e5085bdb227bbe525fc511aaf85a2cb039ae57fc89c14cc6fab66000e8baf8f1c169b5e2eb0da8409df61b5cb1c99e0e4f8616ae5c3b6c36863eea0f336e36f72d083101d0d830dc30d3b5fcb165d349d7defb2437762adae8127958a6afd74db6959f9d003a7808ca09a54f8292ce28fb2106dc2e4307a5f2425c698dc042470df1dc006ea4f32d85c6526441f6aba65f353f399fa90fc6d839d52ec8dea29e9c378e13b68ab41cb45debe37be1943a1a0713d31c5985f3e4fdddd893ce0d0b823fe7b79a9a39f042d95270ec0d5142afe77cd422c7cede280262c0acd890d34230de2059cca3dbf22ba8065245962b0b3dc2dd2d780dec02fba2afbf8bee04bf8a56c82c3daa71078411c9d0819e216098dc8bff3fe0f38def368c28caa4bf2717449488e66d84adf35711918a18a01b9bd710686d8e2867c4a51146d5bcccb9c8a73d3499ded7f54fc0be841531a410aaf560e82cb83835e0fcb43c2e6bb8b98e7188a4b5d08f83f4384af5e81f60630b2f05b94a743063098ded4d5577882fbdfe5ae7ec884750241f6be0f707de455237bf9b2ee4a44ce08087a92009e9593fdbd729d1065319919ed7b343b3c12e4ba374e1d72b0c121b29736b746aa693f21eb3c25186c1241c6c67d60894a2d93132d6d53fbca9965c432f03213e14164a4ed9f1621615213a1c3744c4ed2539aef1831d840ca481515ba6b1f6b45a95edaec6a3b25f11e7777d1a554af31b1258a4f315a2a72a00aa366b60e18c279f424dbcd1729f7f55fcf5fc75580d610a2fffcf3080495ce3fcec89572600f2854a8bb698709120206890c88f71e805ebaac56cd672e51ffde262ed8d03cb16ac6c8627dc968f180d479be50e68dea567018afb49e18cdb35f4052105fed9d0ca18fe1a03618b02368e563fa6eb53b70e366c5a9644231e763a3342ca17fe34e686541887cc0b258802ed31fd7c69d1b84464034d54bbfe7582fa35778a817a66bdd8a3bf59efe515b76aac16399d55c79ace4d06d9f789138085ea28184fa294b531918bc86d327ff8b08525aed78d495583de730138ee4ef658e505f753895cb7b2b80dd190c0f27d44d7985630de51a9c0cb2029a6340fb54010d85256755afa004f8d4f92f9f3532b2268c2343c0f0c166074a050c771b8bd92d5063b5fa1d850498be46c3b788c034edefd511c205827a92ea65c941bd31840546d7697803272f19a70e3fc941fbc436f2b253bbf88f87567cd8a1cf733d3b4afa32805bcaba613d1a7663ade8d1596bb1eaef57ca13956878189f2d6eb9fad1553a80d8fb56390e4652c285e46e8c7680bcc0edfdbe74c454004310674b719605935236029cd08c92dd44fe2addde02d96eae48595b391ee239a42ee9394b8018db1cd13b5f5a6298f1157bd22ec66d13ff694f4dc64ccc0607caa22f07069a53f8820cd152cbdbf8964427fddde1c28c9c871c4f03c948f38eda2ec1be0b05bf2fcc4c0606d832cb6eada506c1d16197d053fa68dd0e57f39f9294636822e4396d64a864de617d28ab571f18de00257b22b64fe936b7dcd9888ed9cd432c5458347e6f9df1ecb5b8db8341b88ed6d9b577888e035258894419ae4a6da7b2d24eb42b47dfd35d9f7f73cd009ed30591cbd142225bc6ae6942af45a37cb166cbcbc11244ff857d1d728b1aa5b67b42f1efd6993b855124a03d9852a0ac12475cb3312687b55f3c3d2c4580188a259b5724efe9c34fb2516ea56090a43e7ded3ef0767b50d73bfc6f37935c0d144c33b935544cff370108bfa4c9d8781e075a68ecf64dd2b58e4fc98cb85f4ad10326dd61f01407521286a027b77d9c56a134596ba343f3fada3ebfe7f1df36a46c7f6e9e948c45f8ead645d24300e5ae656452e691f99e4e82f6cbdec7c692206cbb7dd1b242f900a2c59190b6904785a62f609ab3b882cb14b794f6e698b5ad1abcb1b76519990baaa3ef501c1c7f95b99c5cff1ccd382f074b2d8273b9e47c20ce3ef692751c0946dba7a48bebe98c780055f580cb5fa85f5f6caf0566ce64b19e55a1dc8418c67a1867823cccd7d73b8088c8594e9c63b46acbae7c62939c7048390e06ed1f173db5b815cd15f456c56f9689a44bb37db0f06be5080d797597e89f28dfce45646da37587d6c0cbc70e1e89f4b62d4756700f4f11674fbce7aa7ddb24ade34b902a53a3cad0c9c79543992b71b42717a4239f197d6bb6a77935a30dc819eb9d4f33f921f98b1fc86fefed9849ba66c8a5534d6e36e7bfd21474d3775150e147659b4efdd3a86af59927070e7654bf144ccc7ebe27d4de8d246669bcfc22d00785955daa22d1145a74b81f7be183b120a0e3dc6e5efec12341661b332c531735163d5f3fcc15081d4d9f0508ac5b3adafa6ac30353fbaa04c88c9d7c78abcfb4965f3b38f53ede34129005f689204c210ab330d043067d8565ad15360051e751efbb3daee55dc7d03b4e4396ed3a4eccf374dc352ce3ceb4c85b573a67ccc7a7792c1a321b2bab8a2adb63b4603b23cecae18a1600a27c774609ff0e5f8df2b2987a114ce86307fbcf2e07300c4b3598abcc6780e94be853ec319abd1b5a7776c9f59144790e10f42566739384436ac2d84ba230b455993415a3a923ed95ba9dc9ad12f2380f60ddd96fddc06e9f2297d6b465dbb632f33bf8bf0569ff8a5b1127d26ca576a471352f58c0d45f4015cae2c455449b0207b9c7f326be106dc9aa0b7629aeb25ee36f89a5b901c526f166b70d083d0793a7"}}, &(0x7f0000001a40)=0x0) timer_settime(r3, 0x0, &(0x7f0000001a80)={{0x77359400}, {0x77359400}}, &(0x7f0000001ac0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/diskstats\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x68, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x62, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10000}, 0x8004) r5 = semget$private(0x0, 0x3, 0x1) lstat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f00000022c0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002280)={&(0x7f0000001d80)={0x4fc, 0x3c, 0x300, 0x70bd25, 0x25dfdbfd, {0xb}, [@generic="eab2c129582fab7ffa897e92eb761d26a1ff34c6ebea112c4cea6ad26688ee4add64fddbe54ed0bbca77a9b48c707976366efd58e55f967131f8e45c1c0b52a76d5601060adbe6718841509116932b7903", @typed={0x8, 0x116, 0x0, 0x0, @u32=0xffffffc0}, @generic="0333e768446f4a23410dc35a3ba81d017eae83c6795a", @nested={0x34, 0x14f, 0x0, 0x1, [@typed={0x4, 0x4c, 0x0, 0x0, @binary}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x8d, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x34}, @typed={0x8, 0x6a, 0x0, 0x0, @pid}]}, @typed={0x8, 0x97, 0x0, 0x0, @fd=r4}, @nested={0x43c, 0xdc, 0x0, 0x1, [@generic="92c0cc83ed676b41418c2bcccd768b1f25e58861829b768f87574ea3ea957f29a9417b94d3e6bb194f07d0949d6bf5c60b65f821207251de66ebcb580db6b0a00b9aa46aefe01b53d779063414001c104a1e6ef64f0a67c21d8baa743e440b67e1c00ed9ad810055fa151d868b2a7374a0f4c999cea0bf56e9132a71ca1a78856b93180aedaf5c6b2d5a910ab8ced06457cf60621e0c6c335cfb5d59d0baae5df680497d54469600cccc28e99eba11be2a8c52c09cc78cd50375", @typed={0x9, 0x25, 0x0, 0x0, @binary="dae2fd1a5d"}, @generic="a0ec99e291e20bdd5060a4665953fb64d5ca5ed40c3b7fe8d7b9a7dcd92ddc3457c92c77dfd14abc52631c981561ba0c23fe9d094c7991f3534b2b816b37f9c8e48d46d7a02efd09a93b55223479d1dfef307f05eeb2dea6be51b9efc0f604a5f740bbd2ed42843eb26fdf8ac424573d58ec80a7ac80577ad93e54263d3270ca130fc5cb311448f1b194e34522d91934a4a53a3ed861b1c48bdc9427006d63978d4008632c13eccb173cbf86c0f05f5fb1201584387326dfd75e07d5c8f55dd33b4ee3829763e9dba7d1c779b627b6c4ed41915a0369893eaea2cbb0d2c0b839dcf2d2bea4d7ad93f7452b8aa5b590e25226c42732db40bf5e", @generic="57d706d978650366e77425063e2820386f7a2943784e70605beb184345ba6346bb11cdb13a0087ecb8024db87d3af6f89eb0ff4cb1c3e5c160a91673b4de4bde67577349153ab5a9aa8d384b1830518920e4ea85dcb4e025d8682c9023f83b6f34d82cfdfb804bb1f79d6033f6431717b0738cb60614f3c36c5ddab52fdb7d67ab0610d3e051fe31089b43be516f60a8d6f8c5319797fc2c367356d51d7e6259d041fefebc0528d5b468e908132fc729a62917a5122113ef1e4563f39cacd92a7c86fcc557d24188d616d912aa306cbd866901f778a53ec49dea", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x6c, 0x0, 0x0, @uid=r6}, @generic="dd429af28352b2c252a27f9749e1ef09d4d1f9a3db6c7ccc8e4813a09e8b1df419074efbb754cd83b8ce19e066d8b10a5dda8c9f725fad4d35ac8bccda04fcee29cca46512ddba848c8b53a8f664229562de", @generic="967107e4457cf1c85e94c22f3d01c8595457ed768637ec9e20f1448da7e480328bd295b71a2c194c7493c8661334d27d5b4aab998f96097df1cbdfcfc1aabfdd6e9c5b347dff1073a096d3a220ee2e3c0a1788920ea759cc1e8720abcf0ee5cdf40032a38415637b369e4fd3c454b1d879ed092d91b2", @typed={0xc, 0x133, 0x0, 0x0, @u64=0x4}, @generic="fb167a6d216afd728a12f07d4ae17c1fd12fb95119cb67abc5e8fe700491465e7807a5c1702dd80e699cb2f1a509a2b0b17ee9d505ea16ab2d49515fc39716bf98be3b343670e555cdf6b66c4f5edead53e440cd76f8a4304bc65f0cf17d679a3f2db2639992888df40a015fb55cd4f40244096978c42fa993ca7cc92ed49dbfa557d9e3d6f25d20278a37540f19a690e0770150460d593a2e0371e396bfa144d959a766f3eb7cab2ace0a642adbeb"]}]}, 0x4fc}}, 0x24040090) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000002300)={0x3a, @empty, 0x4e22, 0x0, 'dh\x00', 0x1, 0x56c, 0x6d}, 0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)=@newae={0x58, 0x1e, 0x2, 0x70bd26, 0x25dfdbfe, {{@in6=@mcast1, 0x4d3, 0x2, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x34ff}, [@policy_type={0xa, 0x10, {0x1}}, @offload={0xc, 0x1c, {r1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0xc5) r8 = mq_open(&(0x7f0000002480)='ipvlan1\x00', 0x80, 0x2, &(0x7f00000024c0)={0xffff, 0x7fff, 0x2, 0xffff}) mq_notify(r8, &(0x7f0000002500)={0x0, 0x20}) r9 = syz_io_uring_complete(0x0) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000002540)={@dev={0xac, 0x14, 0x14, 0x36}, @local}, 0x8) clock_gettime(0x4, &(0x7f0000002580)) utime(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x1, 0x7}) semctl$SETVAL(r5, 0x4, 0x10, &(0x7f0000002640)=0x7) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000002680)=""/116, &(0x7f0000002700)=0x74) write$P9_RSTATFS(r4, &(0x7f0000002740)={0x43, 0x9, 0x2, {0x7f, 0x1, 0x7, 0xfffffffffffffff7, 0xa7a, 0x400, 0x0, 0x3, 0x9}}, 0x43) shutdown(r9, 0x1) rmdir(&(0x7f00000027c0)='./file0\x00') r10 = add_key$keyring(&(0x7f0000002880), &(0x7f00000028c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000002800), &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0, r10) sched_setparam(0xffffffffffffffff, &(0x7f0000002900)=0x9) 552.219682ms ago: executing program 3 (id=210): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x1b, 0xb7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa0000000000000}, 0x0, 0x538265c5, 0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea43155fb6ad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x523, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x18) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_regs={0x12}}) 525.479852ms ago: executing program 3 (id=211): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0xb8c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x70d8}, 0x0, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8], 0x0, 0x248, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xd3, 0x0, 0xfe, 0x0, 0x3ff, 0xe22a0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x8000001}, 0x100042, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40047452, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r8}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000606000/0x2000)=nil, 0x2000, 0x8, 0x10, r2, 0xe6bea000) 426.169894ms ago: executing program 1 (id=212): mknod(&(0x7f00000000c0)='./file0\x00', 0x100, 0xfff) r0 = io_uring_setup(0x7c8f, &(0x7f0000000300)={0x0, 0xc85, 0x100, 0x0, 0x192}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x49}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0xe1a7, 0x10100, 0x0, 0x4, 0x0, r0}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r7, 0x0, 0x0, r7}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') 373.795695ms ago: executing program 4 (id=213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) writev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)=r2}, 0x20) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 371.823764ms ago: executing program 1 (id=214): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 327.723955ms ago: executing program 1 (id=215): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 318.695995ms ago: executing program 2 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0xe8) lchown(&(0x7f0000000a80)='./file0\x00', r11, 0xee01) getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000300), 0x1, 0x4a3, &(0x7f00000005c0)="$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") r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_read_part_table(0x61a, &(0x7f0000000000)="$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") 271.275086ms ago: executing program 4 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x200) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2b, 0x25dfdbfd, {0xa, 0x20, 0x14, 0x9, 0x10, 0x0, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000000}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @empty, 0x7ffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80401000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=@ipv4_newroute={0x58, 0x18, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x80, 0x7, 0xfe, 0x0, 0xff, 0x7, 0x800}, [@RTA_MARK={0x8, 0x10, 0x585}, @RTA_TABLE={0x8, 0xf, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x10}}, @RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @broadcast}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x58}}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r6, 0x0, 0x0, 0x48014, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) timer_create(0x1, &(0x7f00000005c0)={0x0, 0x2, 0x4, @thr={&(0x7f0000000400)="a198bf1d4c5ac56e73e4cef932736227d2ac0ee1c341c329faeb04d0", &(0x7f00000004c0)="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"}}, &(0x7f0000000600)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000500)={[{@noblock_validity}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noacl}, {@nomblk_io_submit}]}, 0xf5, 0x47a, &(0x7f0000000f40)="$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") 189.965527ms ago: executing program 4 (id=218): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000), 0xfd, 0x444, &(0x7f0000000d80)="$eJzs3M1vG0UbAPBn7aR9+/UmVOWjaYFAQUQUkiYtpQcOgEDiABISHMoxJGkV6jaoCRKtIggIlSOqxB1xROIv4AQXBJyQuMIdVapQLi2cjNbeTWzXdp3UiUv9+0lbz+yONfN4d+yZnW4C6Fuj6T9JxN6I+D0ihqrZ+gKj1Zebq8szf68uzyRRLr/1V1Ipd2N1eSYvmr9vT54ZiCh8lsSh+ipfzF7PTZdKcxezzMTS+fcnFi9dfnb+/PTZubNzF6ZOnTpxfPL5k1PPdSXONK4bIx8tHD742jtX35g5ffXdn79N8vgb4uiS0XYHnyyXu1xdb+2rSScDPWwIG1KsdtMYrPT/oSjG+skbilc/7WnjgC1VLpfLD7Q+vFIG7mFJ9LoFQG/kP/Tp/DfftmnocVe4/lJ1ApTGfTPbqkcGopCVGWyY33bTaEScXvnnq3SLrbkPAQBQ5/t0/PNMs/FfIWrvC/0/W0MZjoj7ImJ/RJyMiAMRcX9EpeyDEfHQButvXCS5dfxTuLapwDqUjv9eyNa26sd/+egvhotZbl8l/sHkzHxp7lj2mYzF4M40P9mmjh9e+e2LVsdqx3/pltafjwWzdlwb2Fn/ntnppek7ibnW9U8iRgaaxZ+srQQkEXEwIkY2Wcf8098cbnXs9vG30YV1pvLXEU9Vz/9KNMSfS9qvT078L0pzxybyq+JWv/x65c1W9d9R/F2Qnv/dTa//tfiH09TipcvV9drFjddx5Y/PW85pNnv970jertv34fTS0sXJiB3J69VG1+6faig3tV4+jX/sSPP+vz/WP4lDEZFexA9HxCMR8WjW9sci4vGIONIm/p9efuK9zuIvZx/69p7/2Q2d//XEjmjc0zxRPPfjd3WVDq8nOzv/JyqpsWxPJ99/nbRrc1czAAAA/PcUImJvJIXxtXShMD5e/T/8B2J3obSwuHT0zMIHF2arzwgMx2Ahv9M1VHM/dDKb1uf5qYb88ey+8ZfFXZX8+MxCabbXwUOf29Oi/6f+LPa6dcCW87wW9C/9H/rXBvq/rwq4x+jU0L+a9P9dvWgHsP2a/f5/3IN2ANuvof9b9oM+Yv4P/Uv/h/6l/0NfWtwVt39IXqK/Ekc7KRyFtmXyv9lxF4QjsZlEj7+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuTfAAAA///eHN2/") mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) syz_emit_ethernet(0x66, &(0x7f0000000980)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x30, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, {[], @param_prob={0x4, 0x2, 0x0, 0xfff, {0x0, 0x6, "55c0e4", 0x3, 0x3c, 0xff, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x2, &(0x7f0000000040)={[0x4a56]}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 112.496508ms ago: executing program 2 (id=219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000001240)="8f", 0x1, 0x0, &(0x7f0000001200)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) writev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00'}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 104.792729ms ago: executing program 4 (id=220): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1300) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x1de0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0x7c00, 0x0, 0x3) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 33.6927ms ago: executing program 3 (id=221): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 0s ago: executing program 2 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) eventfd2(0x9, 0x100001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x92) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='powernv_throttle\x00', r1, 0x0, 0x40}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) finit_module(r4, &(0x7f0000000140)='GPL\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='afs_call\x00', r0, 0x0, 0x3}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @remote}, &(0x7f00000006c0)=0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000201010100000000000000000a000000000304001980"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000180)='cifs.idmap\x00', 0x0, &(0x7f0000000c00)="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", 0x115, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) kernel console output (not intermixed with test programs): rocess permissive=1 [ 25.796887][ T29] audit: type=1400 audit(1750656900.082:61): avc: denied { siginh } for pid=3267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 33.243659][ T29] audit: type=1400 audit(1750656907.642:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.244561][ T3295] cgroup: Unknown subsys name 'net' [ 33.270780][ T29] audit: type=1400 audit(1750656907.642:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.303446][ T29] audit: type=1400 audit(1750656907.672:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.439568][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.446335][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.575003][ T29] audit: type=1400 audit(1750656907.972:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.602515][ T29] audit: type=1400 audit(1750656907.972:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.626362][ T29] audit: type=1400 audit(1750656907.972:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.636328][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.650197][ T29] audit: type=1400 audit(1750656907.972:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.682225][ T29] audit: type=1400 audit(1750656907.972:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.711496][ T29] audit: type=1400 audit(1750656907.972:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.736548][ T29] audit: type=1400 audit(1750656908.062:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.774554][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.853150][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 34.956226][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.966238][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.976418][ T3304] bridge_slave_0: entered allmulticast mode [ 34.983741][ T3304] bridge_slave_0: entered promiscuous mode [ 34.999740][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.007844][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.016231][ T3304] bridge_slave_1: entered allmulticast mode [ 35.024174][ T3304] bridge_slave_1: entered promiscuous mode [ 35.064355][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.084107][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.118766][ T3304] team0: Port device team_slave_0 added [ 35.141628][ T3304] team0: Port device team_slave_1 added [ 35.184782][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.192329][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.221213][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.234887][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.242921][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.273996][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.296858][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.377278][ T3304] hsr_slave_0: entered promiscuous mode [ 35.384189][ T3304] hsr_slave_1: entered promiscuous mode [ 35.391834][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.400270][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.408566][ T3315] bridge_slave_0: entered allmulticast mode [ 35.416253][ T3315] bridge_slave_0: entered promiscuous mode [ 35.433448][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.441630][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.449371][ T3315] bridge_slave_1: entered allmulticast mode [ 35.456861][ T3315] bridge_slave_1: entered promiscuous mode [ 35.471232][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.522677][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.539138][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.578347][ T3315] team0: Port device team_slave_0 added [ 35.584970][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.600984][ T3315] team0: Port device team_slave_1 added [ 35.633669][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.647892][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.678053][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.696297][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.705657][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.740934][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.759528][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.799321][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.809476][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.819367][ T3313] bridge_slave_0: entered allmulticast mode [ 35.826794][ T3313] bridge_slave_0: entered promiscuous mode [ 35.839180][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.847546][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.855681][ T3313] bridge_slave_1: entered allmulticast mode [ 35.863040][ T3313] bridge_slave_1: entered promiscuous mode [ 35.924410][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.941217][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.955978][ T3315] hsr_slave_0: entered promiscuous mode [ 35.963339][ T3315] hsr_slave_1: entered promiscuous mode [ 35.969589][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.977741][ T3315] Cannot create hsr debugfs directory [ 36.004510][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.013003][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.021277][ T3317] bridge_slave_0: entered allmulticast mode [ 36.028395][ T3317] bridge_slave_0: entered promiscuous mode [ 36.036503][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.044142][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.052432][ T3317] bridge_slave_1: entered allmulticast mode [ 36.059607][ T3317] bridge_slave_1: entered promiscuous mode [ 36.077177][ T3313] team0: Port device team_slave_0 added [ 36.084501][ T3313] team0: Port device team_slave_1 added [ 36.109473][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.117209][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.125628][ T3318] bridge_slave_0: entered allmulticast mode [ 36.132534][ T3318] bridge_slave_0: entered promiscuous mode [ 36.140082][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.148773][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.157239][ T3318] bridge_slave_1: entered allmulticast mode [ 36.164793][ T3318] bridge_slave_1: entered promiscuous mode [ 36.194677][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.203705][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.234108][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.249242][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.262149][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.284129][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.295655][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.303718][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.333808][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.368813][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.393638][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.403626][ T3317] team0: Port device team_slave_0 added [ 36.412100][ T3317] team0: Port device team_slave_1 added [ 36.428031][ T3313] hsr_slave_0: entered promiscuous mode [ 36.434383][ T3313] hsr_slave_1: entered promiscuous mode [ 36.442667][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.453436][ T3313] Cannot create hsr debugfs directory [ 36.459809][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.481742][ T3318] team0: Port device team_slave_0 added [ 36.489740][ T3318] team0: Port device team_slave_1 added [ 36.501350][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.515496][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.523052][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.553358][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.585692][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.595241][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.604042][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.634457][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.649432][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.658055][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.687948][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.703625][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.711688][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.742171][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.794818][ T3317] hsr_slave_0: entered promiscuous mode [ 36.801668][ T3317] hsr_slave_1: entered promiscuous mode [ 36.808096][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.816731][ T3317] Cannot create hsr debugfs directory [ 36.850863][ T3318] hsr_slave_0: entered promiscuous mode [ 36.858434][ T3318] hsr_slave_1: entered promiscuous mode [ 36.865600][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.874102][ T3318] Cannot create hsr debugfs directory [ 36.940414][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.956050][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.974538][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.999585][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.041269][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.052407][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.065859][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.083978][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.122741][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.135739][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.162543][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.172324][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.188934][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.211355][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.222619][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.235285][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.245828][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.255693][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.269094][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.277159][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.306234][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.314372][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.328215][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.353429][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.376424][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.385624][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.393927][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.411404][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.418831][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.431503][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.447650][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.465898][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.473669][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.499778][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.507543][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.551921][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.564942][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.577540][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.594877][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.615534][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.624740][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.632617][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.653253][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.661383][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.672602][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.681135][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.703906][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.711874][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.727547][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.741386][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.760902][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.915974][ T3313] veth0_vlan: entered promiscuous mode [ 37.931909][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.948633][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.962921][ T3313] veth1_vlan: entered promiscuous mode [ 37.989156][ T3304] veth0_vlan: entered promiscuous mode [ 38.020999][ T3313] veth0_macvtap: entered promiscuous mode [ 38.044983][ T3304] veth1_vlan: entered promiscuous mode [ 38.054779][ T3313] veth1_macvtap: entered promiscuous mode [ 38.084004][ T3315] veth0_vlan: entered promiscuous mode [ 38.102749][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.114802][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.135530][ T3304] veth0_macvtap: entered promiscuous mode [ 38.143646][ T3315] veth1_vlan: entered promiscuous mode [ 38.151427][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.161632][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.172559][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.183116][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.202645][ T3317] veth0_vlan: entered promiscuous mode [ 38.216095][ T3304] veth1_macvtap: entered promiscuous mode [ 38.232904][ T3317] veth1_vlan: entered promiscuous mode [ 38.254964][ T3318] veth0_vlan: entered promiscuous mode [ 38.268141][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.287978][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.299665][ T3315] veth0_macvtap: entered promiscuous mode [ 38.311544][ T3318] veth1_vlan: entered promiscuous mode [ 38.322921][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.332699][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.333712][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.333724][ T29] audit: type=1400 audit(1750656912.722:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.p8eeqj/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.342450][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.350101][ T29] audit: type=1400 audit(1750656912.722:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.350137][ T29] audit: type=1400 audit(1750656912.722:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.p8eeqj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.350162][ T29] audit: type=1400 audit(1750656912.722:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.378250][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.389080][ T29] audit: type=1400 audit(1750656912.722:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.p8eeqj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.512291][ T29] audit: type=1400 audit(1750656912.722:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.p8eeqj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.544366][ T29] audit: type=1400 audit(1750656912.732:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.568255][ T29] audit: type=1400 audit(1750656912.822:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.583069][ T3317] veth0_macvtap: entered promiscuous mode [ 38.594584][ T29] audit: type=1400 audit(1750656912.822:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.628351][ T3315] veth1_macvtap: entered promiscuous mode [ 38.628851][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.650581][ T3318] veth0_macvtap: entered promiscuous mode [ 38.662015][ T3317] veth1_macvtap: entered promiscuous mode [ 38.680917][ T3318] veth1_macvtap: entered promiscuous mode [ 38.691496][ T29] audit: type=1400 audit(1750656913.082:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.698121][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.733410][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.760601][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.775413][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.785169][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.795807][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.805537][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.810204][ T3475] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 38.824862][ T3475] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.826161][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.846607][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.873025][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.884116][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.893852][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.903554][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.920237][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.931917][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.941832][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.942460][ T3480] loop0: detected capacity change from 0 to 512 [ 38.970693][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.989972][ T3480] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1: bg 0: block 393: padding at end of block bitmap is not set [ 38.994032][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.005529][ T3480] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 39.014176][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.024574][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.038183][ T3484] process 'syz.1.2' launched '/dev/fd/8' with NULL argv: empty string added [ 39.045900][ T3480] EXT4-fs (loop0): 2 truncates cleaned up [ 39.064469][ T3480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.069961][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.088978][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.098755][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.108823][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126366][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.137052][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.158820][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.182192][ T3490] loop3: detected capacity change from 0 to 1024 [ 39.194731][ T3490] ext4: Unknown parameter 'fowner>00000000000000000000' [ 39.272962][ T3495] loop3: detected capacity change from 0 to 2048 [ 39.293958][ T3495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.362123][ T3495] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.404568][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.425036][ T3504] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 39.447096][ T3504] loop1: detected capacity change from 0 to 512 [ 39.471671][ T3504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6: bg 0: block 393: padding at end of block bitmap is not set [ 39.474659][ C1] hrtimer: interrupt took 27516 ns [ 39.490852][ T3504] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 39.505933][ T3504] EXT4-fs (loop1): 2 truncates cleaned up [ 39.514287][ T3504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.543181][ T3514] loop0: detected capacity change from 0 to 512 [ 39.573711][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.634393][ T3518] loop1: detected capacity change from 0 to 512 [ 39.658415][ T3518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.665819][ T3519] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 39.674029][ T3518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.703386][ T3519] team0: Device ipvlan2 is already an upper device of the team interface [ 39.713771][ T3518] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (16416!=33349) [ 39.724469][ T3518] EXT4-fs (loop1): group descriptors corrupted! [ 39.733401][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.753979][ T3514] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.776017][ T3514] ext4: Unknown parameter '00000010' [ 39.845871][ T3518] mmap: syz.1.9 (3518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.947487][ T3526] loop1: detected capacity change from 0 to 2048 [ 40.004329][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.020359][ T3526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.147536][ T3532] loop3: detected capacity change from 0 to 2048 [ 40.240735][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.400063][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.485361][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.533295][ T3547] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.543532][ T3547] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 40.639406][ T3547] syz.1.15 (3547) used greatest stack depth: 10712 bytes left [ 40.755928][ T3564] loop1: detected capacity change from 0 to 1024 [ 40.773956][ T3564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.839923][ T3568] syz.0.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.868388][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.002022][ T3589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 41.012794][ T3589] team0: Device ipvlan2 is already an upper device of the team interface [ 41.046952][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.111542][ T3598] loop1: detected capacity change from 0 to 2048 [ 41.178878][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.179050][ T3602] loop2: detected capacity change from 0 to 2048 [ 41.230911][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.233439][ T3610] loop4: detected capacity change from 0 to 128 [ 41.255040][ T3552] udevd[3552]: incorrect ext4 checksum on /dev/loop4 [ 41.419928][ T3621] loop3: detected capacity change from 0 to 512 [ 41.451033][ T3621] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.465591][ T3621] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 41.477613][ T3621] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.38: Corrupt directory, running e2fsck is recommended [ 41.492893][ T3621] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 41.502177][ T3621] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.38: corrupted in-inode xattr: invalid ea_ino [ 41.528821][ T3621] EXT4-fs (loop3): Remounting filesystem read-only [ 41.538358][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.564291][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.639672][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.695287][ T3625] loop3: detected capacity change from 0 to 2048 [ 41.733335][ T3625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.751810][ T3633] loop4: detected capacity change from 0 to 512 [ 41.780829][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.813720][ T3634] pim6reg1: entered promiscuous mode [ 41.820171][ T3634] pim6reg1: entered allmulticast mode [ 41.843651][ T3633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.904063][ T3633] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.916359][ T3640] Zero length message leads to an empty skb [ 41.925008][ T3633] ext4: Unknown parameter '00000010' [ 41.956368][ T3641] loop1: detected capacity change from 0 to 512 [ 42.004705][ T3641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.011477][ T3641] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 42.024977][ T3641] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 42.042760][ T3641] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.44: attempt to clear invalid blocks 2 len 1 [ 42.064147][ T3641] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 1819239214 (level 0) [ 42.122066][ T3641] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.44: invalid indirect mapped block 1819239214 (level 1) [ 42.251355][ T3641] EXT4-fs (loop1): 1 truncate cleaned up [ 42.261339][ T3641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.410772][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.435159][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.505807][ T3665] loop1: detected capacity change from 0 to 256 [ 42.516752][ T3668] tipc: Started in network mode [ 42.522157][ T3668] tipc: Node identity ac14140f, cluster identity 4711 [ 42.531873][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 42.541951][ T3665] FAT-fs (loop1): Filesystem has been set read-only [ 42.549462][ T3668] FAULT_INJECTION: forcing a failure. [ 42.549462][ T3668] name failslab, interval 1, probability 0, space 0, times 1 [ 42.564380][ T3668] CPU: 0 UID: 0 PID: 3668 Comm: syz.3.52 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 42.564458][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.564485][ T3668] Call Trace: [ 42.564493][ T3668] [ 42.564501][ T3668] __dump_stack+0x1d/0x30 [ 42.564522][ T3668] dump_stack_lvl+0xe8/0x140 [ 42.564542][ T3668] dump_stack+0x15/0x1b [ 42.564556][ T3668] should_fail_ex+0x265/0x280 [ 42.564584][ T3668] should_failslab+0x8c/0xb0 [ 42.564768][ T3668] kmem_cache_alloc_noprof+0x50/0x310 [ 42.564790][ T3668] ? security_inode_alloc+0x37/0x100 [ 42.564817][ T3668] security_inode_alloc+0x37/0x100 [ 42.564885][ T3668] inode_init_always_gfp+0x4b7/0x500 [ 42.564914][ T3668] ? __pfx_sock_alloc_inode+0x10/0x10 [ 42.564938][ T3668] alloc_inode+0x58/0x170 [ 42.564970][ T3668] __sock_create+0x122/0x5b0 [ 42.565127][ T3668] ? tipc_set_node_id+0x121/0x160 [ 42.565170][ T3668] sock_create_kern+0x38/0x50 [ 42.565195][ T3668] udp_sock_create4+0x66/0x2a0 [ 42.565222][ T3668] udp_sock_create+0x64/0x80 [ 42.565286][ T3668] tipc_udp_enable+0x943/0xb10 [ 42.565363][ T3668] __tipc_nl_bearer_enable+0x945/0xda0 [ 42.565457][ T3668] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 42.565487][ T3668] tipc_nl_bearer_enable+0x22/0x40 [ 42.565636][ T3668] genl_family_rcv_msg_doit+0x140/0x1b0 [ 42.565666][ T3668] genl_rcv_msg+0x422/0x460 [ 42.565719][ T3668] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 42.565744][ T3668] netlink_rcv_skb+0x120/0x220 [ 42.565769][ T3668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 42.565796][ T3668] genl_rcv+0x28/0x40 [ 42.565853][ T3668] netlink_unicast+0x59e/0x670 [ 42.566043][ T3668] netlink_sendmsg+0x58b/0x6b0 [ 42.566061][ T3668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.566148][ T3668] __sock_sendmsg+0x142/0x180 [ 42.566167][ T3668] ____sys_sendmsg+0x31e/0x4e0 [ 42.566201][ T3668] ___sys_sendmsg+0x17b/0x1d0 [ 42.566297][ T3668] __x64_sys_sendmsg+0xd4/0x160 [ 42.566379][ T3668] x64_sys_call+0x2999/0x2fb0 [ 42.566400][ T3668] do_syscall_64+0xd2/0x200 [ 42.566418][ T3668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.566444][ T3668] ? clear_bhb_loop+0x40/0x90 [ 42.566472][ T3668] ? clear_bhb_loop+0x40/0x90 [ 42.566494][ T3668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.566516][ T3668] RIP: 0033:0x7f16e7e7e929 [ 42.566539][ T3668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.566554][ T3668] RSP: 002b:00007f16e64e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.566570][ T3668] RAX: ffffffffffffffda RBX: 00007f16e80a5fa0 RCX: 00007f16e7e7e929 [ 42.566644][ T3668] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 42.566657][ T3668] RBP: 00007f16e64e7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.566668][ T3668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.566678][ T3668] R13: 0000000000000000 R14: 00007f16e80a5fa0 R15: 00007fff637b5e08 [ 42.566693][ T3668] [ 42.566765][ T3668] socket: no more sockets [ 42.622224][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 42.627173][ T3668] tipc: Enabling of bearer rejected, failed to enable media [ 42.652034][ T3668] syz.3.52 (3668) used greatest stack depth: 10456 bytes left [ 42.711686][ T3674] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 42.714027][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 42.727055][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.735419][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 42.986882][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 42.991086][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.000030][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 43.005588][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.026126][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 43.035909][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 43.046662][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 43.058118][ T3681] loop0: detected capacity change from 0 to 512 [ 43.059244][ T3665] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 43.075562][ T3681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.078343][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.094141][ T3681] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (16416!=33349) [ 43.095386][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.106691][ T3681] EXT4-fs (loop0): group descriptors corrupted! [ 43.135920][ T3665] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 43.147426][ T3665] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 43.157360][ T3684] loop4: detected capacity change from 0 to 8192 [ 43.339509][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 43.339523][ T29] audit: type=1326 audit(2000000002.749:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.373552][ T3700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.375078][ T3700] FAULT_INJECTION: forcing a failure. [ 43.375078][ T3700] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.402346][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: syz.0.66 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 43.402377][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.402389][ T3700] Call Trace: [ 43.402396][ T3700] [ 43.402405][ T3700] __dump_stack+0x1d/0x30 [ 43.402426][ T3700] dump_stack_lvl+0xe8/0x140 [ 43.402506][ T3700] dump_stack+0x15/0x1b [ 43.402522][ T3700] should_fail_ex+0x265/0x280 [ 43.402552][ T3700] should_fail+0xb/0x20 [ 43.402575][ T3700] should_fail_usercopy+0x1a/0x20 [ 43.402603][ T3700] _copy_from_user+0x1c/0xb0 [ 43.402620][ T3700] do_arpt_set_ctl+0x3aa/0x9a0 [ 43.402639][ T3700] ? kstrtoull+0x111/0x140 [ 43.402732][ T3700] ? _raw_spin_unlock_bh+0x36/0x40 [ 43.402752][ T3700] ? lock_sock_nested+0x112/0x140 [ 43.402835][ T3700] ? __rcu_read_unlock+0x4f/0x70 [ 43.402857][ T3700] ? _raw_spin_unlock_bh+0x36/0x40 [ 43.402936][ T3700] nf_setsockopt+0x196/0x1b0 [ 43.402979][ T3700] ip_setsockopt+0x102/0x110 [ 43.403003][ T3700] udp_setsockopt+0x99/0xb0 [ 43.403027][ T3700] sock_common_setsockopt+0x66/0x80 [ 43.403051][ T3700] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 43.403073][ T3700] __sys_setsockopt+0x181/0x200 [ 43.403232][ T3700] __x64_sys_setsockopt+0x64/0x80 [ 43.403259][ T3700] x64_sys_call+0x2bd5/0x2fb0 [ 43.403277][ T3700] do_syscall_64+0xd2/0x200 [ 43.403292][ T3700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.403316][ T3700] ? clear_bhb_loop+0x40/0x90 [ 43.403335][ T3700] ? clear_bhb_loop+0x40/0x90 [ 43.403419][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.403441][ T3700] RIP: 0033:0x7ff9b822e929 [ 43.403456][ T3700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.403551][ T3700] RSP: 002b:00007ff9b6897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.403568][ T3700] RAX: ffffffffffffffda RBX: 00007ff9b8455fa0 RCX: 00007ff9b822e929 [ 43.403581][ T3700] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000006 [ 43.403597][ T3700] RBP: 00007ff9b6897090 R08: 0000000000000438 R09: 0000000000000000 [ 43.403609][ T3700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.403622][ T3700] R13: 0000000000000000 R14: 00007ff9b8455fa0 R15: 00007ffc07f6ee98 [ 43.403640][ T3700] [ 43.677751][ T29] audit: type=1326 audit(2000000002.799:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.705158][ T29] audit: type=1326 audit(2000000002.799:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.733248][ T29] audit: type=1326 audit(2000000002.809:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.760807][ T29] audit: type=1326 audit(2000000002.809:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.788396][ T29] audit: type=1326 audit(2000000002.809:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.816011][ T29] audit: type=1326 audit(2000000002.809:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b24cee929 code=0x7ffc0000 [ 43.841796][ T29] audit: type=1326 audit(2000000002.809:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b24cf0847 code=0x7ffc0000 [ 43.867200][ T29] audit: type=1326 audit(2000000002.809:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2b24cf07bc code=0x7ffc0000 [ 43.896925][ T29] audit: type=1326 audit(2000000002.809:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3696 comm="syz.1.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2b24cf06f4 code=0x7ffc0000 [ 43.910149][ T3710] loop0: detected capacity change from 0 to 256 [ 43.998125][ T3714] FAULT_INJECTION: forcing a failure. [ 43.998125][ T3714] name failslab, interval 1, probability 0, space 0, times 0 [ 44.013545][ T3714] CPU: 0 UID: 0 PID: 3714 Comm: syz.2.69 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 44.013614][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.013627][ T3714] Call Trace: [ 44.013632][ T3714] [ 44.013639][ T3714] __dump_stack+0x1d/0x30 [ 44.013658][ T3714] dump_stack_lvl+0xe8/0x140 [ 44.013675][ T3714] dump_stack+0x15/0x1b [ 44.013690][ T3714] should_fail_ex+0x265/0x280 [ 44.013792][ T3714] should_failslab+0x8c/0xb0 [ 44.013872][ T3714] kmem_cache_alloc_node_noprof+0x57/0x320 [ 44.013929][ T3714] ? __alloc_skb+0x101/0x320 [ 44.013956][ T3714] __alloc_skb+0x101/0x320 [ 44.014127][ T3714] ? audit_log_start+0x365/0x6c0 [ 44.014157][ T3714] audit_log_start+0x380/0x6c0 [ 44.014183][ T3714] ? __pfx_restrict_link_by_key_or_keyring_chain+0x10/0x10 [ 44.014274][ T3714] audit_seccomp+0x48/0x100 [ 44.014301][ T3714] ? __seccomp_filter+0x68c/0x10d0 [ 44.014326][ T3714] __seccomp_filter+0x69d/0x10d0 [ 44.014351][ T3714] ? __se_sys_keyctl+0x1ed/0xb80 [ 44.014413][ T3714] __secure_computing+0x82/0x150 [ 44.014437][ T3714] syscall_trace_enter+0xcf/0x1e0 [ 44.014461][ T3714] do_syscall_64+0xac/0x200 [ 44.014477][ T3714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.014557][ T3714] ? clear_bhb_loop+0x40/0x90 [ 44.014598][ T3714] ? clear_bhb_loop+0x40/0x90 [ 44.014639][ T3714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.014661][ T3714] RIP: 0033:0x7fa03c8fd33c [ 44.014678][ T3714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.014787][ T3714] RSP: 002b:00007fa03af67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.014808][ T3714] RAX: ffffffffffffffda RBX: 00007fa03cb25fa0 RCX: 00007fa03c8fd33c [ 44.014822][ T3714] RDX: 000000000000000f RSI: 00007fa03af670a0 RDI: 000000000000000a [ 44.014835][ T3714] RBP: 00007fa03af67090 R08: 0000000000000000 R09: 0000000000000000 [ 44.014846][ T3714] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.014856][ T3714] R13: 0000000000000000 R14: 00007fa03cb25fa0 R15: 00007ffe21fa9478 [ 44.014872][ T3714] [ 44.030028][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.276148][ T3710] FAT-fs (loop0): Filesystem has been set read-only [ 44.286660][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.288120][ T3717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3717 comm=syz.2.71 [ 44.296114][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.337353][ T3726] syz_tun: entered allmulticast mode [ 44.498755][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.519662][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.545600][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.572243][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.588853][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.598584][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.608581][ T3710] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.627139][ T3710] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 44.640675][ T3710] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 44.696119][ T3740] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 44.714474][ T3737] loop3: detected capacity change from 0 to 2048 [ 44.754254][ T3743] __nla_validate_parse: 43 callbacks suppressed [ 44.754272][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.770669][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.786079][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.834422][ T3711] syz_tun: left allmulticast mode [ 44.841986][ T3746] loop0: detected capacity change from 0 to 1024 [ 44.844073][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 44.857051][ T3746] ext4: Unknown parameter 'fowner>00000000000000000000' [ 44.863768][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.870003][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.877042][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.887033][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.899039][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.916041][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.927405][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.941234][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.955340][ T3749] loop0: detected capacity change from 0 to 2048 [ 44.966536][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.019821][ T3749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.050025][ T3749] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.114891][ T3757] loop2: detected capacity change from 0 to 512 [ 45.161962][ T3757] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.183756][ T3757] EXT4-fs (loop2): invalid journal inode [ 45.191998][ T3757] EXT4-fs (loop2): can't get journal size [ 45.205082][ T2995] udevd[2995]: worker [3551] terminated by signal 33 (Unknown signal 33) [ 45.215473][ T3757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 45.231198][ T3757] System zones: 1-12, 13-13 [ 45.234130][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.250919][ T3762] loop4: detected capacity change from 0 to 1024 [ 45.257026][ T3757] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.82: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.260796][ T3762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.293900][ T3757] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.82: couldn't read orphan inode 15 (err -117) [ 45.309156][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.331655][ T3762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.355309][ T3762] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 45.390627][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.454946][ T3784] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 45.472370][ T3786] loop3: detected capacity change from 0 to 2048 [ 45.492836][ T3786] EXT4-fs: Ignoring removed nobh option [ 45.505248][ T3784] team0: Device ipvlan2 is already an upper device of the team interface [ 45.550760][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.592172][ T3786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 45.669895][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.697039][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.745081][ T3795] loop3: detected capacity change from 0 to 512 [ 45.779335][ T3795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.798933][ T3795] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (16416!=33349) [ 45.802686][ T3799] loop2: detected capacity change from 0 to 2048 [ 45.810377][ T3795] EXT4-fs (loop3): group descriptors corrupted! [ 45.830783][ T3799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.987254][ T3812] syz_tun: entered allmulticast mode [ 46.011161][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.060789][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.215561][ T3816] infiniband syz!: set active [ 46.220837][ T3816] infiniband syz!: added team_slave_0 [ 46.235173][ T3814] loop4: detected capacity change from 0 to 2048 [ 46.411109][ T3820] loop2: detected capacity change from 0 to 164 [ 46.418103][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.455795][ T3824] program syz.3.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.467416][ T3816] RDS/IB: syz!: added [ 46.484706][ T3816] smc: adding ib device syz! with port count 1 [ 46.507685][ T3824] capability: warning: `syz.3.101' uses deprecated v2 capabilities in a way that may be insecure [ 46.545350][ T3792] syz_tun: left allmulticast mode [ 46.553686][ T3816] smc: ib device syz! port 1 has pnetid [ 46.556536][ T3376] rtc_cmos 00:00: Alarms can be up to one day in the future [ 46.568991][ T3376] rtc_cmos 00:00: Alarms can be up to one day in the future [ 46.577473][ T3376] rtc_cmos 00:00: Alarms can be up to one day in the future [ 46.587468][ T3376] rtc_cmos 00:00: Alarms can be up to one day in the future [ 46.595556][ T3376] rtc rtc0: __rtc_set_alarm: err=-22 [ 46.611112][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.667841][ T3831] loop0: detected capacity change from 0 to 1024 [ 46.676006][ T3831] ext4: Unknown parameter 'fowner>00000000000000000000' [ 46.697784][ T3828] IPv6: sit1: Disabled Multicast RS [ 46.720466][ T3831] loop0: detected capacity change from 0 to 2048 [ 46.729439][ T3828] sit1: entered allmulticast mode [ 46.750630][ T3831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.766719][ T3836] loop3: detected capacity change from 0 to 2048 [ 46.804461][ T3836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.846215][ T3831] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.896123][ T3844] SELinux: Context  is not valid (left unmapped). [ 46.952852][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.106726][ T3854] loop3: detected capacity change from 0 to 512 [ 47.150727][ T3854] ======================================================= [ 47.150727][ T3854] WARNING: The mand mount option has been deprecated and [ 47.150727][ T3854] and is ignored by this kernel. Remove the mand [ 47.150727][ T3854] option from the mount to silence this warning. [ 47.150727][ T3854] ======================================================= [ 47.213782][ T3864] FAULT_INJECTION: forcing a failure. [ 47.213782][ T3864] name failslab, interval 1, probability 0, space 0, times 0 [ 47.230493][ T3864] CPU: 0 UID: 0 PID: 3864 Comm: syz.4.115 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 47.230522][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.230547][ T3864] Call Trace: [ 47.230554][ T3864] [ 47.230562][ T3864] __dump_stack+0x1d/0x30 [ 47.230581][ T3864] dump_stack_lvl+0xe8/0x140 [ 47.230599][ T3864] dump_stack+0x15/0x1b [ 47.230615][ T3864] should_fail_ex+0x265/0x280 [ 47.230655][ T3864] should_failslab+0x8c/0xb0 [ 47.230677][ T3864] kmem_cache_alloc_node_noprof+0x57/0x320 [ 47.230741][ T3864] ? __alloc_skb+0x101/0x320 [ 47.230764][ T3864] ? xa_load+0xb1/0xe0 [ 47.230780][ T3864] __alloc_skb+0x101/0x320 [ 47.230954][ T3864] netlink_dump+0x148/0x7f0 [ 47.230981][ T3864] ? nlmon_xmit+0x4f/0x60 [ 47.231000][ T3864] ? consume_skb+0x49/0x150 [ 47.231030][ T3864] __netlink_dump_start+0x43e/0x520 [ 47.231076][ T3864] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 47.231103][ T3864] rtnetlink_rcv_msg+0x552/0x6d0 [ 47.231154][ T3864] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 47.231178][ T3864] ? __pfx_rtnl_dumpit+0x10/0x10 [ 47.231198][ T3864] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 47.231225][ T3864] netlink_rcv_skb+0x120/0x220 [ 47.231267][ T3864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.231294][ T3864] rtnetlink_rcv+0x1c/0x30 [ 47.231355][ T3864] netlink_unicast+0x59e/0x670 [ 47.231448][ T3864] netlink_sendmsg+0x58b/0x6b0 [ 47.231470][ T3864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.231543][ T3864] __sock_sendmsg+0x142/0x180 [ 47.231570][ T3864] ____sys_sendmsg+0x31e/0x4e0 [ 47.231606][ T3864] ___sys_sendmsg+0x17b/0x1d0 [ 47.231685][ T3864] __x64_sys_sendmsg+0xd4/0x160 [ 47.231755][ T3864] x64_sys_call+0x2999/0x2fb0 [ 47.231775][ T3864] do_syscall_64+0xd2/0x200 [ 47.231791][ T3864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.231813][ T3864] ? clear_bhb_loop+0x40/0x90 [ 47.231895][ T3864] ? clear_bhb_loop+0x40/0x90 [ 47.231912][ T3864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.231974][ T3864] RIP: 0033:0x7f99ac2ee929 [ 47.231987][ T3864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.232002][ T3864] RSP: 002b:00007f99aa957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.232016][ T3864] RAX: ffffffffffffffda RBX: 00007f99ac515fa0 RCX: 00007f99ac2ee929 [ 47.232026][ T3864] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 47.232035][ T3864] RBP: 00007f99aa957090 R08: 0000000000000000 R09: 0000000000000000 [ 47.232054][ T3864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.232063][ T3864] R13: 0000000000000000 R14: 00007f99ac515fa0 R15: 00007ffcf0910998 [ 47.232076][ T3864] [ 47.571202][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.591119][ T3869] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3869 comm=syz.2.116 [ 47.680780][ T3872] loop2: detected capacity change from 0 to 512 [ 47.690523][ T3876] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.730724][ T3870] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 47.744921][ T3854] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.111: bad orphan inode 15 [ 47.784054][ T3872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.820629][ T3854] ext4_test_bit(bit=14, block=5) = 0 [ 47.829068][ T3879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3879 comm=syz.0.121 [ 47.839625][ T3854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.869367][ T3872] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (16416!=33349) [ 47.881188][ T3872] EXT4-fs (loop2): group descriptors corrupted! [ 48.071009][ T3890] syz_tun: entered allmulticast mode [ 48.296573][ T3851] syz.3.111 (3851) used greatest stack depth: 6952 bytes left [ 48.406901][ T3896] loop2: detected capacity change from 0 to 4096 [ 48.440357][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.454689][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.472235][ T3896] FAULT_INJECTION: forcing a failure. [ 48.472235][ T3896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.487165][ T3896] CPU: 1 UID: 0 PID: 3896 Comm: syz.2.126 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 48.487211][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.487223][ T3896] Call Trace: [ 48.487236][ T3896] [ 48.487245][ T3896] __dump_stack+0x1d/0x30 [ 48.487267][ T3896] dump_stack_lvl+0xe8/0x140 [ 48.487311][ T3896] dump_stack+0x15/0x1b [ 48.487327][ T3896] should_fail_ex+0x265/0x280 [ 48.487354][ T3896] should_fail+0xb/0x20 [ 48.487378][ T3896] should_fail_usercopy+0x1a/0x20 [ 48.487423][ T3896] _copy_to_user+0x20/0xa0 [ 48.487512][ T3896] put_itimerspec64+0x65/0x110 [ 48.487534][ T3896] __x64_sys_timer_settime+0x11a/0x160 [ 48.487562][ T3896] x64_sys_call+0x29e6/0x2fb0 [ 48.487641][ T3896] do_syscall_64+0xd2/0x200 [ 48.487722][ T3896] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.487744][ T3896] ? clear_bhb_loop+0x40/0x90 [ 48.487827][ T3896] ? clear_bhb_loop+0x40/0x90 [ 48.487845][ T3896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.487862][ T3896] RIP: 0033:0x7fa03c8fe929 [ 48.487875][ T3896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.487936][ T3896] RSP: 002b:00007fa03af67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 48.487954][ T3896] RAX: ffffffffffffffda RBX: 00007fa03cb25fa0 RCX: 00007fa03c8fe929 [ 48.487965][ T3896] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.487976][ T3896] RBP: 00007fa03af67090 R08: 0000000000000000 R09: 0000000000000000 [ 48.487986][ T3896] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 48.487996][ T3896] R13: 0000000000000000 R14: 00007fa03cb25fa0 R15: 00007ffe21fa9478 [ 48.488011][ T3896] [ 48.716827][ T3901] FAULT_INJECTION: forcing a failure. [ 48.716827][ T3901] name failslab, interval 1, probability 0, space 0, times 0 [ 48.733684][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: syz.1.127 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 48.733714][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.733738][ T3901] Call Trace: [ 48.733744][ T3901] [ 48.733751][ T3901] __dump_stack+0x1d/0x30 [ 48.733773][ T3901] dump_stack_lvl+0xe8/0x140 [ 48.733790][ T3901] dump_stack+0x15/0x1b [ 48.733805][ T3901] should_fail_ex+0x265/0x280 [ 48.733897][ T3901] should_failslab+0x8c/0xb0 [ 48.733973][ T3901] kmem_cache_alloc_noprof+0x50/0x310 [ 48.734091][ T3901] ? skb_clone+0x151/0x1f0 [ 48.734108][ T3901] skb_clone+0x151/0x1f0 [ 48.734193][ T3901] __netlink_deliver_tap+0x2c9/0x500 [ 48.734232][ T3901] netlink_unicast+0x64c/0x670 [ 48.734261][ T3901] netlink_sendmsg+0x58b/0x6b0 [ 48.734280][ T3901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.734322][ T3901] __sock_sendmsg+0x142/0x180 [ 48.734342][ T3901] ____sys_sendmsg+0x31e/0x4e0 [ 48.734372][ T3901] ___sys_sendmsg+0x17b/0x1d0 [ 48.734434][ T3901] __x64_sys_sendmsg+0xd4/0x160 [ 48.734465][ T3901] x64_sys_call+0x2999/0x2fb0 [ 48.734483][ T3901] do_syscall_64+0xd2/0x200 [ 48.734500][ T3901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.734566][ T3901] ? clear_bhb_loop+0x40/0x90 [ 48.734586][ T3901] ? clear_bhb_loop+0x40/0x90 [ 48.734609][ T3901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.734630][ T3901] RIP: 0033:0x7f2b24cee929 [ 48.734646][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.734685][ T3901] RSP: 002b:00007f2b23336038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.734701][ T3901] RAX: ffffffffffffffda RBX: 00007f2b24f16080 RCX: 00007f2b24cee929 [ 48.734712][ T3901] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000005 [ 48.734722][ T3901] RBP: 00007f2b23336090 R08: 0000000000000000 R09: 0000000000000000 [ 48.734733][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.734756][ T3901] R13: 0000000000000000 R14: 00007f2b24f16080 R15: 00007ffd68e32ff8 [ 48.734770][ T3901] [ 48.737587][ T3866] syz_tun: left allmulticast mode [ 48.778246][ T3901] IPv6: Can't replace route, no match found [ 48.957459][ T3903] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3903 comm=syz.4.130 [ 48.967129][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.041677][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 49.041692][ T29] audit: type=1400 audit(2000000008.449:749): avc: denied { write } for pid=3905 comm="syz.4.131" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.049852][ T3907] loop3: detected capacity change from 0 to 1024 [ 49.087211][ T3906] loop4: detected capacity change from 0 to 512 [ 49.119423][ T3906] EXT4-fs (loop4): failed to initialize system zone (-117) [ 49.121980][ T29] audit: type=1326 audit(2000000008.489:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.129381][ T3906] EXT4-fs (loop4): mount failed [ 49.156272][ T29] audit: type=1326 audit(2000000008.489:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.188659][ T29] audit: type=1326 audit(2000000008.489:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.199323][ T3907] ext4: Unknown parameter 'fowner>00000000000000000000' [ 49.214299][ T29] audit: type=1326 audit(2000000008.489:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.248648][ T29] audit: type=1326 audit(2000000008.489:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.275893][ T29] audit: type=1326 audit(2000000008.489:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.302038][ T29] audit: type=1326 audit(2000000008.489:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.328999][ T29] audit: type=1326 audit(2000000008.489:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.356182][ T29] audit: type=1326 audit(2000000008.489:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f99ac2ee929 code=0x7ffc0000 [ 49.406229][ T3907] loop3: detected capacity change from 0 to 2048 [ 49.421472][ T3913] wg2: entered promiscuous mode [ 49.430025][ T3913] wg2: entered allmulticast mode [ 49.444269][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.445307][ T3913] program syz.1.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.471562][ T3907] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.492764][ T3920] FAULT_INJECTION: forcing a failure. [ 49.492764][ T3920] name failslab, interval 1, probability 0, space 0, times 0 [ 49.507305][ T3920] CPU: 0 UID: 0 PID: 3920 Comm: syz.0.134 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 49.507337][ T3920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.507351][ T3920] Call Trace: [ 49.507357][ T3920] [ 49.507365][ T3920] __dump_stack+0x1d/0x30 [ 49.507385][ T3920] dump_stack_lvl+0xe8/0x140 [ 49.507405][ T3920] dump_stack+0x15/0x1b [ 49.507483][ T3920] should_fail_ex+0x265/0x280 [ 49.507516][ T3920] should_failslab+0x8c/0xb0 [ 49.507540][ T3920] kmem_cache_alloc_node_noprof+0x57/0x320 [ 49.507631][ T3920] ? __alloc_skb+0x101/0x320 [ 49.507660][ T3920] __alloc_skb+0x101/0x320 [ 49.507730][ T3920] ? strncpy_from_user+0x17d/0x230 [ 49.507758][ T3920] __ipv6_ifa_notify+0x126/0x880 [ 49.507808][ T3920] ? timer_delete+0x17/0x20 [ 49.507838][ T3920] ? work_grab_pending+0x225/0x480 [ 49.507858][ T3920] ? __rcu_read_unlock+0x4f/0x70 [ 49.507886][ T3920] ipv6_del_addr+0x455/0x5e0 [ 49.507914][ T3920] inet6_addr_del+0x2f4/0x400 [ 49.508003][ T3920] addrconf_del_ifaddr+0xa7/0xe0 [ 49.508037][ T3920] inet6_ioctl+0x84/0x190 [ 49.508054][ T3920] ? ioctl_has_perm+0x257/0x2a0 [ 49.508532][ T3920] sock_do_ioctl+0x70/0x220 [ 49.508561][ T3920] sock_ioctl+0x41b/0x610 [ 49.508583][ T3920] ? __pfx_sock_ioctl+0x10/0x10 [ 49.508609][ T3920] __se_sys_ioctl+0xce/0x140 [ 49.508664][ T3920] __x64_sys_ioctl+0x43/0x50 [ 49.508686][ T3920] x64_sys_call+0x19a8/0x2fb0 [ 49.508706][ T3920] do_syscall_64+0xd2/0x200 [ 49.508723][ T3920] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.508786][ T3920] ? clear_bhb_loop+0x40/0x90 [ 49.508804][ T3920] ? clear_bhb_loop+0x40/0x90 [ 49.508882][ T3920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.508902][ T3920] RIP: 0033:0x7ff9b822e929 [ 49.508918][ T3920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.508936][ T3920] RSP: 002b:00007ff9b6897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.508955][ T3920] RAX: ffffffffffffffda RBX: 00007ff9b8455fa0 RCX: 00007ff9b822e929 [ 49.509006][ T3920] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000007 [ 49.509019][ T3920] RBP: 00007ff9b6897090 R08: 0000000000000000 R09: 0000000000000000 [ 49.509031][ T3920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.509044][ T3920] R13: 0000000000000000 R14: 00007ff9b8455fa0 R15: 00007ffc07f6ee98 [ 49.509063][ T3920] [ 49.885206][ T3933] loop4: detected capacity change from 0 to 1024 [ 49.916084][ T3933] EXT4-fs: Ignoring removed bh option [ 49.922484][ T3933] EXT4-fs: inline encryption not supported [ 49.951429][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.962969][ T3933] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.988857][ T3933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 50.007051][ T3933] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.139: bad orphan inode 11 [ 50.024223][ T3933] ext4_test_bit(bit=10, block=4) = 1 [ 50.026827][ T4002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4002 comm=syz.3.141 [ 50.031168][ T3933] is_bad_inode(inode)=0 [ 50.052455][ T3933] NEXT_ORPHAN(inode)=3254779904 [ 50.057605][ T3933] max_ino=32 [ 50.061387][ T3933] i_nlink=0 [ 50.078434][ T3933] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.139: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.102371][ T3933] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.139: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.123729][ T4010] hub 9-0:1.0: USB hub found [ 50.142611][ T4010] hub 9-0:1.0: 8 ports detected [ 50.163001][ T3933] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.139: Failed to acquire dquot type 0 [ 50.188778][ T3933] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 50.226242][ T3933] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.139: mark_inode_dirty error [ 50.263637][ T3933] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.286154][ T3933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.292127][ T4017] __nla_validate_parse: 24 callbacks suppressed [ 50.292206][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 50.357590][ T3933] SELinux: syz.4.139 (3933) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.445325][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.508203][ T3315] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.546414][ T3315] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 50.628525][ T3315] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 50.809631][ T4032] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 50.837460][ T4032] team0: Device ipvlan2 is already an upper device of the team interface [ 50.855152][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.864886][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.886131][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 50.952758][ T4042] tipc: Enabled bearer , priority 10 [ 51.172900][ T4051] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 51.288391][ T4051] loop3: detected capacity change from 0 to 512 [ 51.321625][ T4051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.349310][ T4051] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.415002][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.501325][ T4063] netlink: 165 bytes leftover after parsing attributes in process `syz.3.158'. [ 51.540407][ T4065] loop4: detected capacity change from 0 to 2048 [ 51.546168][ T4067] loop2: detected capacity change from 0 to 2048 [ 51.564807][ T4065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.954056][ T4089] FAULT_INJECTION: forcing a failure. [ 51.954056][ T4089] name failslab, interval 1, probability 0, space 0, times 0 [ 51.970070][ T4089] CPU: 1 UID: 0 PID: 4089 Comm: syz.1.167 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 51.970110][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.970121][ T4089] Call Trace: [ 51.970127][ T4089] [ 51.970193][ T4089] __dump_stack+0x1d/0x30 [ 51.970212][ T4089] dump_stack_lvl+0xe8/0x140 [ 51.970228][ T4089] dump_stack+0x15/0x1b [ 51.970242][ T4089] should_fail_ex+0x265/0x280 [ 51.970300][ T4089] should_failslab+0x8c/0xb0 [ 51.970324][ T4089] kmem_cache_alloc_noprof+0x50/0x310 [ 51.970350][ T4089] ? skb_clone+0x151/0x1f0 [ 51.970423][ T4089] skb_clone+0x151/0x1f0 [ 51.970441][ T4089] __netlink_deliver_tap+0x2c9/0x500 [ 51.970538][ T4089] netlink_unicast+0x64c/0x670 [ 51.970563][ T4089] netlink_sendmsg+0x58b/0x6b0 [ 51.970581][ T4089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.970619][ T4089] __sock_sendmsg+0x142/0x180 [ 51.970643][ T4089] ____sys_sendmsg+0x31e/0x4e0 [ 51.970678][ T4089] ___sys_sendmsg+0x17b/0x1d0 [ 51.970713][ T4089] __x64_sys_sendmsg+0xd4/0x160 [ 51.970806][ T4089] x64_sys_call+0x2999/0x2fb0 [ 51.970942][ T4089] do_syscall_64+0xd2/0x200 [ 51.970958][ T4089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.970985][ T4089] ? clear_bhb_loop+0x40/0x90 [ 51.971046][ T4089] ? clear_bhb_loop+0x40/0x90 [ 51.971069][ T4089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.971089][ T4089] RIP: 0033:0x7f2b24cee929 [ 51.971103][ T4089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.971121][ T4089] RSP: 002b:00007f2b23336038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.971205][ T4089] RAX: ffffffffffffffda RBX: 00007f2b24f16080 RCX: 00007f2b24cee929 [ 51.971218][ T4089] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 51.971236][ T4089] RBP: 00007f2b23336090 R08: 0000000000000000 R09: 0000000000000000 [ 51.971248][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.971258][ T4089] R13: 0000000000000000 R14: 00007f2b24f16080 R15: 00007ffd68e32ff8 [ 51.971272][ T4089] [ 51.998792][ T4089] netlink: 'syz.1.167': attribute type 13 has an invalid length. [ 52.060754][ T4094] loop2: detected capacity change from 0 to 128 [ 52.068661][ T3413] tipc: Node number set to 2886997007 [ 52.109713][ T4094] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.266569][ T4094] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.295419][ T4097] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.365293][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.495594][ T4099] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 52.533814][ T4099] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 52.541969][ T4099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.556400][ T4099] vhci_hcd vhci_hcd.0: Device attached [ 52.586145][ T4120] IPv6: Can't replace route, no match found [ 52.635213][ T4099] 9pnet_fd: Insufficient options for proto=fd [ 52.647609][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.665346][ T4114] vhci_hcd: connection closed [ 52.665970][ T3970] vhci_hcd: stop threads [ 52.677003][ T3970] vhci_hcd: release socket [ 52.683043][ T3970] vhci_hcd: disconnect device [ 52.715041][ T4128] loop2: detected capacity change from 0 to 2048 [ 52.731770][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.805580][ T4136] FAULT_INJECTION: forcing a failure. [ 52.805580][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.820570][ T4136] CPU: 1 UID: 0 PID: 4136 Comm: syz.3.181 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 52.820599][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.820612][ T4136] Call Trace: [ 52.820619][ T4136] [ 52.820628][ T4136] __dump_stack+0x1d/0x30 [ 52.820651][ T4136] dump_stack_lvl+0xe8/0x140 [ 52.820733][ T4136] dump_stack+0x15/0x1b [ 52.820749][ T4136] should_fail_ex+0x265/0x280 [ 52.820783][ T4136] should_fail+0xb/0x20 [ 52.820806][ T4136] should_fail_usercopy+0x1a/0x20 [ 52.820898][ T4136] _copy_to_user+0x20/0xa0 [ 52.820921][ T4136] simple_read_from_buffer+0xb5/0x130 [ 52.820950][ T4136] proc_fail_nth_read+0x100/0x140 [ 52.821063][ T4136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.821138][ T4136] vfs_read+0x1a0/0x6f0 [ 52.821233][ T4136] ? __rcu_read_unlock+0x4f/0x70 [ 52.821257][ T4136] ? __fget_files+0x184/0x1c0 [ 52.821280][ T4136] ksys_read+0xda/0x1a0 [ 52.821312][ T4136] __x64_sys_read+0x40/0x50 [ 52.821347][ T4136] x64_sys_call+0x2d77/0x2fb0 [ 52.821369][ T4136] do_syscall_64+0xd2/0x200 [ 52.821385][ T4136] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.821406][ T4136] ? clear_bhb_loop+0x40/0x90 [ 52.821424][ T4136] ? clear_bhb_loop+0x40/0x90 [ 52.821447][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.821465][ T4136] RIP: 0033:0x7f16e7e7d33c [ 52.821480][ T4136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.821494][ T4136] RSP: 002b:00007f16e64e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.821511][ T4136] RAX: ffffffffffffffda RBX: 00007f16e80a5fa0 RCX: 00007f16e7e7d33c [ 52.821524][ T4136] RDX: 000000000000000f RSI: 00007f16e64e70a0 RDI: 0000000000000006 [ 52.821537][ T4136] RBP: 00007f16e64e7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.821615][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.821625][ T4136] R13: 0000000000000000 R14: 00007f16e80a5fa0 R15: 00007fff637b5e08 [ 52.821689][ T4136] [ 53.064312][ T4119] loop4: detected capacity change from 0 to 1024 [ 53.071659][ T4119] EXT4-fs: Ignoring removed nobh option [ 53.078192][ T4119] EXT4-fs: Ignoring removed bh option [ 53.101441][ T4139] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 53.113130][ T4119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a816c018, mo2=0003] [ 53.126875][ T4119] System zones: 1-12 [ 53.137634][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.137857][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.183783][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 53.195070][ T4144] FAULT_INJECTION: forcing a failure. [ 53.195070][ T4144] name failslab, interval 1, probability 0, space 0, times 0 [ 53.211068][ T4144] CPU: 0 UID: 0 PID: 4144 Comm: syz.3.184 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 53.211094][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.211104][ T4144] Call Trace: [ 53.211109][ T4144] [ 53.211117][ T4144] __dump_stack+0x1d/0x30 [ 53.211140][ T4144] dump_stack_lvl+0xe8/0x140 [ 53.211160][ T4144] dump_stack+0x15/0x1b [ 53.211212][ T4144] should_fail_ex+0x265/0x280 [ 53.211268][ T4144] should_failslab+0x8c/0xb0 [ 53.211292][ T4144] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 53.211319][ T4144] ? shmem_alloc_inode+0x34/0x50 [ 53.211336][ T4144] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 53.211389][ T4144] shmem_alloc_inode+0x34/0x50 [ 53.211408][ T4144] alloc_inode+0x40/0x170 [ 53.211509][ T4144] new_inode+0x1d/0xe0 [ 53.211525][ T4144] shmem_get_inode+0x244/0x750 [ 53.211542][ T4144] __shmem_file_setup+0x113/0x210 [ 53.211630][ T4144] shmem_file_setup+0x3b/0x50 [ 53.211655][ T4144] __se_sys_memfd_create+0x2c3/0x590 [ 53.211689][ T4144] __x64_sys_memfd_create+0x31/0x40 [ 53.211716][ T4144] x64_sys_call+0x122f/0x2fb0 [ 53.211810][ T4144] do_syscall_64+0xd2/0x200 [ 53.211853][ T4144] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.211893][ T4144] ? clear_bhb_loop+0x40/0x90 [ 53.211911][ T4144] ? clear_bhb_loop+0x40/0x90 [ 53.211948][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.211971][ T4144] RIP: 0033:0x7f16e7e7e929 [ 53.212056][ T4144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.212071][ T4144] RSP: 002b:00007f16e64e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 53.212089][ T4144] RAX: ffffffffffffffda RBX: 0000000000000689 RCX: 00007f16e7e7e929 [ 53.212102][ T4144] RDX: 00007f16e64e6ef0 RSI: 0000000000000000 RDI: 00007f16e7f014cc [ 53.212114][ T4144] RBP: 0000200000001d00 R08: 00007f16e64e6bb7 R09: 00007f16e64e6e40 [ 53.212127][ T4144] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000240 [ 53.212140][ T4144] R13: 00007f16e64e6ef0 R14: 00007f16e64e6eb0 R15: 0000200000001280 [ 53.212219][ T4144] [ 53.500010][ T4153] FAULT_INJECTION: forcing a failure. [ 53.500010][ T4153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.514463][ T4153] CPU: 0 UID: 0 PID: 4153 Comm: syz.3.187 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 53.514490][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.514500][ T4153] Call Trace: [ 53.514507][ T4153] [ 53.514514][ T4153] __dump_stack+0x1d/0x30 [ 53.514601][ T4153] dump_stack_lvl+0xe8/0x140 [ 53.514619][ T4153] dump_stack+0x15/0x1b [ 53.514634][ T4153] should_fail_ex+0x265/0x280 [ 53.514664][ T4153] should_fail+0xb/0x20 [ 53.514736][ T4153] should_fail_usercopy+0x1a/0x20 [ 53.514798][ T4153] _copy_from_user+0x1c/0xb0 [ 53.514819][ T4153] kstrtouint_from_user+0x69/0xf0 [ 53.514885][ T4153] ? 0xffffffff81000000 [ 53.514899][ T4153] ? selinux_file_permission+0x1e4/0x320 [ 53.514925][ T4153] proc_fail_nth_write+0x50/0x160 [ 53.514945][ T4153] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.515003][ T4153] vfs_write+0x266/0x8e0 [ 53.515029][ T4153] ? vfs_read+0x47f/0x6f0 [ 53.515088][ T4153] ? __rcu_read_unlock+0x4f/0x70 [ 53.515109][ T4153] ? __fget_files+0x184/0x1c0 [ 53.515132][ T4153] ksys_write+0xda/0x1a0 [ 53.515202][ T4153] __x64_sys_write+0x40/0x50 [ 53.515232][ T4153] x64_sys_call+0x2cdd/0x2fb0 [ 53.515252][ T4153] do_syscall_64+0xd2/0x200 [ 53.515268][ T4153] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.515293][ T4153] ? clear_bhb_loop+0x40/0x90 [ 53.515332][ T4153] ? clear_bhb_loop+0x40/0x90 [ 53.515352][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.515374][ T4153] RIP: 0033:0x7f16e7e7d3df [ 53.515388][ T4153] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 53.515405][ T4153] RSP: 002b:00007f16e64e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 53.515423][ T4153] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f16e7e7d3df [ 53.515461][ T4153] RDX: 0000000000000001 RSI: 00007f16e64e70a0 RDI: 0000000000000005 [ 53.515472][ T4153] RBP: 00007f16e64e7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.515482][ T4153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 53.515492][ T4153] R13: 0000000000000000 R14: 00007f16e80a5fa0 R15: 00007fff637b5e08 [ 53.515508][ T4153] [ 53.768888][ T4157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.779604][ T4157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.808202][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.842554][ T4167] SELinux: syz.3.191 (4167) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 53.846194][ T4165] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 53.866309][ T4165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.188'. [ 53.886341][ T4167] wireguard0: entered promiscuous mode [ 53.892940][ T4167] wireguard0: entered allmulticast mode [ 53.906922][ T4165] loop4: detected capacity change from 0 to 512 [ 53.916428][ T4165] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.188: bg 0: block 393: padding at end of block bitmap is not set [ 53.933222][ T4165] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 53.943752][ T4165] EXT4-fs (loop4): 2 truncates cleaned up [ 53.950923][ T4165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.990808][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.038264][ T4175] loop2: detected capacity change from 0 to 2048 [ 54.065156][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.164271][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 54.164285][ T29] audit: type=1326 audit(2000000013.569:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.199434][ T4184] FAULT_INJECTION: forcing a failure. [ 54.199434][ T4184] name failslab, interval 1, probability 0, space 0, times 0 [ 54.203173][ T29] audit: type=1326 audit(2000000013.579:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.213531][ T4184] CPU: 1 UID: 0 PID: 4184 Comm: syz.3.197 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 54.213561][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.213571][ T4184] Call Trace: [ 54.213579][ T4184] [ 54.213604][ T4184] __dump_stack+0x1d/0x30 [ 54.213626][ T4184] dump_stack_lvl+0xe8/0x140 [ 54.213646][ T4184] dump_stack+0x15/0x1b [ 54.213663][ T4184] should_fail_ex+0x265/0x280 [ 54.213690][ T4184] should_failslab+0x8c/0xb0 [ 54.213758][ T4184] kmem_cache_alloc_noprof+0x50/0x310 [ 54.213784][ T4184] ? audit_log_start+0x365/0x6c0 [ 54.213815][ T4184] audit_log_start+0x365/0x6c0 [ 54.213861][ T4184] audit_seccomp+0x48/0x100 [ 54.213885][ T4184] ? __seccomp_filter+0x68c/0x10d0 [ 54.213975][ T4184] __seccomp_filter+0x69d/0x10d0 [ 54.213995][ T4184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.214023][ T4184] ? vfs_write+0x75e/0x8e0 [ 54.214077][ T4184] ? __rcu_read_unlock+0x4f/0x70 [ 54.214098][ T4184] ? __fget_files+0x184/0x1c0 [ 54.214119][ T4184] __secure_computing+0x82/0x150 [ 54.214141][ T4184] syscall_trace_enter+0xcf/0x1e0 [ 54.214211][ T4184] do_syscall_64+0xac/0x200 [ 54.214229][ T4184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.214253][ T4184] ? clear_bhb_loop+0x40/0x90 [ 54.214273][ T4184] ? clear_bhb_loop+0x40/0x90 [ 54.214294][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.214352][ T4184] RIP: 0033:0x7f16e7e7e929 [ 54.214367][ T4184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.214384][ T4184] RSP: 002b:00007f16e64e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000068 [ 54.214470][ T4184] RAX: ffffffffffffffda RBX: 00007f16e80a5fa0 RCX: 00007f16e7e7e929 [ 54.214482][ T4184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.214494][ T4184] RBP: 00007f16e64e7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.214522][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.214534][ T4184] R13: 0000000000000000 R14: 00007f16e80a5fa0 R15: 00007fff637b5e08 [ 54.214552][ T4184] [ 54.214560][ T4184] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 54.243403][ T29] audit: type=1326 audit(2000000013.579:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.257268][ T4184] audit: out of memory in audit_log_start [ 54.269387][ T29] audit: type=1326 audit(2000000013.579:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.451744][ T4189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.200'. [ 54.460706][ T29] audit: type=1326 audit(2000000013.579:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.599285][ T29] audit: type=1326 audit(2000000013.579:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.627071][ T29] audit: type=1326 audit(2000000013.579:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.657323][ T29] audit: type=1326 audit(2000000013.579:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7e7e929 code=0x7ffc0000 [ 54.743649][ T4196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4196 comm=syz.2.202 [ 54.816610][ T4198] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 54.825372][ T4198] netlink: 224 bytes leftover after parsing attributes in process `syz.2.203'. [ 54.861947][ T4198] loop2: detected capacity change from 0 to 512 [ 54.884734][ T4198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.203: bg 0: block 393: padding at end of block bitmap is not set [ 54.906346][ T4198] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.935421][ T4198] EXT4-fs (loop2): 2 truncates cleaned up [ 55.048216][ T4206] loop4: detected capacity change from 0 to 512 [ 55.086366][ T4206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.152153][ T4206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.171050][ T4206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.205: bg 0: block 248: padding at end of block bitmap is not set [ 55.193073][ T4208] loop2: detected capacity change from 0 to 512 [ 55.203181][ T4208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.562088][ T4208] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.586670][ T4206] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.205: Failed to acquire dquot type 1 [ 55.662007][ T4206] EXT4-fs (loop4): 1 truncate cleaned up [ 55.701838][ T4206] ext4: Unknown parameter '00000010' [ 55.748564][ T4225] netlink: 96 bytes leftover after parsing attributes in process `syz.3.210'. [ 55.940124][ T4231] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.962273][ T4233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4233 comm=syz.1.214 [ 56.028233][ T4238] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 56.036280][ T4238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.216'. [ 56.065179][ T4240] loop4: detected capacity change from 0 to 512 [ 56.078157][ T4227] loop3: detected capacity change from 0 to 256 [ 56.080497][ T4240] ext4: Unknown parameter 'noacl' [ 56.093457][ T4227] vfat: Unknown parameter '0xffffffffffffffff0000000000000000000000018446744073709551615ÿÿÿ·' [ 56.101753][ T4238] loop2: detected capacity change from 0 to 512 [ 56.119575][ T4238] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.216: bg 0: block 393: padding at end of block bitmap is not set [ 56.140186][ T4238] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 56.150217][ T4245] loop4: detected capacity change from 0 to 512 [ 56.151195][ T4238] EXT4-fs (loop2): 2 truncates cleaned up [ 56.157618][ T4245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.174854][ T4245] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (16416!=33349) [ 56.185661][ T4245] EXT4-fs (loop4): group descriptors corrupted! [ 56.234806][ T4247] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.255806][ T4249] loop4: detected capacity change from 0 to 2048 [ 56.255980][ T4251] loop3: detected capacity change from 0 to 2048 [ 56.351927][ T4262] ================================================================== [ 56.360811][ T4262] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 56.362080][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 56.369849][ T4262] [ 56.369861][ T4262] read-write to 0xffff888106b75230 of 8 bytes by task 4251 on cpu 0: [ 56.369878][ T4262] xas_clear_mark+0x91/0x180 [ 56.369910][ T4262] __folio_start_writeback+0x2e7/0x440 [ 56.369934][ T4262] ext4_bio_write_folio+0x5ad/0x9f0 [ 56.409091][ T4262] mpage_submit_folio+0xe4/0x170 [ 56.415047][ T4262] ext4_do_writepages+0x1153/0x21c0 [ 56.420979][ T4262] ext4_writepages+0x176/0x300 [ 56.426877][ T4262] do_writepages+0x1c3/0x310 [ 56.432262][ T4262] file_write_and_wait_range+0x156/0x2c0 [ 56.441302][ T4262] generic_buffers_fsync_noflush+0x45/0x120 [ 56.448321][ T4262] ext4_sync_file+0x1ab/0x690 [ 56.454279][ T4262] vfs_fsync_range+0x10d/0x130 [ 56.459682][ T4262] ext4_buffered_write_iter+0x34f/0x3c0 [ 56.466545][ T4262] ext4_file_write_iter+0xdbf/0xf00 [ 56.472125][ T4262] do_iter_readv_writev+0x421/0x4c0 [ 56.477954][ T4262] vfs_writev+0x2df/0x8b0 [ 56.482511][ T4262] __se_sys_pwritev2+0xfc/0x1c0 [ 56.487375][ T4262] __x64_sys_pwritev2+0x67/0x80 [ 56.493389][ T4262] x64_sys_call+0x1cea/0x2fb0 [ 56.498793][ T4262] do_syscall_64+0xd2/0x200 [ 56.504521][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.510601][ T4262] [ 56.513100][ T4262] read to 0xffff888106b75230 of 8 bytes by task 4262 on cpu 1: [ 56.522157][ T4262] xas_find_marked+0x218/0x620 [ 56.527223][ T4262] find_get_entry+0x5d/0x380 [ 56.532215][ T4262] filemap_get_folios_tag+0x13b/0x210 [ 56.538592][ T4262] mpage_prepare_extent_to_map+0x320/0xaa0 [ 56.544608][ T4262] ext4_do_writepages+0xa1a/0x21c0 [ 56.550256][ T4262] ext4_writepages+0x176/0x300 [ 56.555210][ T4262] do_writepages+0x1c3/0x310 [ 56.561255][ T4262] filemap_write_and_wait_range+0x144/0x340 [ 56.567306][ T4262] filemap_invalidate_pages+0xa4/0x1a0 [ 56.575419][ T4262] kiocb_invalidate_pages+0x6e/0x80 [ 56.581342][ T4262] __iomap_dio_rw+0x5d4/0x1250 [ 56.586837][ T4262] iomap_dio_rw+0x40/0x90 [ 56.591455][ T4262] ext4_file_write_iter+0xad9/0xf00 [ 56.597270][ T4262] do_iter_readv_writev+0x421/0x4c0 [ 56.603166][ T4262] vfs_writev+0x2df/0x8b0 [ 56.607641][ T4262] __se_sys_pwritev2+0xfc/0x1c0 [ 56.612935][ T4262] __x64_sys_pwritev2+0x67/0x80 [ 56.618101][ T4262] x64_sys_call+0x1cea/0x2fb0 [ 56.624303][ T4262] do_syscall_64+0xd2/0x200 [ 56.629521][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.635861][ T4262] [ 56.638173][ T4262] value changed: 0x3fffffffffffc000 -> 0x3ffffffffc000000 [ 56.645654][ T4262] [ 56.648072][ T4262] Reported by Kernel Concurrency Sanitizer on: [ 56.655126][ T4262] CPU: 1 UID: 0 PID: 4262 Comm: syz.3.221 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 56.667684][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.680183][ T4262] ==================================================================