last executing test programs: 37.036115949s ago: executing program 3 (id=256): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) syz_open_procfs(r4, &(0x7f0000000040)='mounts\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r8}, 0x10) dup2(r6, r5) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="10470710797af31b3d0e1e5d6a8a110e205161c15b63824b139de0005a20e847b94c122dc2e7ceb6cbb49a3cd7566f32646afcf8d0cb3d9bfa22e3f3a3b148e4accb61dbd45b1f206df5ef5ecee238f9ad262d5b27bb5f6f2713e32ab61fcdcd949020bd434e6d341036403f2a0b5cc7e9e844d55c10298560ce5d8e3c0e37bef92616615a210f7f7ca721b98c72f7aab70e88c58d58325a1ff932b22d00258d180f70e8ba83721d8ed0020f0bc7dd6e32405f7868e06723b9873060e832da96acd114c36f07649a874991352a6ca8f0924acc4cd614e536c4560f619189b067160a802b90652e801b008c76cda51deb8dba72d7e375fa898c82e53b9ea45afef85aa3c903d6565f0c3b435b3d721de214f9ec539ab6d809c3732701ccf70b329ffab7d433f8e539b415d8691f7ec0a685792600d9908c003e1984328027937f98c3d8ff3ee434c25dec1341fb03f95aaf030d2cd52cdbc2b85586cba51526cd0f3eb6d46195102abe000e6ad1d381ecc3c9d9075009aa12c3bc56e5447add48ceb55f29b91c4cb628e1fae7d1812a43145607db3d23e90bb73ec12d99b7c642327b492d7038032e26804d36edb95b54366a2101e9419b7f98ddf654e2700d40c2f83ae492c15aa62069cdd321df874588ef8ad3b8d79a5d05c6e1785a14277af5ce69e15043b0d8579a7606f469bf6d157163bc09f7d281f295cff4cadce38fe24e2a420bc363c2a68e1d5594923d4285a40bb7aa96e655b10ad67656c2e340da3e8592b780b1950e63c9d600eb8d76e5ac3cd537d93132c57a2a43803dc28e04489a3ea68a71e52811000a6ebc5680cdb98af1e6ddc88562c442bc5c61060aa1b61486a6c84719d0d6b3f155b723471e70001138e4e023c89f00698aba1a3b38d5f69bee1fc076c75df92e3cb3ac41b2cbad30f4f7b746d80bd49e981a65d70f7631db375c445601a69d8f0fd1b174695fd670e8d0a82b420aab0356ba86f0e4572865505676acb5d81d215f3e37f62807ce97f5bc47bb747df70ae1589d806c9e51e5f5c8561605277f6dea51bfdf887d93f63a829ecfd18a4da3071af7d77d86591d407b156052f5a5dbbba74a16d041c6932373e71c4ad7ef06886e29e9139a687abf0f306e9e423f01e2ffb2758ba78b5ba69db675eb1dc55b60b052a48065d8cc3b66594d3351f1f7e99e294f49761f7db3a114fe680e4c9faec8bb4fdb70838dc73d3cd5c1a61f7f2f7a441a048e0aae3c7fd10b8df8d77fe861e9c241d54533091e1e9439a00820e84a609fb55ed6d02c7b1ffe904b907955d03345058bcaec1528b91532eb4dd0a1917514db1ca20607131efcac877242a5359ec0b21f343806f9fb672b51747dd6d8a649b9bd5f796efb6939680cbd619c3c8706ac883087b341726f9c6f64c98b0c9cb2d7737a8e08ded30d55c6541925b194f25ad1aa042f3db1c5501fc03b5d626f2e429e87435fdbfaad3e4949874bc8e70d0e0a2659557e19088617ab10e50fb4b1d99e6d2052596c363480ba99150979a744f489db9f56750e106224b9c4201d6815e322e1c30de74ce20345bbd3cd2d0b9e74b92b411763bb8c8664e031eb0b41f3e6282d23ae92eddf981c764112ba1e598920c12fed15e06e56cfd76a76d7ce6f7dab7c0d3b50e40f63e4895eabd964e74f9c7c5b9d61480f9055ff36ac5000ff8f7cb1", 0x4b4}], 0x4}}], 0x6, 0x200040d1) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r12 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r12, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r12, 0x8) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r13, 0x1, 0x1f, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x69}, 0xffffffffffffffff, 0x2000000000000, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 36.690798633s ago: executing program 3 (id=260): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x330a00000000, 0x7fff}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f00000004c0)="0600", 0x2) sendfile(r2, r2, &(0x7f0000001000), 0xffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x596a}, 0x18) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 35.39165278s ago: executing program 3 (id=272): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x180, 0x180, 0x2b0, 0x0, 0x180, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x80000, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x1d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}, {{@ip={@loopback, @private=0x6, 0x0, 0x0, 'vlan0\x00', 'bond_slave_0\x00', {}, {}, 0x21, 0x1, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wg2\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 35.132698563s ago: executing program 3 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x100}, @TCA_PIE_BETA={0x8, 0x5, 0xd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x30000000000) 35.130352673s ago: executing program 3 (id=277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x121) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20) move_mount(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x103) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x118}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) 35.103145003s ago: executing program 3 (id=279): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2f67, 0x10a5, 0x3, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r6, 0x4, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=';\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fedbdf25530000000c009900ff01000079000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000450000000c"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x1006}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_pidfd_open(0x0, 0x0) 19.887159676s ago: executing program 32 (id=279): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2f67, 0x10a5, 0x3, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r6, 0x4, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=';\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fedbdf25530000000c009900ff01000079000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000450000000c"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x1006}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_pidfd_open(0x0, 0x0) 6.929920301s ago: executing program 1 (id=652): syz_open_dev$sg(0x0, 0x180d, 0x80) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x4, 0x7, 0x0, 0x10}, @generic={0x1, 0xa, 0x4, 0x7, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xf5, 0x1000, &(0x7f00000004c0)=""/4096, 0x40f00, 0x18, '\x00', r3, @fallback=0x26, r2, 0x8, &(0x7f00000014c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x9, 0xf, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0xd, 0x0, r2, 0x2, '\x00', r3, r2, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001680)={0x3, [0xffff, 0x3ff, 0x83b7]}, 0xa) write$binfmt_elf64(r2, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0xbb, 0x8, 0x54, 0x5, 0x1, 0x2, 0x3e, 0x7, 0x229, 0x40, 0x135, 0xfbc, 0x4, 0x38, 0x2, 0x3, 0xff, 0x4000}, [{0x60000000, 0x5, 0x6, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffa, 0xcb}, {0x60000000, 0x100, 0x6b5, 0x31d, 0x8, 0xfffffffffffffff7, 0x5, 0x40}], "510743149176ba670f4d4bf89c7e89e4eecdf1bfa664aa76458b31c3a9d609b72cca44aaa1998f46f790a95b1a562f7d5ee81fcc23b4b49e64dc", ['\x00', '\x00']}, 0x2ea) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x98, 0x2a0, 0x98, 0x0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f00000019c0), {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x7, 0x3}}}, {{@uncond, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'nr0\x00', {0x86, 0x9, 0x59, 0x3c2f, 0x14, 0x8, 0x1, 0x8000, 0x8, 0x8}, {0x1}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x108, @ipv4=@broadcast, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xff, 0x6}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'batadv0\x00', 'veth1_to_team\x00', {}, {}, 0x16, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e0) symlinkat(0x0, r2, &(0x7f0000002080)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002100)={0x4, &(0x7f00000020c0)=[{0x5, 0x7f, 0x61, 0x3}, {0xcb0c, 0x6, 0x0, 0xe}, {0x1400, 0xb, 0xcc, 0x101}, {0x7ff, 0x3, 0x81, 0x5}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005140)=[{{&(0x7f00000022c0)={0xa, 0x4e21, 0x81, @local, 0x9}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002300)="0080dccb08d60d4a0b208c03dfcc63bf49e8b9db117a8babe8c8a6587da5dfc95cda7c7cc8a2dc83fca02ed8766861df711521916bda8cbcfcf7e55f522277a7f3ac5b68ce5fa53b885b58741d76b00d2b0061ed45a6052d8cafbaaf5b8366dba392f445ac29effbf5e25b154a05c00649769931ea4fb88dee357a1bde170414379990a54ce267b98bbffbc886719084233f8ec31808b8a30f655a438ca672241b9f9e049434487c80b33e5b2326f5ee534a21d96f34c506a17078993686dce14a1697840bcbaa2db5e126", 0xcb}, {&(0x7f0000002400)="21550c475fbfbdfd41893a9ebf2b1536656ef4396838cdb6e7dd29526220d5039a8e29d17629f98254206a4a202ec9374778814eb456c0c300b2041bdcb2da3e15a4ce259cb5058b3b04b6288f949641b5e359feb8480c9ede4fac9ef3deaedea12f72d7ddff336525fc8a5d0bfa48eb16572711f04208b25d359019e7f4155ff331686908c28c56c7b92e2ac78ff80f6e78b84811f3eb19ecbcf9e5a7c966ae36e66eb0532fea49cb1e73fdc18cf967220501d2e3fc1c", 0xb7}, {&(0x7f00000024c0)="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", 0xfe}, {&(0x7f00000025c0)="a2d537f55b46941b23644ed7a96b3ef58a1938a64e8b9f1b4b20d2481683b4a393471fbe54dfb7beefc43ac29c228b10f8d4f3225d8680b376a7b28c9ec150800e6658f27635c9198fafac734fd6ded68663861700c88794358ae72e3eee1a071420bdc54872d434b6ea29b3126889093f6ce9459bf5b5659853556600bed2a0413c4ed7e2edcc3957215c520f5b25645a7fcb1364867572de6c71520c688dafce0c9b9bf66331877d3a64cf26fac69da26d2858b54b353ca95864c462aa", 0xbe}, {&(0x7f0000002680)="99d8ecce725e211124f8c5f680b12e79f4bffcbaf5ba5f99a02217a4428bb4876c29c3ee76fa184efb3a9cd59e57fb694fc3e8113f28b619b930c04dc77072777eed031075e96a9eea6081f7c45725ca9d1e220bb36da50b", 0x58}], 0x5, &(0x7f0000002780)=[@tclass={{0x14, 0x29, 0x43, 0x401}}], 0x18}}, {{&(0x7f00000027c0)={0xa, 0x4e24, 0x5, @mcast1, 0xfb}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000002800)="1c71b8c23aa15843f43007a692fb57bc354d419b5fbf157c369cfd8bcc5bb64d7b99bc0a3a6ac36fb83f991efa3059862aed095cc48f510601ab29d2821eb173a5aea1de639322bc77176bfb021bc19e7122ae2ff37d5785", 0x58}], 0x1, &(0x7f00000028c0)=[@hopopts={{0xa8, 0x29, 0x36, {0x29, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @generic={0xf1, 0x81, "e5e623c58a4deb8b589828942949cadfeffa4196f9f27c4684fdda10a71550ad5fe90885d864bda8a60e2f6e4d48eb6297c4057b6427163ca2c61f025cf072ea065a6b4137e92d9475bf21e0aa28d381980e8c9fa02a1580484d2734fd14b9bce87561b3d1386010e469e28cbfc8dc1d1d1c8f109b5b1c97b7075f09fc88cd8ab5"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002980)="47c9e3a96e0c127f9bffe42d0824f251271783ddbcafdd318019eb04e05d237859c8207bd8237890bb06a9975a004c6275c6f44305b2f5b189f6638b03606b6711b40d29be35291a196e09c5f06f63951e413d849e829501c01aa270eebf1d88a1dd111e808907216ab2219f73f9a9f0087c2187ecd092727c48ebf561e4f5598195fc5a9506a4e80efd221f4143c2dba792d2d31f5ce38632eea8e1dfd852401165e7f1ef9c37df", 0xa8}, {&(0x7f0000002a40)="f700c76a817da96d50bd179019e0eb9d881a0e37710ec47d21b913f607389b1ab411af24f006a5ef70230536e455ec60", 0x30}, {&(0x7f0000002a80)="b2eb97a8937815814e4d82449682210962a78340790b9611db8bca91157c30572977ae3f14821221d1264577bea67f3577d07de621df13bdcffb91db279b47c155b29eef87f5553b9de042f60256a3cabea5701e20464675419b9c6e734fa2c06d4e9754c14c2084e28e4b09ea6baf120e9477e167ec95e1755946e6060995d31fb644775eae3c60bd3759030ed377945219e05e135e601be8c737e6e9bd9cfe", 0xa0}, {&(0x7f0000002b40)="56f7ba44f70bfd36ec012a8e80df25b207bfea64f2cb333915fecd4814c5e18d1a388075fdbf77a8ef66bf4ddbdb6e02b0d70a9f1e90b537edaa7af47c800fc42e0fda5c1893107c4017f7964551de5361466307dcd881542326734d39444e3ad084df6b659c2fd6d133e54f04b15901e756f3611d0726b13fec3c905178afef6fa210cf9c8d40b3e0cdb74250598567202a1add7e630910720b3366a01521f95167baed9f5d", 0xa6}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="e12e9e9a6130e76ff8c409c97ec4f56a4609c3d64c81c5f28861e262c0bb61858084474d055b308e2e49c6c9bed6c7a8b5ff7d1b381c602075db804d9df2dc349c9eb0a72b9975454c36433d7cbd2ed02c57ab3e50c4a132d4af3edb044fcbdf7edd5e9fdaebf23353b3d5e03e4e12924f1b8aa89dd2a973570e29dea1ab2056f8cc0f333e4c84f67512cf", 0x8b}], 0x6, &(0x7f0000003d40)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x0, 0xd, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @local, @local]}}}, @hopopts={{0x50, 0x29, 0x36, {0x2, 0x6, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1]}}}], 0x100}}, {{&(0x7f0000003e40)={0xa, 0x4e22, 0xd1, @remote, 0x1}, 0x1c, &(0x7f0000004f80)=[{&(0x7f0000003e80)="fe95efa63b5896f3821f1384f16c79cd814fd15d0dd1d247b3aacff25d7e98304b32ada4c151b34ba36fb0e915db3fec688f9f18a0743c27d41e19fa488aeaf4fea9fe54eeaecba4b1f87a6b4d7caf6a8f3151c76490a029b3dd8631416799c914e47d100f833bc8d879a4aac2e8eedc5373cbe6548a9ce82a474e34fd645f3e997fc303f5820c5cf34ad29a2462cae298719b1ffd0c90acd7d7a38200faa71c8b202a84522b1cc96c21205ad24368c18b44a232b8188a87b930d616772b42e3a9b19a95fffc88d7791a44", 0xcb}, {&(0x7f0000003f80)="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", 0xff0}], 0x2, &(0x7f0000004fc0)=[@hopopts={{0x70, 0x29, 0x36, {0x5c, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x3e}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x3, [0x1, 0x6, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x3, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x40, 0x8, [0x2f5]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0xff}}]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x5e, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0xafb, [0x9, 0x9, 0xf3a, 0xffffffffffffacf3, 0x4, 0x4, 0x0]}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x7}}, @pad1]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x2f, 0x3, '\x00', [@ra={0x5, 0x2, 0x7ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x24}, @pad1, @pad1]}}}, @dontfrag={{0x14}}], 0x178}}], 0x4, 0x8820) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000005280)={0x6, &(0x7f0000005240)=[{0x1, 0x3, 0x7, 0x474}, {0x6, 0x7f, 0x4, 0x74a3}, {0x5, 0x3, 0xec, 0x7ff}, {0x190, 0xa, 0x1, 0x5}, {0xfffa, 0x6e, 0x4, 0x4}, {0x1ff, 0xfb, 0x30}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000005300)={0x2, &(0x7f00000052c0)=[{0xbb, 0x5, 0xa, 0x8}, {0x1, 0x7, 0x9, 0x68e}]}, 0x10) signalfd4(r0, &(0x7f0000005340)={[0x3]}, 0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.490590487s ago: executing program 5 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 6.462044088s ago: executing program 5 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r4, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='tegra_dma_isr\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 6.438343418s ago: executing program 5 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.391961198s ago: executing program 5 (id=668): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa26}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) 6.388931109s ago: executing program 5 (id=669): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88040008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x842) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 6.208616481s ago: executing program 5 (id=672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) accept4(r1, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 6.071242682s ago: executing program 1 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.172454114s ago: executing program 1 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r4, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='tegra_dma_isr\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.153607624s ago: executing program 1 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair(0x3, 0xa, 0x3, &(0x7f0000000040)) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 5.113351075s ago: executing program 1 (id=680): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa26}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) 4.67662851s ago: executing program 1 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) 4.528637572s ago: executing program 33 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) 3.484530576s ago: executing program 2 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001500050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xb1, 0x7ffc2001}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000ff0f0000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc198aa3e6e72ae47, 0xffff}, {0xe, 0xffff}, {0x8, 0x2}}}, 0x24}}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 3.438930806s ago: executing program 2 (id=696): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1ad9f132fea531e41600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000fc0000000000400000008500000036000000850000006e0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="45b55402d0347fe4602335adc25d702444caec15ef67129705c81ed89ba2cb61e261ff255f13d0919b148866bf0cfbdf8bc879bf4a0c016f064a88b858c70ec68fec1307bec2685a7abb75122140e27355ad53811ada9457f7472b0af72cfbb53036fd5e73c9cb0a2d34349daa7eb2f8b71dcd03d0be5d9fa5a03e49324698242760eedd4bb3e2c5c2bee66c04f3", @ANYRES64=r1, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000090000009500000000000000e3d08374b8210cc34769133c49f3c9f806e29270fb1f981bd28f591dde08b0b6fd389bf1503a059ecc316881ab72edc03d64168c8a0d45cbffed6836e823fcd468b99b7542176942bee7a64280ac9057bb92587d02e25a0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e64f38d640000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6c7, r4}, 0x38) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r6 = epoll_create1(0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7}]}) close_range(r7, r7, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019"], 0x44}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 2.571484307s ago: executing program 2 (id=706): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x91e, 0x12) (async) socketpair(0x22, 0xa, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x6, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@access_any}], [{@dont_appraise}, {@obj_type}]}}) (async) unshare(0x22020400) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r2, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x57b6, 0x810003, 0x2, 0x0, 0x0) 2.485718988s ago: executing program 2 (id=708): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0xfffff9, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x108) 2.36689312s ago: executing program 2 (id=709): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0xd2e, r1, &(0x7f00000000c0)=0x7, 0x8, 0x2) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="06f4ce362c831072ae0d5bef25684dc9a2c9965b921f68daf385742370f77031b31482d9", 0x24}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @loopback}}}], 0x38}, 0x891) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r4) socket$inet6(0xa, 0xa, 0x5) timer_create(0x5, &(0x7f0000000400)={0x0, 0x21}, &(0x7f0000000440)=0x0) timer_settime(r5, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwritev2(r6, &(0x7f0000000640)=[{&(0x7f0000000500)="5650038768167d44b849db398b40716317224b75a815d568e124a899eecb4edf963e381b6734dd5a77922ad6615e4c327a8f9116944d74aaff53178e0f8212847ffa1bb83a5c989fa97ca01fc45dfe04c89a29ced4d4651cf5afc4772b", 0x5d}, {&(0x7f0000000580)="31099682f1e8655d9cc1d011a307d54166765e986be4e86798098dcb58c5cec2", 0x20}, {&(0x7f00000005c0)="98b121ff37bdbb91f54393792749449888557ab054a8085e", 0x18}, {&(0x7f0000000600)="52f097fc0d9ec72e2c3e8e7bded8439855de21d75fc10878012c71bea4eaf1db8114c614d22cba656d", 0x29}], 0x4, 0x7, 0xaa, 0x11) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000680)=0x2, 0x4) r8 = socket$netlink(0x10, 0x3, 0x9) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x140a, 0x4, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x18000}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r8) sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xdc, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x392}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x909d}, 0x4010004) getpid() r12 = add_key$keyring(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, r12) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000c40)) io_uring_enter(r1, 0x3175, 0xe158, 0x1, &(0x7f0000000c80)={[0x1]}, 0x8) 2.075132773s ago: executing program 2 (id=712): syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) timer_create(0x7, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 2.006078624s ago: executing program 6 (id=714): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xd, 0x0, 0x7fff0000}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x1a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000005fe700b44993b1f4239f00f8ffffffb703000000000000b70400000000000085000000c30000009546695c057774a96e7c6f7e2029b46b749b34994559b2055fc537e77858ac8524462da7bdc743fa1eacb65ff7d603ff4d7254"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1.933286805s ago: executing program 6 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.707476958s ago: executing program 6 (id=717): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x454, &(0x7f0000000940)="$eJzs209sFNUfAPDvTLvl9+NfK+IfELVKjI1/WlpQOXjRaOIBo4ke8LhuCyEs1NCaACFSjcGLiSFRr8ajiQfP3rwY9WTiVe+GhCgX0FPN7M6U3WW3UNjuAvv5JNO+t/N23/vuzJt5M282gIE1nv1JIjZHxO8RMVrPNhcYr/+7culM5Z9LZypJLC+/9VdSK3f50plKUbR436Y8M5FGpB8neSXNFk6dPlquVudO5PmpxWPvTS2cOv3skWPlw3OH547P7N+/b+/0C8/PPNeVOLO4Lu/8YH7XjtfeOf965eD5d3/+Nmvv5nx9YxzdMp4F/vdyTeu6J7pdWZ9taUgnw31sCGsyFBHZ5irV+v9oDMXVjTcar37U18YB6yo7N23ovHppGbiLJdHvFgD9UZzos+vfYunR0OO2cPGl+gVQFveVfKmvGY40L1Nqub7tpvGIOLj071fZEut0HwIAoNGnlS8OxDPtxn/p8fsbym3N51DGIuKeiNgWEfdGxPaIuC8isrIPRMSDa6y/dWro2vFPeuGmArtB2fjvxXxuq3n8V4z+Ymwoz22pxV9KDh2pzu3Jv5OJKG3I8tOr1PHDK7991mld4/gvW7L6i7Fg3o4Lwy036GbLi+XaoLQLLn4YsXO4XfzJykxAEhE7ImLn2j56a5E48tQ3uzoVun78q+jCPNPy1xFP1rf/UrTEX0hWn5+c+l9U5/ZMFXvFtX759dybneq/pfi7INv+G5v3/9YiY0njfO3C2us498cnHa9pbnb/H0nerh2PRvLXTpYXF09MR4wkB2r5ptdnrr63yJ8sl1bin9jdvv9vy9+Txf9QRGQ78cMR8UhEPJq3/bGIeDwidq8S/08vd153O2z/2bbHv5X9v2X7rz0xdPTH7zvVf2Pbf18tNZG/Ujv+XceNNvBWvjsAAAC4U6S1Z+CTdHIlnaaTk/Vn+LfHxrQ6v7D49KH594/P1p+VH4tSWtzpGm24HzqdLOWfWM/P5PeKi/V78/vGnw/9v5afrMxXZ/scOwy6TR36f+bPoX63Dlh37ebRZkb60BCg51r7f9qcPftGLxsD9JTfa8Pguk7/T3vVDqD3nP9hcF3t/1+upM62lDEXAHcn538YXPo/DC79HwaX/g8D6VZ+1y8xyIlIb4tmSKxTos3B4jtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHee/wIAAP//1KjvDA==") 1.338279523s ago: executing program 6 (id=718): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000100), 0x10) bind$can_raw(r2, &(0x7f0000000140), 0x10) 1.212657634s ago: executing program 6 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 994.250197ms ago: executing program 0 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000300)='mm_page_alloc\x00', r1, 0x0, 0xfffff7fefffffffd}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 920.133518ms ago: executing program 0 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="643c87cf", 0x3c64}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1707000004000000ff00000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r3], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) 886.598528ms ago: executing program 4 (id=724): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 860.661409ms ago: executing program 4 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000052400048020000180080001006e61740014000280080001400000001108000340000000140900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], &(0x7f00000000c0)=""/209, 0x2e, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000008010200000000000000000000000009"], 0x34}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000ffc000) 808.668899ms ago: executing program 0 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x14\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\x0e\xaa\x00\x005\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x00\x00\x00\x00\x00', 0x40, 0xad, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioperm(0x1, 0x10, 0x40) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/232) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200"], 0x148}}, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000880)={0x60, 0x3, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9, 0x0, 0x0, 0x2, 0x40, 0x20, 0x22, 0x63}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={r3, 0x20, &(0x7f0000001a40)={&(0x7f00000007c0)=""/120, 0x78, 0x0, &(0x7f00000001c0)=""/11, 0xb}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2={0xff, 0x5}, 0x1000002}, 0x1c) 789.421219ms ago: executing program 0 (id=727): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000e00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_abort}, {@bsdgroups}, {@errors_remount}, {@discard}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x624, &(0x7f0000001b00)="$eJzs3c9rHG0dAPDvzCYxaaNpRYotigEPLUjzoxarnmwv9lCwYA8iHgxNUkM3bWhSsLVgCh4UFES8ivTiP+BdildvIqg3z0IViXhQ6b7M7EyybzKbH32zmW3m84FNn+eZyT7Pd2efzvPM5tkJoLGmsx9pxMWI+G4SMdWzbTK6G6eL/bb+9eJ+9kii0/nmP5NIirJy/7fFv2fzZ+z6462IT7b21rv+7PnDhXan64cRsxura7Prz55fXVldeLD0YOnR/LUvX78x95X56/PHEmcZ1+073/jMz370vS8t/6l9NYmvxb3RHyzGrjiOy3RMx9sixN7ykYi4kSUqXpf3TRlCUnM7eDet4v04GhEXYipaea5rKlZ+WmvjgIHqtCI6QEMl+j80VDkOKOf2g5gHD7M3N7sToL3xj3SvjcR4Pjc6s5X0zIy6891zx1B/Vsf/X1z6VfaIPtchRo6hnn42X0bEp6viT/K2nYvxPHdmK925qNO9ZBRzETFWvBaHm/+P7imZ3pU/6fffUeLfOQ6T26m0OD63yl86orrjB6CZXt8sTuSbWS4//+UnvGxkWI5/omL8M1lx7noXdZ//+o//yvP9eH6NPN01DstO9Hern3LPIOdvP7n9i371947/skdWfzkWPAlvXkZc2hX/j/OBXrJ9/JOK458e4dOrr//5H7f7bas7/s6riMuV85+doVyWmt1YXSvLdn0+Obu80l6a6/6srON3f/jOb/rVX3f82fGPyvjLt3H18c/K1g5Zx2/vvlrtt23ywPjTv48l9/LUWFHy/YWNjSfzEWPJnWKXnvJr+7el3Kd8jiz+K5+v7v9V7/+iqvxAb37o1ehv7VsPt/rtd+jjv3fqlHnb2T/crMbN/bZn8S/2ef/v1/+zsp8fUHfpP99++tldRRNlYr/4JyrC2TcYAAAAAAAAaLg0/ww2SWe202k6M5Ov4Y1PxZm0/Xh94wvLj58+Woy4kv895GhaftI91c0nWX6++HvYMn9tV/6LEXE+In7ZmsjzM/cftxfrDh4AAAAAAAAAAAAAAAAAAACGxNli/X95n+p/t7rr/w9l48KAWwcM3CBvMAcMN/0fmivv/2ndrQDq4PwPzaX/Q3Pp/9Bc+j80l/4PzaX/Q3Pp/9Bc+j8AAAAAnErnP/f6r0lEbH51In9kxopto7W2DBi0o/fx6YG0Azh5rRP9NWCYbH/0b/k/NM6hxv//Lb4ccPDNAWqQVBXmg4PO/p3/deVvAgAAAAAAAAAAAAADcPmi9f/QVGn8vu4mADXZu5D/4tYhF/r5DgB4z/nqf2iujzTHd4EAToWDVvGP99tg/T8AAAAAAAAAAAAAnJjJ/JGkM8UtQCcjTWdmIj4eEediNFleaS/NRcQnIuIvrdGPZfn5uhsNAAAAAAAAAAAAAAAAAAAAp8z6s+cPF9rtpSe9if/tKTndifIuqMPSnt5EJMf8hONx4D4TETEMsQ8mMdJTkkRsZkd+KBr2ZD2Gohlp3oya/2MCAAAAAAAAAAAAAAAAAIAG6ll7XO3Sr0+4RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw8nbu///uieSA56k7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/fRBAAAA//84zTrr") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r4) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xd, &(0x7f00000003c0)=@raw=[@snprintf], &(0x7f00000002c0)='syzkaller\x00', 0xfff, 0x0, &(0x7f0000000440), 0x41100, 0x24, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x7, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0xd, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"/4851], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r7, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26d78a"], 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") write$binfmt_script(r9, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x20000080}, 0x0) close(r0) 749.67812ms ago: executing program 4 (id=728): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x64, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xa}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x90}}, 0x24040084) socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) 642.067081ms ago: executing program 4 (id=729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000100), 0x10) bind$can_raw(r2, &(0x7f0000000140), 0x10) 641.490101ms ago: executing program 4 (id=730): socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffffc, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57a, &(0x7f0000001b40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000d0963d6bfe656189000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9}, 0x18) 615.668572ms ago: executing program 0 (id=731): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r7, 0x2030}], 0x1, 0x0, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r10) acct(&(0x7f0000000140)='./cgroup\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r7}}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 511.167663ms ago: executing program 0 (id=732): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2f67, 0x10a5, 0x3, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r6, 0x4, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=';\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fedbdf25530000000c009900ff01000079000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000450000000c"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x1006}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_pidfd_open(0x0, 0x0) 494.172423ms ago: executing program 4 (id=733): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x9}, 0x8) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10010, 0xffffffffffffffff, 0xad4a4000) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) (fail_nth: 6) 0s ago: executing program 6 (id=734): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) kernel console output (not intermixed with test programs): being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.437300][ T4032] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.205: corrupted inode contents [ 44.449398][ T4032] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.205: mark_inode_dirty error [ 44.481503][ T4032] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.205: corrupted inode contents [ 44.513086][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.205: corrupted inode contents [ 44.525485][ T4038] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.205: mark_inode_dirty error [ 44.561826][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.205: corrupted inode contents [ 44.581527][ T4038] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.205: mark_inode_dirty error [ 44.594232][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.205: corrupted inode contents [ 44.606798][ T4038] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.205: mark_inode_dirty error [ 44.666986][ T4032] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.205: corrupted inode contents [ 44.719382][ T4045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.728088][ T4045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.738344][ T4052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 44.754250][ T4056] netlink: 100 bytes leftover after parsing attributes in process `syz.4.213'. [ 44.847862][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.876021][ T4062] netlink: 'syz.3.215': attribute type 4 has an invalid length. [ 44.879964][ T4063] FAULT_INJECTION: forcing a failure. [ 44.879964][ T4063] name failslab, interval 1, probability 0, space 0, times 0 [ 44.896488][ T4063] CPU: 0 UID: 0 PID: 4063 Comm: syz.2.216 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 44.896526][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.896543][ T4063] Call Trace: [ 44.896551][ T4063] [ 44.896561][ T4063] __dump_stack+0x1d/0x30 [ 44.896597][ T4063] dump_stack_lvl+0xe8/0x140 [ 44.896623][ T4063] dump_stack+0x15/0x1b [ 44.896645][ T4063] should_fail_ex+0x265/0x280 [ 44.896686][ T4063] should_failslab+0x8c/0xb0 [ 44.896788][ T4063] __kmalloc_noprof+0xa5/0x3e0 [ 44.896831][ T4063] ? memcg_list_lru_alloc+0x195/0x490 [ 44.896882][ T4063] memcg_list_lru_alloc+0x195/0x490 [ 44.896925][ T4063] __memcg_slab_post_alloc_hook+0x1b2/0x5a0 [ 44.896954][ T4063] ? should_fail_ex+0xdb/0x280 [ 44.897052][ T4063] kmem_cache_alloc_lru_noprof+0x229/0x310 [ 44.897109][ T4063] ? __d_alloc+0x3d/0x350 [ 44.897210][ T4063] __d_alloc+0x3d/0x350 [ 44.897256][ T4063] d_alloc_parallel+0x53/0xc40 [ 44.897278][ T4063] ? __rcu_read_unlock+0x4f/0x70 [ 44.897303][ T4063] ? __d_lookup+0x316/0x340 [ 44.897325][ T4063] ? link_path_walk+0x7f4/0x8b0 [ 44.897367][ T4063] path_openat+0x6b5/0x2170 [ 44.897453][ T4063] do_filp_open+0x109/0x230 [ 44.897492][ T4063] do_sys_openat2+0xa6/0x110 [ 44.897518][ T4063] __x64_sys_openat+0xf2/0x120 [ 44.897565][ T4063] x64_sys_call+0x1af/0x2fb0 [ 44.897591][ T4063] do_syscall_64+0xd0/0x1a0 [ 44.897618][ T4063] ? clear_bhb_loop+0x25/0x80 [ 44.897644][ T4063] ? clear_bhb_loop+0x25/0x80 [ 44.897671][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.897741][ T4063] RIP: 0033:0x7f575c39d2d0 [ 44.897760][ T4063] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 44.897849][ T4063] RSP: 002b:00007f575aa06a00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 44.897872][ T4063] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f575c39d2d0 [ 44.897949][ T4063] RDX: 0000000000080001 RSI: 00007f575c3fbce0 RDI: 00000000ffffff9c [ 44.897964][ T4063] RBP: 00007f575c3fbce0 R08: 0000000000000000 R09: 0000000000000000 [ 44.898009][ T4063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 44.898024][ T4063] R13: 00007f575aa06aa0 R14: 00007f575c5c5fa0 R15: 00007ffc91862f58 [ 44.898048][ T4063] [ 45.145274][ T4066] netlink: 'syz.3.217': attribute type 21 has an invalid length. [ 45.416062][ T4085] loop3: detected capacity change from 0 to 2048 [ 45.453944][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.222161][ T4101] loop2: detected capacity change from 0 to 512 [ 46.233783][ T4101] EXT4-fs: Ignoring removed oldalloc option [ 46.282107][ T4101] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.230: Parent and EA inode have the same ino 15 [ 46.331658][ T4101] EXT4-fs (loop2): 1 orphan inode deleted [ 46.369502][ T4101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.505911][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.536539][ T4112] ieee802154 phy0 wpan0: encryption failed: -22 [ 46.610002][ T4114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 46.631297][ T4116] loop2: detected capacity change from 0 to 512 [ 46.648975][ T4116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.668322][ T4120] loop4: detected capacity change from 0 to 512 [ 46.679072][ T4120] EXT4-fs (loop4): can't read group descriptor 0 [ 46.687142][ T4116] EXT4-fs (loop2): 1 truncate cleaned up [ 46.695460][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.719248][ T4120] loop4: detected capacity change from 0 to 512 [ 46.734889][ T4116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.770079][ T4116] loop2: detected capacity change from 0 to 512 [ 46.778079][ T4120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.791441][ T4116] EXT4-fs: Ignoring removed orlov option [ 46.793442][ T4127] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.807904][ T4116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.837419][ T4116] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.838010][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.854847][ T4120] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.863497][ T4116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.236: bg 0: block 248: padding at end of block bitmap is not set [ 46.924057][ T4116] __quota_error: 184 callbacks suppressed [ 46.924093][ T4116] Quota error (device loop2): write_blk: dquota write failed [ 46.937305][ T4116] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 46.947349][ T4116] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.236: Failed to acquire dquot type 1 [ 47.014977][ T4120] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.238: corrupted inode contents [ 47.041104][ T4116] EXT4-fs (loop2): 1 truncate cleaned up [ 47.097732][ T29] audit: type=1326 audit(1746004601.054:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e13e969 code=0x7ffc0000 [ 47.151432][ T29] audit: type=1326 audit(1746004601.114:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e13e969 code=0x7ffc0000 [ 47.179811][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.205038][ T4120] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.238: mark_inode_dirty error [ 47.219850][ T4116] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.222897][ T4120] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.238: corrupted inode contents [ 47.250498][ T4116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 47.271030][ T4137] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.238: corrupted inode contents [ 47.284723][ T4137] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.238: mark_inode_dirty error [ 47.323258][ T4146] loop1: detected capacity change from 0 to 512 [ 47.330152][ T4137] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.238: corrupted inode contents [ 47.344432][ T4146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.354380][ T29] audit: type=1400 audit(1746004601.304:983): avc: denied { sqpoll } for pid=4147 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.361567][ T4137] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.238: mark_inode_dirty error [ 47.373659][ T29] audit: type=1400 audit(1746004601.304:984): avc: denied { create } for pid=4147 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 47.413889][ T4146] EXT4-fs (loop1): 1 truncate cleaned up [ 47.420114][ T4146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.432413][ T4137] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.238: corrupted inode contents [ 47.434287][ T4146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.461284][ T4137] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.238: mark_inode_dirty error [ 47.486477][ T4138] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.238: corrupted inode contents [ 47.515369][ T4146] loop1: detected capacity change from 0 to 512 [ 47.522169][ T4146] EXT4-fs: Ignoring removed orlov option [ 47.528373][ T4146] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.539089][ T4146] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.546111][ T4146] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.243: bg 0: block 248: padding at end of block bitmap is not set [ 47.561662][ T4146] Quota error (device loop1): write_blk: dquota write failed [ 47.569070][ T4146] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 47.579094][ T4146] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.243: Failed to acquire dquot type 1 [ 47.606260][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.617169][ T29] audit: type=1400 audit(1746004601.574:985): avc: denied { create } for pid=4154 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 47.640828][ T4146] EXT4-fs (loop1): 1 truncate cleaned up [ 47.761948][ T4146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.770555][ T29] audit: type=1400 audit(1746004601.614:986): avc: denied { read } for pid=4154 comm="syz.2.246" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.868001][ T4146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.951083][ T4158] infiniband syz0: set active [ 47.955830][ T4158] infiniband syz0: added bond0 [ 47.992709][ T4172] pim6reg1: entered promiscuous mode [ 47.998088][ T4172] pim6reg1: entered allmulticast mode [ 48.045960][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.054930][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.067019][ T4158] RDS/IB: syz0: added [ 48.071148][ T4158] smc: adding ib device syz0 with port count 1 [ 48.077501][ T4158] smc: ib device syz0 port 1 has pnetid [ 48.094737][ T4175] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 48.102678][ T4175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.139635][ T4175] dummy0: entered promiscuous mode [ 48.150565][ T4175] bridge0: port 3(dummy0) entered blocking state [ 48.157007][ T4175] bridge0: port 3(dummy0) entered disabled state [ 48.163925][ T4175] dummy0: entered allmulticast mode [ 48.172188][ T4175] bridge0: port 3(dummy0) entered blocking state [ 48.178688][ T4175] bridge0: port 3(dummy0) entered forwarding state [ 48.248044][ T4188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.265065][ T4180] loop4: detected capacity change from 0 to 256 [ 48.271918][ T4180] msdos: Bad value for 'check' [ 48.315134][ T4194] loop4: detected capacity change from 0 to 512 [ 48.325305][ T4194] EXT4-fs (loop4): can't read group descriptor 0 [ 48.336402][ T4194] loop4: detected capacity change from 0 to 512 [ 48.361500][ T4188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.392243][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.404860][ T4194] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.416220][ T4194] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.257: corrupted inode contents [ 48.428796][ T4194] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.257: mark_inode_dirty error [ 48.441723][ T4194] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.257: corrupted inode contents [ 48.460251][ T4194] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.257: corrupted inode contents [ 48.473578][ T4188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.476323][ T4194] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.257: mark_inode_dirty error [ 48.496639][ T4194] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.257: corrupted inode contents [ 48.518528][ T4194] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.257: mark_inode_dirty error [ 48.531636][ T4194] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.257: corrupted inode contents [ 48.543666][ T4194] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.257: mark_inode_dirty error [ 48.574854][ T4202] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.257: corrupted inode contents [ 48.602210][ T4188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.703551][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.718681][ T4188] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.731275][ T4188] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.758884][ T4188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.787754][ T4188] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.839938][ T4215] pim6reg1: entered promiscuous mode [ 48.845321][ T4215] pim6reg1: entered allmulticast mode [ 49.412210][ T4224] mmap: kfree (4224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.578873][ T4234] pim6reg1: entered promiscuous mode [ 49.584234][ T4234] pim6reg1: entered allmulticast mode [ 49.644977][ T4235] loop1: detected capacity change from 0 to 128 [ 49.673347][ T4235] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 49.693914][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 49.880585][ T4235] hsr_slave_1 (unregistering): left promiscuous mode [ 49.965428][ T4223] random: crng reseeded on system resumption [ 50.136961][ T4246] loop2: detected capacity change from 0 to 512 [ 50.182507][ T4246] EXT4-fs: Ignoring removed oldalloc option [ 50.269594][ T4246] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.273: Parent and EA inode have the same ino 15 [ 50.291585][ T4246] EXT4-fs (loop2): 1 orphan inode deleted [ 50.297685][ T4264] loop4: detected capacity change from 0 to 512 [ 50.298296][ T4264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.322214][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.351786][ T4267] pim6reg1: entered promiscuous mode [ 50.357172][ T4267] pim6reg1: entered allmulticast mode [ 50.363642][ T4264] EXT4-fs (loop4): 1 truncate cleaned up [ 50.369804][ T4264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.415943][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.433226][ T4264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.483921][ T4264] loop4: detected capacity change from 0 to 512 [ 50.496045][ T4264] EXT4-fs: Ignoring removed orlov option [ 50.503089][ T4264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.516837][ T4264] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.524836][ T4264] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.281: bg 0: block 248: padding at end of block bitmap is not set [ 50.539378][ T4264] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.281: Failed to acquire dquot type 1 [ 50.552449][ T4264] EXT4-fs (loop4): 1 truncate cleaned up [ 50.558902][ T4264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.573986][ T4264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.596332][ T4279] bond1: entered promiscuous mode [ 50.601476][ T4279] bond1: entered allmulticast mode [ 50.614881][ T4279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.641432][ T4279] bond1 (unregistering): Released all slaves [ 50.672604][ T4284] loop7: detected capacity change from 0 to 16384 [ 50.860485][ T4285] loop7: detected capacity change from 16384 to 16383 [ 50.870999][ T4285] I/O error, dev loop7, sector 10112 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 50.881164][ T4285] buffer_io_error: 6 callbacks suppressed [ 50.881180][ T4285] Buffer I/O error on dev loop7, logical block 1264, lost async page write [ 50.895628][ T4285] Buffer I/O error on dev loop7, logical block 1265, lost async page write [ 50.904386][ T4285] Buffer I/O error on dev loop7, logical block 1266, lost async page write [ 50.913046][ T4285] Buffer I/O error on dev loop7, logical block 1267, lost async page write [ 50.921740][ T4285] Buffer I/O error on dev loop7, logical block 1268, lost async page write [ 50.930494][ T4285] Buffer I/O error on dev loop7, logical block 1269, lost async page write [ 50.939109][ T4285] Buffer I/O error on dev loop7, logical block 1270, lost async page write [ 50.947790][ T4285] Buffer I/O error on dev loop7, logical block 1271, lost async page write [ 50.956442][ T4285] Buffer I/O error on dev loop7, logical block 1272, lost async page write [ 50.965100][ T4285] Buffer I/O error on dev loop7, logical block 1273, lost async page write [ 50.976976][ T4285] I/O error, dev loop7, sector 11136 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 50.990255][ T4285] I/O error, dev loop7, sector 12160 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.004275][ T4285] I/O error, dev loop7, sector 13184 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.017389][ T4285] I/O error, dev loop7, sector 14208 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.031522][ T4285] I/O error, dev loop7, sector 15232 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 51.043428][ T4285] I/O error, dev loop7, sector 16256 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 51.072694][ T4285] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.093196][ T4285] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.102706][ T4285] loop7: unable to read partition table [ 51.125784][ T4285] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 51.319992][ T4292] netlink: 14 bytes leftover after parsing attributes in process `syz.4.290'. [ 51.369811][ T4305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'. [ 51.420165][ T4311] pim6reg1: entered promiscuous mode [ 51.425683][ T4311] pim6reg1: entered allmulticast mode [ 51.475113][ T4313] loop4: detected capacity change from 0 to 2048 [ 51.507524][ T4313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.934934][ T4329] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 51.953775][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 51.953834][ T29] audit: type=1326 audit(1746004605.914:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 51.982787][ T29] audit: type=1326 audit(1746004605.914:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f575c39d2d0 code=0x7ffc0000 [ 52.005530][ T29] audit: type=1326 audit(1746004605.914:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 52.028310][ T29] audit: type=1326 audit(1746004605.914:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 52.187646][ T29] audit: type=1326 audit(1746004606.014:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 52.210536][ T29] audit: type=1326 audit(1746004606.014:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 52.233431][ T29] audit: type=1326 audit(1746004606.014:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 52.256088][ T29] audit: type=1326 audit(1746004606.014:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 52.958845][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.095085][ T4372] loop4: detected capacity change from 0 to 512 [ 53.105825][ T4372] EXT4-fs: Ignoring removed oldalloc option [ 53.125566][ T4372] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.317: Parent and EA inode have the same ino 15 [ 53.144394][ T4372] EXT4-fs (loop4): 1 orphan inode deleted [ 53.158919][ T4372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.184108][ T4376] xt_TCPMSS: Only works on TCP SYN packets [ 53.194542][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.346088][ T4387] loop1: detected capacity change from 0 to 2048 [ 53.364887][ T4387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.513639][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 53.792185][ T4401] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 53.827955][ T29] audit: type=1326 audit(1746004607.784:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e13e969 code=0x7ffc0000 [ 53.850864][ T29] audit: type=1326 audit(1746004607.784:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4400 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b8e13d2d0 code=0x7ffc0000 [ 54.308132][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 54.317849][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.325349][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.432619][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.440152][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.877066][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.895783][ T4423] pim6reg1: entered promiscuous mode [ 54.901263][ T4423] pim6reg1: entered allmulticast mode [ 55.173912][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 55.209157][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.216655][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.232200][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.239703][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.726867][ T4458] pim6reg1: entered promiscuous mode [ 55.732302][ T4458] pim6reg1: entered allmulticast mode [ 55.985560][ T4470] loop4: detected capacity change from 0 to 512 [ 56.000539][ T4470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.016397][ T4470] EXT4-fs (loop4): 1 truncate cleaned up [ 56.040949][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.063004][ T4470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.092405][ T4470] loop4: detected capacity change from 0 to 512 [ 56.107727][ T4470] EXT4-fs: Ignoring removed orlov option [ 56.123828][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 56.130446][ T4470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.261266][ T4470] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.268236][ T4470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.358: bg 0: block 248: padding at end of block bitmap is not set [ 56.290569][ T4470] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.358: Failed to acquire dquot type 1 [ 56.302809][ T4470] EXT4-fs (loop4): 1 truncate cleaned up [ 56.309111][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.323803][ T4470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.438412][ T4487] loop1: detected capacity change from 0 to 764 [ 56.457799][ T4487] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.052686][ T1036] kernel write not supported for file /131/attr/exec (pid: 1036 comm: kworker/1:2) [ 57.205993][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 57.206012][ T29] audit: type=1326 audit(1746004611.154:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.235559][ T29] audit: type=1326 audit(1746004611.154:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.259047][ T29] audit: type=1326 audit(1746004611.154:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.282930][ T29] audit: type=1326 audit(1746004611.164:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.306265][ T29] audit: type=1326 audit(1746004611.164:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.329645][ T29] audit: type=1326 audit(1746004611.164:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.353301][ T29] audit: type=1326 audit(1746004611.164:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.376809][ T29] audit: type=1326 audit(1746004611.164:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.400376][ T29] audit: type=1326 audit(1746004611.164:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.423788][ T29] audit: type=1326 audit(1746004611.164:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 57.518101][ T4518] loop4: detected capacity change from 0 to 512 [ 57.525350][ T4513] dummy0: entered promiscuous mode [ 57.543881][ T4513] macsec1: entered promiscuous mode [ 57.557653][ T4515] loop1: detected capacity change from 0 to 512 [ 57.568411][ T4518] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 57.577843][ T4513] dummy0: left promiscuous mode [ 57.592043][ T4515] EXT4-fs: Ignoring removed oldalloc option [ 57.708042][ T4515] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.375: Parent and EA inode have the same ino 15 [ 57.725005][ T4515] EXT4-fs (loop1): 1 orphan inode deleted [ 57.745454][ T4515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.811872][ T4533] loop4: detected capacity change from 0 to 2048 [ 57.835735][ T4533] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.848149][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 57.867621][ T4533] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.381: bg 0: block 345: padding at end of block bitmap is not set [ 57.886851][ T4536] bond1: entered promiscuous mode [ 57.891975][ T4536] bond1: entered allmulticast mode [ 57.897429][ T4536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.937251][ T4545] netlink: 'syz.0.383': attribute type 27 has an invalid length. [ 57.945138][ T4545] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 57.952876][ T4545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.383'. [ 58.015096][ T4551] loop4: detected capacity change from 0 to 2048 [ 58.022661][ T4554] pim6reg1: entered promiscuous mode [ 58.027993][ T4554] pim6reg1: entered allmulticast mode [ 58.192365][ T3380] kernel write not supported for file /210/attr/exec (pid: 3380 comm: kworker/0:3) [ 58.427431][ T4582] random: crng reseeded on system resumption [ 58.579146][ T4588] pim6reg1: entered promiscuous mode [ 58.581535][ T36] kernel write not supported for file /226/attr/exec (pid: 36 comm: kworker/1:1) [ 58.584633][ T4588] pim6reg1: entered allmulticast mode [ 58.678895][ T4600] loop1: detected capacity change from 0 to 512 [ 58.690244][ T4600] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.707955][ T4600] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.406: bad orphan inode 13 [ 58.731790][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 58.763654][ T4600] ext4_test_bit(bit=12, block=18) = 1 [ 58.769117][ T4600] is_bad_inode(inode)=0 [ 58.773424][ T4600] NEXT_ORPHAN(inode)=2130706432 [ 58.778391][ T4600] max_ino=32 [ 58.781626][ T4600] i_nlink=1 [ 58.851994][ T4600] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 58.879714][ T4617] FAULT_INJECTION: forcing a failure. [ 58.879714][ T4617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.892993][ T4617] CPU: 1 UID: 0 PID: 4617 Comm: syz.2.412 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 58.893028][ T4617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.893045][ T4617] Call Trace: [ 58.893053][ T4617] [ 58.893085][ T4617] __dump_stack+0x1d/0x30 [ 58.893113][ T4617] dump_stack_lvl+0xe8/0x140 [ 58.893137][ T4617] dump_stack+0x15/0x1b [ 58.893158][ T4617] should_fail_ex+0x265/0x280 [ 58.893199][ T4617] should_fail+0xb/0x20 [ 58.893248][ T4617] should_fail_usercopy+0x1a/0x20 [ 58.893307][ T4617] _copy_from_user+0x1c/0xb0 [ 58.893332][ T4617] ___sys_sendmsg+0xc1/0x1d0 [ 58.893365][ T4617] __x64_sys_sendmsg+0xd4/0x160 [ 58.893432][ T4617] x64_sys_call+0x2999/0x2fb0 [ 58.893460][ T4617] do_syscall_64+0xd0/0x1a0 [ 58.893486][ T4617] ? clear_bhb_loop+0x25/0x80 [ 58.893513][ T4617] ? clear_bhb_loop+0x25/0x80 [ 58.893579][ T4617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.893606][ T4617] RIP: 0033:0x7f575c39e969 [ 58.893626][ T4617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.893707][ T4617] RSP: 002b:00007f575aa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.893731][ T4617] RAX: ffffffffffffffda RBX: 00007f575c5c5fa0 RCX: 00007f575c39e969 [ 58.893747][ T4617] RDX: 0000000020040814 RSI: 0000200000000840 RDI: 0000000000000007 [ 58.893763][ T4617] RBP: 00007f575aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 58.893777][ T4617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.893792][ T4617] R13: 0000000000000000 R14: 00007f575c5c5fa0 R15: 00007ffc91862f58 [ 58.893815][ T4617] [ 59.111380][ T4600] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.406: bg 0: block 248: padding at end of block bitmap is not set [ 59.127027][ T4600] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.406: Failed to acquire dquot type 1 [ 59.147256][ T4600] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.163154][ T36] kernel write not supported for file /158/attr/exec (pid: 36 comm: kworker/1:1) [ 59.188532][ T4600] syz.1.406 (4600) used greatest stack depth: 9312 bytes left [ 59.219015][ T4628] pim6reg1: entered promiscuous mode [ 59.224473][ T4628] pim6reg1: entered allmulticast mode [ 59.263468][ T3380] kernel write not supported for file /163/attr/exec (pid: 3380 comm: kworker/0:3) [ 59.304200][ T4639] FAULT_INJECTION: forcing a failure. [ 59.304200][ T4639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.317912][ T4639] CPU: 0 UID: 0 PID: 4639 Comm: syz.1.421 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 59.317945][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.317956][ T4639] Call Trace: [ 59.317963][ T4639] [ 59.317970][ T4639] __dump_stack+0x1d/0x30 [ 59.317990][ T4639] dump_stack_lvl+0xe8/0x140 [ 59.318008][ T4639] dump_stack+0x15/0x1b [ 59.318058][ T4639] should_fail_ex+0x265/0x280 [ 59.318112][ T4639] should_fail+0xb/0x20 [ 59.318155][ T4639] should_fail_usercopy+0x1a/0x20 [ 59.318178][ T4639] _copy_to_user+0x20/0xa0 [ 59.318204][ T4639] do_fcntl+0x8c7/0xdf0 [ 59.318227][ T4639] ? selinux_file_fcntl+0x1cb/0x1e0 [ 59.318261][ T4639] __se_sys_fcntl+0xb1/0x120 [ 59.318317][ T4639] __x64_sys_fcntl+0x43/0x50 [ 59.318356][ T4639] x64_sys_call+0x1f1d/0x2fb0 [ 59.318383][ T4639] do_syscall_64+0xd0/0x1a0 [ 59.318437][ T4639] ? clear_bhb_loop+0x25/0x80 [ 59.318459][ T4639] ? clear_bhb_loop+0x25/0x80 [ 59.318531][ T4639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.318552][ T4639] RIP: 0033:0x7fd56d73e969 [ 59.318624][ T4639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.318641][ T4639] RSP: 002b:00007fd56bda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 59.318666][ T4639] RAX: ffffffffffffffda RBX: 00007fd56d965fa0 RCX: 00007fd56d73e969 [ 59.318678][ T4639] RDX: 0000200000000000 RSI: 0000000000000024 RDI: 0000000000000004 [ 59.318689][ T4639] RBP: 00007fd56bda7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.318701][ T4639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.318713][ T4639] R13: 0000000000000000 R14: 00007fd56d965fa0 R15: 00007ffc7db8ccd8 [ 59.318794][ T4639] [ 59.569897][ T4645] loop1: detected capacity change from 0 to 2048 [ 60.097313][ T3182] kernel write not supported for file /263/attr/exec (pid: 3182 comm: kworker/0:2) [ 60.219999][ T4666] FAULT_INJECTION: forcing a failure. [ 60.219999][ T4666] name failslab, interval 1, probability 0, space 0, times 0 [ 60.232715][ T4666] CPU: 0 UID: 0 PID: 4666 Comm: syz.2.429 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 60.232745][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 60.232758][ T4666] Call Trace: [ 60.232765][ T4666] [ 60.232772][ T4666] __dump_stack+0x1d/0x30 [ 60.232794][ T4666] dump_stack_lvl+0xe8/0x140 [ 60.232849][ T4666] dump_stack+0x15/0x1b [ 60.232923][ T4666] should_fail_ex+0x265/0x280 [ 60.233035][ T4666] should_failslab+0x8c/0xb0 [ 60.233070][ T4666] kmem_cache_alloc_noprof+0x50/0x310 [ 60.233109][ T4666] ? audit_log_start+0x365/0x6c0 [ 60.233166][ T4666] audit_log_start+0x365/0x6c0 [ 60.233205][ T4666] audit_seccomp+0x48/0x100 [ 60.233233][ T4666] ? __seccomp_filter+0x68c/0x10d0 [ 60.233268][ T4666] __seccomp_filter+0x69d/0x10d0 [ 60.233294][ T4666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.233428][ T4666] ? vfs_write+0x75e/0x8d0 [ 60.233457][ T4666] ? __rcu_read_unlock+0x4f/0x70 [ 60.233483][ T4666] ? __fget_files+0x184/0x1c0 [ 60.233532][ T4666] __secure_computing+0x82/0x150 [ 60.233556][ T4666] syscall_trace_enter+0xcf/0x1e0 [ 60.233605][ T4666] do_syscall_64+0xaa/0x1a0 [ 60.233627][ T4666] ? clear_bhb_loop+0x25/0x80 [ 60.233674][ T4666] ? clear_bhb_loop+0x25/0x80 [ 60.233696][ T4666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.233781][ T4666] RIP: 0033:0x7f575c39e969 [ 60.233804][ T4666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.233825][ T4666] RSP: 002b:00007f575aa07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 60.233848][ T4666] RAX: ffffffffffffffda RBX: 00007f575c5c5fa0 RCX: 00007f575c39e969 [ 60.233863][ T4666] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000000 [ 60.233920][ T4666] RBP: 00007f575aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 60.233935][ T4666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.233950][ T4666] R13: 0000000000000000 R14: 00007f575c5c5fa0 R15: 00007ffc91862f58 [ 60.233973][ T4666] [ 60.576379][ T4670] syz0: rxe_newlink: already configured on bond0 [ 60.610092][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 60.635357][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.646706][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.685982][ T4670] SELinux: ebitmap: truncated map [ 60.691762][ T4670] SELinux: failed to load policy [ 60.699553][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.709141][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.789732][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 60.823978][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 60.943177][ T4684] syzkaller0: entered allmulticast mode [ 60.976510][ T4684] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 61.052815][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 61.130594][ T3380] kernel write not supported for file /268/attr/exec (pid: 3380 comm: kworker/0:3) [ 61.188104][ T4706] FAULT_INJECTION: forcing a failure. [ 61.188104][ T4706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.201396][ T4706] CPU: 0 UID: 0 PID: 4706 Comm: syz.4.445 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 61.201444][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 61.201461][ T4706] Call Trace: [ 61.201469][ T4706] [ 61.201478][ T4706] __dump_stack+0x1d/0x30 [ 61.201505][ T4706] dump_stack_lvl+0xe8/0x140 [ 61.201530][ T4706] dump_stack+0x15/0x1b [ 61.201585][ T4706] should_fail_ex+0x265/0x280 [ 61.201621][ T4706] should_fail_alloc_page+0xf2/0x100 [ 61.201662][ T4706] __alloc_frozen_pages_noprof+0xff/0x360 [ 61.201700][ T4706] alloc_pages_mpol+0xb3/0x250 [ 61.201758][ T4706] alloc_pages_noprof+0x90/0x130 [ 61.201783][ T4706] pte_alloc_one+0x2a/0x110 [ 61.201806][ T4706] __pte_alloc+0x32/0x290 [ 61.201853][ T4706] handle_mm_fault+0x1d74/0x2ae0 [ 61.201892][ T4706] ? mas_walk+0xf2/0x120 [ 61.201922][ T4706] do_user_addr_fault+0x636/0x1090 [ 61.201954][ T4706] exc_page_fault+0x54/0xc0 [ 61.202064][ T4706] asm_exc_page_fault+0x26/0x30 [ 61.202088][ T4706] RIP: 0033:0x7f0d86070d66 [ 61.202103][ T4706] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 61.202120][ T4706] RSP: 002b:00007f0d848163f0 EFLAGS: 00010246 [ 61.202137][ T4706] RAX: 0000000000000001 RBX: 00007f0d84816490 RCX: 0000000000000101 [ 61.202153][ T4706] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f0d84816530 [ 61.202168][ T4706] RBP: 0000000000000102 R08: 00007f0d7c3f7000 R09: 0000000000000000 [ 61.202242][ T4706] R10: 0000000000000000 R11: 00007f0d848164a0 R12: 0000000000000001 [ 61.202257][ T4706] R13: 00007f0d8624bfc0 R14: 0000000000000000 R15: 00007f0d84816530 [ 61.202277][ T4706] [ 61.202287][ T4706] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.392404][ T4706] loop4: detected capacity change from 0 to 2048 [ 61.464304][ T4706] Alternate GPT is invalid, using primary GPT. [ 61.470774][ T4706] loop4: p2 p3 p7 [ 61.551520][ T4728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 61.629661][ T4732] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 61.738452][ T4738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 61.819253][ T4738] loop4: detected capacity change from 0 to 2048 [ 61.881055][ T4738] loop4: p1 < > p4 [ 61.890864][ T4738] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.033137][ T4745] loop4: detected capacity change from 0 to 512 [ 62.050170][ T4745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c11c, mo2=0002] [ 62.058356][ T4745] System zones: 1-12 [ 62.067699][ T4745] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.458: corrupted xattr block 255: invalid header [ 62.090926][ T4745] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 62.117938][ T4745] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.458: corrupted xattr block 255: invalid header [ 62.166895][ T4745] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 62.371941][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 62.371960][ T29] audit: type=1400 audit(1746004616.334:1387): avc: denied { create } for pid=4752 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.447805][ T29] audit: type=1400 audit(1746004616.364:1388): avc: denied { read } for pid=4752 comm="+}[@" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.470399][ T29] audit: type=1400 audit(1746004616.364:1389): avc: denied { open } for pid=4752 comm="+}[@" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.493349][ T29] audit: type=1400 audit(1746004616.374:1390): avc: denied { ioctl } for pid=4752 comm="+}[@" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.517732][ T29] audit: type=1400 audit(1746004616.374:1391): avc: denied { connect } for pid=4752 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.609564][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 62.643377][ T4763] capability: warning: `syz.4.465' uses deprecated v2 capabilities in a way that may be insecure [ 62.671628][ T29] audit: type=1400 audit(1746004616.624:1392): avc: denied { setcurrent } for pid=4757 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.691124][ T29] audit: type=1401 audit(1746004616.624:1393): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 62.741539][ T4765] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 62.763352][ T4767] loop4: detected capacity change from 0 to 512 [ 62.781599][ T4767] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.790273][ T4767] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.467: bad orphan inode 13 [ 62.800762][ T4767] ext4_test_bit(bit=12, block=18) = 1 [ 62.806213][ T4767] is_bad_inode(inode)=0 [ 62.810467][ T4767] NEXT_ORPHAN(inode)=2130706432 [ 62.815527][ T4767] max_ino=32 [ 62.818353][ T29] audit: type=1326 audit(1746004616.754:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e13e969 code=0x7ffc0000 [ 62.818726][ T4767] i_nlink=1 [ 62.844784][ T29] audit: type=1326 audit(1746004616.754:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b8e13d2d0 code=0x7ffc0000 [ 62.867589][ T29] audit: type=1326 audit(1746004616.754:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8e13e969 code=0x7ffc0000 [ 62.958547][ T4776] loop4: detected capacity change from 0 to 512 [ 62.981254][ T4776] EXT4-fs (loop4): can't read group descriptor 0 [ 63.031216][ T4783] loop1: detected capacity change from 0 to 512 [ 63.040592][ T4776] loop4: detected capacity change from 0 to 512 [ 63.042461][ T4783] EXT4-fs: Ignoring removed i_version option [ 63.054500][ T4783] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.071721][ T4785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.471'. [ 63.080757][ T4783] EXT4-fs (loop1): 1 truncate cleaned up [ 63.085879][ T4776] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.123366][ T4776] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.468: corrupted inode contents [ 63.143809][ T4776] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.468: mark_inode_dirty error [ 63.164777][ T4776] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.468: corrupted inode contents [ 63.228174][ T4792] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.468: corrupted inode contents [ 63.240802][ T4792] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.468: mark_inode_dirty error [ 63.253091][ T4792] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.468: corrupted inode contents [ 63.280356][ T4792] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.468: mark_inode_dirty error [ 63.312164][ T4792] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.468: corrupted inode contents [ 63.342233][ T4792] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.468: mark_inode_dirty error [ 63.379905][ T4776] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.468: corrupted inode contents [ 64.009151][ T4812] hub 9-0:1.0: USB hub found [ 64.020684][ T4812] hub 9-0:1.0: 8 ports detected [ 64.040948][ T3182] kernel write not supported for file /288/attr/exec (pid: 3182 comm: kworker/0:2) [ 64.169108][ T4818] loop1: detected capacity change from 0 to 2048 [ 64.204024][ T4818] EXT4-fs: Ignoring removed bh option [ 64.231263][ T4818] EXT4-fs: quotafile must be on filesystem root [ 64.348988][ T4815] syzkaller0: entered promiscuous mode [ 64.355358][ T4815] syzkaller0: entered allmulticast mode [ 64.462689][ T4829] FAULT_INJECTION: forcing a failure. [ 64.462689][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 64.475534][ T4829] CPU: 0 UID: 0 PID: 4829 Comm: syz.1.482 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 64.475631][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.475647][ T4829] Call Trace: [ 64.475656][ T4829] [ 64.475664][ T4829] __dump_stack+0x1d/0x30 [ 64.475684][ T4829] dump_stack_lvl+0xe8/0x140 [ 64.475701][ T4829] dump_stack+0x15/0x1b [ 64.475738][ T4829] should_fail_ex+0x265/0x280 [ 64.475767][ T4829] ? sctp_add_bind_addr+0x71/0x1e0 [ 64.475794][ T4829] should_failslab+0x8c/0xb0 [ 64.475863][ T4829] __kmalloc_cache_noprof+0x4c/0x320 [ 64.475891][ T4829] sctp_add_bind_addr+0x71/0x1e0 [ 64.475915][ T4829] sctp_copy_local_addr_list+0x199/0x220 [ 64.476026][ T4829] sctp_copy_one_addr+0x7f/0x280 [ 64.476050][ T4829] sctp_bind_addr_copy+0x79/0x290 [ 64.476075][ T4829] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 64.476146][ T4829] sctp_connect_new_asoc+0x1c3/0x3a0 [ 64.476201][ T4829] __sctp_connect+0x424/0x7a0 [ 64.476312][ T4829] ? selinux_sctp_bind_connect+0x20d/0x250 [ 64.476356][ T4829] sctp_getsockopt_connectx3+0x220/0x300 [ 64.476393][ T4829] sctp_getsockopt+0x910/0xaa0 [ 64.476469][ T4829] sock_common_getsockopt+0x5d/0x70 [ 64.476505][ T4829] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 64.476539][ T4829] do_sock_getsockopt+0x1fd/0x240 [ 64.476602][ T4829] __x64_sys_getsockopt+0x11e/0x1a0 [ 64.476698][ T4829] x64_sys_call+0x12aa/0x2fb0 [ 64.476726][ T4829] do_syscall_64+0xd0/0x1a0 [ 64.476753][ T4829] ? clear_bhb_loop+0x25/0x80 [ 64.476861][ T4829] ? clear_bhb_loop+0x25/0x80 [ 64.476888][ T4829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.476916][ T4829] RIP: 0033:0x7fd56d73e969 [ 64.476956][ T4829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.477021][ T4829] RSP: 002b:00007fd56bda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 64.477084][ T4829] RAX: ffffffffffffffda RBX: 00007fd56d965fa0 RCX: 00007fd56d73e969 [ 64.477169][ T4829] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 64.477180][ T4829] RBP: 00007fd56bda7090 R08: 0000200000000100 R09: 0000000000000000 [ 64.477191][ T4829] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 64.477243][ T4829] R13: 0000000000000000 R14: 00007fd56d965fa0 R15: 00007ffc7db8ccd8 [ 64.477266][ T4829] [ 64.785958][ T4839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.793245][ T4839] IPv6: NLM_F_CREATE should be set when creating new route [ 64.981100][ T4857] pim6reg1: entered promiscuous mode [ 64.986460][ T4857] pim6reg1: entered allmulticast mode [ 65.400519][ T4868] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 65.407452][ T4868] syzkaller1: linktype set to 769 [ 65.469233][ T4874] loop1: detected capacity change from 0 to 512 [ 65.476311][ T4874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.500272][ T4874] EXT4-fs (loop1): 1 truncate cleaned up [ 65.531145][ T4874] loop1: detected capacity change from 0 to 512 [ 65.537899][ T4874] EXT4-fs: Ignoring removed orlov option [ 65.545699][ T4874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.555184][ T4874] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.564520][ T4874] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.499: bg 0: block 248: padding at end of block bitmap is not set [ 65.579057][ T4874] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.499: Failed to acquire dquot type 1 [ 65.684276][ T4874] EXT4-fs (loop1): 1 truncate cleaned up [ 65.748226][ T4879] loop4: detected capacity change from 0 to 512 [ 65.766365][ T4879] EXT4-fs: Ignoring removed oldalloc option [ 65.969628][ T4879] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.500: Parent and EA inode have the same ino 15 [ 65.989358][ T4894] loop1: detected capacity change from 0 to 2048 [ 66.031489][ T37] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.044829][ T4879] EXT4-fs (loop4): 1 orphan inode deleted [ 66.112824][ T37] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.259734][ T4905] __nla_validate_parse: 5 callbacks suppressed [ 66.259749][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.274989][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.283917][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.500821][ T4880] chnl_net:caif_netlink_parms(): no params data found [ 66.517038][ T4905] netlink: 72 bytes leftover after parsing attributes in process `syz.0.506'. [ 66.533633][ T37] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.567067][ T4913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.601049][ T4914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 66.624763][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 66.733102][ T37] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.773050][ T4927] FAULT_INJECTION: forcing a failure. [ 66.773050][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 66.785759][ T4927] CPU: 0 UID: 0 PID: 4927 Comm: syz.4.510 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 66.785792][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.785807][ T4927] Call Trace: [ 66.785814][ T4927] [ 66.785878][ T4927] __dump_stack+0x1d/0x30 [ 66.785898][ T4927] dump_stack_lvl+0xe8/0x140 [ 66.785922][ T4927] dump_stack+0x15/0x1b [ 66.785941][ T4927] should_fail_ex+0x265/0x280 [ 66.786034][ T4927] should_failslab+0x8c/0xb0 [ 66.786066][ T4927] kmem_cache_alloc_noprof+0x50/0x310 [ 66.786140][ T4927] ? security_inode_alloc+0x37/0x100 [ 66.786169][ T4927] security_inode_alloc+0x37/0x100 [ 66.786227][ T4927] inode_init_always_gfp+0x4b7/0x500 [ 66.786258][ T4927] ? __pfx_sock_alloc_inode+0x10/0x10 [ 66.786289][ T4927] alloc_inode+0x58/0x170 [ 66.786317][ T4927] __sock_create+0x122/0x5b0 [ 66.786395][ T4927] ? __se_sys_setns+0x850/0xf10 [ 66.786432][ T4927] __sys_socket+0xb0/0x180 [ 66.786457][ T4927] __x64_sys_socket+0x3f/0x50 [ 66.786482][ T4927] x64_sys_call+0x285a/0x2fb0 [ 66.786561][ T4927] do_syscall_64+0xd0/0x1a0 [ 66.786660][ T4927] ? clear_bhb_loop+0x25/0x80 [ 66.786687][ T4927] ? clear_bhb_loop+0x25/0x80 [ 66.786710][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.786803][ T4927] RIP: 0033:0x7f0d861ae969 [ 66.786817][ T4927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.786836][ T4927] RSP: 002b:00007f0d84816fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 66.786856][ T4927] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0d861ae969 [ 66.786867][ T4927] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000024 [ 66.786903][ T4927] RBP: 00007f0d84817090 R08: 0000000000000000 R09: 0000000000000000 [ 66.786918][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.786932][ T4927] R13: 0000000000000000 R14: 00007f0d863d5fa0 R15: 00007ffe036bb208 [ 66.786955][ T4927] [ 66.786966][ T4927] socket: no more sockets [ 67.011668][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.018937][ T4880] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.032454][ T4880] bridge_slave_0: entered allmulticast mode [ 67.039025][ T4880] bridge_slave_0: entered promiscuous mode [ 67.048009][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.055216][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.062879][ T4880] bridge_slave_1: entered allmulticast mode [ 67.069406][ T4880] bridge_slave_1: entered promiscuous mode [ 67.091266][ T4930] pim6reg1: entered promiscuous mode [ 67.096623][ T4930] pim6reg1: entered allmulticast mode [ 67.127207][ T37] dummy0: left allmulticast mode [ 67.132504][ T37] bridge0: port 3(dummy0) entered disabled state [ 67.141801][ T37] bridge_slave_1: left allmulticast mode [ 67.147569][ T37] bridge_slave_1: left promiscuous mode [ 67.153379][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.162811][ T37] bridge_slave_0: left allmulticast mode [ 67.168657][ T37] bridge_slave_0: left promiscuous mode [ 67.174504][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.303380][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.321189][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.335756][ T37] bond0 (unregistering): Released all slaves [ 67.343774][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 67.373986][ T4880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.387678][ T4939] bond_slave_0: entered promiscuous mode [ 67.393405][ T4939] bond_slave_1: entered promiscuous mode [ 67.399249][ T4939] macvlan2: entered promiscuous mode [ 67.404675][ T4939] bond0: entered promiscuous mode [ 67.441041][ T4880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.459438][ T37] hsr_slave_0: left promiscuous mode [ 67.475028][ T37] hsr_slave_1: left promiscuous mode [ 67.485137][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.492104][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 67.492122][ T29] audit: type=1400 audit(1746004621.444:1876): avc: denied { connect } for pid=4946 comm="syz.4.517" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.492985][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.522859][ T4949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 67.546141][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.553707][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.561825][ T3306] EXT4-fs unmount: 24 callbacks suppressed [ 67.561838][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.577008][ T37] veth1_macvtap: left promiscuous mode [ 67.582861][ T37] veth0_macvtap: left promiscuous mode [ 67.591041][ T37] veth1_vlan: left promiscuous mode [ 67.596331][ T37] veth0_vlan: left promiscuous mode [ 67.602318][ T29] audit: type=1400 audit(1746004621.564:1877): avc: denied { setopt } for pid=4946 comm="syz.4.517" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.692104][ T29] audit: type=1400 audit(1746004621.644:1878): avc: denied { write } for pid=4946 comm="syz.4.517" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.715758][ T29] audit: type=1400 audit(1746004621.644:1879): avc: denied { open } for pid=4946 comm="syz.4.517" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.725103][ T4951] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 67.725103][ T4951] program syz.4.517 not setting count and/or reply_len properly [ 67.756538][ T29] audit: type=1400 audit(1746004621.684:1880): avc: denied { ioctl } for pid=4946 comm="syz.4.517" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.756577][ T29] audit: type=1400 audit(1746004621.704:1881): avc: denied { name_connect } for pid=4953 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 67.784249][ T37] team0 (unregistering): Port device team_slave_1 removed [ 67.804273][ T29] audit: type=1400 audit(1746004621.764:1882): avc: denied { write } for pid=4953 comm="syz.2.520" lport=33928 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.831845][ T29] audit: type=1400 audit(1746004621.784:1883): avc: denied { create } for pid=4953 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.832036][ T37] team0 (unregistering): Port device team_slave_0 removed [ 67.851423][ T29] audit: type=1400 audit(1746004621.784:1884): avc: denied { getopt } for pid=4953 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 67.909013][ T4947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 67.918008][ T4947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 67.927075][ T4947] netlink: 'syz.4.517': attribute type 6 has an invalid length. [ 67.944792][ T4880] team0: Port device team_slave_0 added [ 67.951943][ T4880] team0: Port device team_slave_1 added [ 67.965923][ T29] audit: type=1326 audit(1746004621.924:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d861ae969 code=0x7ffc0000 [ 67.990976][ T4880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.998038][ T4880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.024121][ T4880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.035550][ T4880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.042552][ T4880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.068566][ T4880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.094838][ T4880] hsr_slave_0: entered promiscuous mode [ 68.100972][ T4880] hsr_slave_1: entered promiscuous mode [ 68.106748][ T4880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.114577][ T4880] Cannot create hsr debugfs directory [ 68.181766][ T4880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.191028][ T4880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.200203][ T4880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.209868][ T4880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.265963][ T4880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.280561][ T4880] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.290648][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.297769][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.310362][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.317564][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.383731][ T4880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.518869][ T4880] veth0_vlan: entered promiscuous mode [ 68.533545][ T4880] veth1_vlan: entered promiscuous mode [ 68.556626][ T4880] veth0_macvtap: entered promiscuous mode [ 68.564924][ T4880] veth1_macvtap: entered promiscuous mode [ 68.576255][ T4880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.586835][ T4880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.605476][ T4880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.616686][ T4880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.627250][ T4880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.639057][ T4880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.650040][ T4880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.658916][ T4880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.667749][ T4880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.676512][ T4880] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.856293][ T5013] selinux_netlink_send: 23 callbacks suppressed [ 68.856310][ T5013] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=5013 comm=syz.4.533 [ 68.892591][ T1036] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 68.900047][ T1036] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 68.907559][ T1036] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 68.916970][ T1036] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 68.928109][ T5016] loop5: detected capacity change from 0 to 512 [ 68.935225][ T5016] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.948212][ T5016] EXT4-fs (loop5): 1 truncate cleaned up [ 68.954725][ T5016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.969132][ T5016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.011533][ T5016] loop5: detected capacity change from 0 to 512 [ 69.018159][ T5016] EXT4-fs: Ignoring removed orlov option [ 69.032987][ T5016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.046255][ T5016] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.053818][ T5016] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.534: bg 0: block 248: padding at end of block bitmap is not set [ 69.070055][ T5016] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.534: Failed to acquire dquot type 1 [ 69.083063][ T5016] EXT4-fs (loop5): 1 truncate cleaned up [ 69.129054][ T5016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.240874][ T5016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.364782][ T5029] loop5: detected capacity change from 0 to 512 [ 69.383071][ T5029] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.426289][ T5029] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 69.445893][ T5029] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.450637][ T5040] loop1: detected capacity change from 0 to 1024 [ 69.571715][ T5040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.586697][ T5029] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.590466][ T5040] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.613014][ T5029] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 69.632222][ T5029] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.536: bg 0: block 40: padding at end of block bitmap is not set [ 69.646865][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.661000][ T5029] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 69.670342][ T5029] EXT4-fs (loop5): 1 truncate cleaned up [ 69.689182][ T5029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.787870][ T5048] loop1: detected capacity change from 0 to 512 [ 69.826679][ T4880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.851967][ T5048] EXT4-fs: Ignoring removed oldalloc option [ 69.889102][ T5048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.541: Parent and EA inode have the same ino 15 [ 69.905114][ T5048] EXT4-fs (loop1): 1 orphan inode deleted [ 69.920665][ T5048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.996003][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.024455][ T5055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5055 comm=syz.5.544 [ 70.205975][ T5062] loop4: detected capacity change from 0 to 512 [ 70.207188][ T5063] loop5: detected capacity change from 0 to 512 [ 70.219715][ T5063] EXT4-fs (loop5): can't read group descriptor 0 [ 70.266922][ T5062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.277987][ T5062] EXT4-fs (loop4): 1 truncate cleaned up [ 70.284635][ T5062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.297605][ T5062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.346403][ T5063] loop5: detected capacity change from 0 to 512 [ 70.354648][ T5058] loop1: detected capacity change from 0 to 8192 [ 70.361995][ T5058] vfat: Unknown parameter '0000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿÿ0xffffffffffffffff000000000000000000000x0000000000000000' [ 70.515119][ T5070] loop1: detected capacity change from 0 to 1024 [ 70.534489][ T5063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.547595][ T5063] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.563980][ T5063] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.546: corrupted inode contents [ 70.576127][ T5063] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.546: mark_inode_dirty error [ 70.589224][ T5063] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.546: corrupted inode contents [ 70.603460][ T5063] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.546: corrupted inode contents [ 70.615485][ T5063] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.546: mark_inode_dirty error [ 70.628646][ T5063] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.546: corrupted inode contents [ 70.643309][ T5062] loop4: detected capacity change from 0 to 512 [ 70.649896][ T5062] EXT4-fs: Ignoring removed orlov option [ 70.657336][ T5062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.660702][ T5063] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.546: mark_inode_dirty error [ 70.679340][ T5063] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.546: corrupted inode contents [ 70.701360][ T5070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.734633][ T5062] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.749545][ T5062] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.547: bg 0: block 248: padding at end of block bitmap is not set [ 70.765006][ T5063] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.546: mark_inode_dirty error [ 70.783610][ T5078] wireguard0: entered promiscuous mode [ 70.789173][ T5078] wireguard0: entered allmulticast mode [ 70.795351][ T5070] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.807756][ T5062] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.547: Failed to acquire dquot type 1 [ 70.822233][ T36] kernel write not supported for file /361/attr/exec (pid: 36 comm: kworker/1:1) [ 70.832945][ T5074] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.546: corrupted inode contents [ 70.867051][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.867119][ T5062] EXT4-fs (loop4): 1 truncate cleaned up [ 70.886499][ T5062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.951226][ T5062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.972963][ T4880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.024754][ T5098] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 71.042377][ T5098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.123202][ T5098] loop1: detected capacity change from 0 to 128 [ 71.164573][ T5107] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214051][ T5098] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 71.222699][ T5098] FAT-fs (loop1): Filesystem has been set read-only [ 71.340381][ T5115] __nla_validate_parse: 9 callbacks suppressed [ 71.346671][ T5115] netlink: 100 bytes leftover after parsing attributes in process `syz.1.560'. [ 71.402943][ T3380] kernel write not supported for file /23/attr/exec (pid: 3380 comm: kworker/0:3) [ 71.414223][ T5120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'. [ 71.965590][ T5127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.982532][ T5127] loop4: detected capacity change from 0 to 512 [ 71.989419][ T5127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.441126][ T5127] EXT4-fs (loop4): 1 truncate cleaned up [ 72.447282][ T5127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.461467][ T5127] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.491777][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 72.491791][ T29] audit: type=1326 audit(1746004626.454:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.550743][ T29] audit: type=1326 audit(1746004626.494:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.574176][ T29] audit: type=1326 audit(1746004626.494:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.597582][ T29] audit: type=1326 audit(1746004626.494:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.620998][ T29] audit: type=1326 audit(1746004626.494:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.644501][ T29] audit: type=1326 audit(1746004626.494:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.667855][ T29] audit: type=1326 audit(1746004626.494:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.691211][ T29] audit: type=1326 audit(1746004626.494:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.714653][ T29] audit: type=1326 audit(1746004626.494:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.737999][ T29] audit: type=1326 audit(1746004626.494:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 72.821524][ T5161] netlink: 100 bytes leftover after parsing attributes in process `syz.1.575'. [ 72.834649][ T5155] loop4: detected capacity change from 0 to 512 [ 72.843951][ T5155] EXT4-fs: Ignoring removed oldalloc option [ 72.876255][ T5155] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.573: Parent and EA inode have the same ino 15 [ 72.898334][ T5167] FAULT_INJECTION: forcing a failure. [ 72.898334][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 72.907518][ T5155] EXT4-fs (loop4): 1 orphan inode deleted [ 72.911091][ T5167] CPU: 1 UID: 0 PID: 5167 Comm: syz.2.576 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 72.911125][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 72.911209][ T5167] Call Trace: [ 72.911216][ T5167] [ 72.911223][ T5167] __dump_stack+0x1d/0x30 [ 72.911246][ T5167] dump_stack_lvl+0xe8/0x140 [ 72.911270][ T5167] dump_stack+0x15/0x1b [ 72.911325][ T5167] should_fail_ex+0x265/0x280 [ 72.911362][ T5167] should_failslab+0x8c/0xb0 [ 72.911462][ T5167] kmem_cache_alloc_node_noprof+0x57/0x320 [ 72.911506][ T5167] ? __alloc_skb+0x101/0x320 [ 72.911607][ T5167] __alloc_skb+0x101/0x320 [ 72.911649][ T5167] netlink_ack+0xfd/0x500 [ 72.911689][ T5167] ? __pfx_ieee802154_llsec_setparams+0x10/0x10 [ 72.911743][ T5167] netlink_rcv_skb+0x192/0x220 [ 72.911781][ T5167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.911892][ T5167] genl_rcv+0x28/0x40 [ 72.911958][ T5167] netlink_unicast+0x59e/0x670 [ 72.911996][ T5167] netlink_sendmsg+0x58b/0x6b0 [ 72.912039][ T5167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.912081][ T5167] __sock_sendmsg+0x142/0x180 [ 72.912168][ T5167] ____sys_sendmsg+0x31e/0x4e0 [ 72.912214][ T5167] ___sys_sendmsg+0x17b/0x1d0 [ 72.912275][ T5167] __x64_sys_sendmsg+0xd4/0x160 [ 72.912305][ T5167] x64_sys_call+0x2999/0x2fb0 [ 72.912333][ T5167] do_syscall_64+0xd0/0x1a0 [ 72.912360][ T5167] ? clear_bhb_loop+0x25/0x80 [ 72.912391][ T5167] ? clear_bhb_loop+0x25/0x80 [ 72.912419][ T5167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.912438][ T5167] RIP: 0033:0x7f575c39e969 [ 72.912452][ T5167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.912470][ T5167] RSP: 002b:00007f575aa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.912559][ T5167] RAX: ffffffffffffffda RBX: 00007f575c5c5fa0 RCX: 00007f575c39e969 [ 72.912580][ T5167] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000004 [ 72.912596][ T5167] RBP: 00007f575aa07090 R08: 0000000000000000 R09: 0000000000000000 [ 72.912611][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.912705][ T5167] R13: 0000000000000000 R14: 00007f575c5c5fa0 R15: 00007ffc91862f58 [ 72.912729][ T5167] [ 73.179520][ T5155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.217061][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.388205][ T3381] kernel write not supported for file /259/attr/exec (pid: 3381 comm: kworker/0:4) [ 74.106365][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.113844][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.151019][ T5195] bridge0: entered allmulticast mode [ 74.175320][ T5195] bridge_slave_1: left allmulticast mode [ 74.181181][ T5195] bridge_slave_1: left promiscuous mode [ 74.187042][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.195038][ T5195] bridge_slave_0: left allmulticast mode [ 74.200968][ T5195] bridge_slave_0: left promiscuous mode [ 74.206841][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.276807][ T5207] loop4: detected capacity change from 0 to 512 [ 74.297570][ T5207] EXT4-fs (loop4): can't read group descriptor 0 [ 74.317920][ T5207] loop4: detected capacity change from 0 to 512 [ 74.344826][ T3182] kernel write not supported for file /352/attr/exec (pid: 3182 comm: kworker/0:2) [ 74.355564][ T5207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.403318][ T5207] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.431481][ T5207] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.591: corrupted inode contents [ 74.457591][ T5207] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.591: mark_inode_dirty error [ 74.498998][ T5207] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.591: corrupted inode contents [ 74.517221][ T5224] FAULT_INJECTION: forcing a failure. [ 74.517221][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 74.530000][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: syz.0.597 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 74.530035][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 74.530074][ T5224] Call Trace: [ 74.530081][ T5224] [ 74.530089][ T5224] __dump_stack+0x1d/0x30 [ 74.530116][ T5224] dump_stack_lvl+0xe8/0x140 [ 74.530140][ T5224] dump_stack+0x15/0x1b [ 74.530158][ T5224] should_fail_ex+0x265/0x280 [ 74.530220][ T5224] should_failslab+0x8c/0xb0 [ 74.530256][ T5224] __kmalloc_node_noprof+0xa9/0x410 [ 74.530296][ T5224] ? crypto_create_tfm_node+0x5c/0x240 [ 74.530411][ T5224] crypto_create_tfm_node+0x5c/0x240 [ 74.530453][ T5224] crypto_ahash_init_tfm+0xee/0x210 [ 74.530536][ T5224] crypto_create_tfm_node+0xf3/0x240 [ 74.530566][ T5224] crypto_spawn_tfm2+0x43/0x80 [ 74.530647][ T5224] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 74.530678][ T5224] crypto_authenc_init_tfm+0x2f/0x140 [ 74.530712][ T5224] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 74.530782][ T5224] crypto_aead_init_tfm+0x9d/0xc0 [ 74.530811][ T5224] crypto_create_tfm_node+0xf3/0x240 [ 74.530849][ T5224] crypto_alloc_tfm_node+0xdc/0x2b0 [ 74.530885][ T5224] crypto_alloc_aead+0x2d/0x40 [ 74.530975][ T5224] esp_init_state+0x3f3/0xa00 [ 74.531014][ T5224] ? __kmalloc_node_track_caller_noprof+0x370/0x410 [ 74.531035][ T5224] __xfrm_init_state+0x73d/0xbb0 [ 74.531140][ T5224] xfrm_add_sa+0x1e51/0x2410 [ 74.531168][ T5224] xfrm_user_rcv_msg+0x563/0x660 [ 74.531189][ T5224] ? __kfree_skb+0x109/0x150 [ 74.531307][ T5224] ? nlmon_xmit+0x4f/0x60 [ 74.531324][ T5224] ? consume_skb+0x49/0x150 [ 74.531385][ T5224] netlink_rcv_skb+0x120/0x220 [ 74.531413][ T5224] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 74.531457][ T5224] xfrm_netlink_rcv+0x48/0x60 [ 74.531482][ T5224] netlink_unicast+0x59e/0x670 [ 74.531571][ T5224] netlink_sendmsg+0x58b/0x6b0 [ 74.531612][ T5224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.531642][ T5224] __sock_sendmsg+0x142/0x180 [ 74.531692][ T5224] ____sys_sendmsg+0x31e/0x4e0 [ 74.531795][ T5224] ___sys_sendmsg+0x17b/0x1d0 [ 74.531851][ T5224] __x64_sys_sendmsg+0xd4/0x160 [ 74.531879][ T5224] x64_sys_call+0x2999/0x2fb0 [ 74.531905][ T5224] do_syscall_64+0xd0/0x1a0 [ 74.531986][ T5224] ? clear_bhb_loop+0x25/0x80 [ 74.532114][ T5224] ? clear_bhb_loop+0x25/0x80 [ 74.532139][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.532160][ T5224] RIP: 0033:0x7f3b8e13e969 [ 74.532210][ T5224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.532227][ T5224] RSP: 002b:00007f3b8c7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.532245][ T5224] RAX: ffffffffffffffda RBX: 00007f3b8e365fa0 RCX: 00007f3b8e13e969 [ 74.532258][ T5224] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 74.532273][ T5224] RBP: 00007f3b8c7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.532297][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.532326][ T5224] R13: 0000000000000000 R14: 00007f3b8e365fa0 R15: 00007ffe59b91898 [ 74.532346][ T5224] [ 74.904252][ T5223] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.591: corrupted inode contents [ 74.980488][ T5223] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.591: mark_inode_dirty error [ 75.037133][ T5223] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.591: corrupted inode contents [ 75.103325][ T5223] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.591: mark_inode_dirty error [ 75.165710][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 75.166917][ T5223] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.591: corrupted inode contents [ 75.190628][ T5225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.205115][ T5223] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.591: mark_inode_dirty error [ 75.458050][ T3380] kernel write not supported for file /46/attr/exec (pid: 3380 comm: kworker/0:3) [ 75.481359][ T5250] pim6reg1: entered promiscuous mode [ 75.486777][ T5250] pim6reg1: entered allmulticast mode [ 75.493614][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.603154][ T5261] FAULT_INJECTION: forcing a failure. [ 75.603154][ T5261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.603952][ T5259] loop1: detected capacity change from 0 to 1024 [ 75.616356][ T5261] CPU: 0 UID: 0 PID: 5261 Comm: syz.5.609 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 75.616390][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 75.616446][ T5261] Call Trace: [ 75.616453][ T5261] [ 75.616462][ T5261] __dump_stack+0x1d/0x30 [ 75.616483][ T5261] dump_stack_lvl+0xe8/0x140 [ 75.616501][ T5261] dump_stack+0x15/0x1b [ 75.616516][ T5261] should_fail_ex+0x265/0x280 [ 75.616602][ T5261] should_fail+0xb/0x20 [ 75.616641][ T5261] should_fail_usercopy+0x1a/0x20 [ 75.616676][ T5261] _copy_to_user+0x20/0xa0 [ 75.616775][ T5261] simple_read_from_buffer+0xb5/0x130 [ 75.616866][ T5261] proc_fail_nth_read+0x100/0x140 [ 75.616900][ T5261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.616931][ T5261] vfs_read+0x19d/0x6f0 [ 75.616994][ T5261] ? __rcu_read_unlock+0x4f/0x70 [ 75.617106][ T5261] ? __fget_files+0x184/0x1c0 [ 75.617143][ T5261] ksys_read+0xda/0x1a0 [ 75.617175][ T5261] __x64_sys_read+0x40/0x50 [ 75.617242][ T5261] x64_sys_call+0x2d77/0x2fb0 [ 75.617269][ T5261] do_syscall_64+0xd0/0x1a0 [ 75.617297][ T5261] ? clear_bhb_loop+0x25/0x80 [ 75.617324][ T5261] ? clear_bhb_loop+0x25/0x80 [ 75.617409][ T5261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.617436][ T5261] RIP: 0033:0x7f5181dbd37c [ 75.617456][ T5261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.617479][ T5261] RSP: 002b:00007f5180427030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.617503][ T5261] RAX: ffffffffffffffda RBX: 00007f5181fe5fa0 RCX: 00007f5181dbd37c [ 75.617567][ T5261] RDX: 000000000000000f RSI: 00007f51804270a0 RDI: 0000000000000003 [ 75.617583][ T5261] RBP: 00007f5180427090 R08: 0000000000000000 R09: 0000000000000000 [ 75.617598][ T5261] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 75.617613][ T5261] R13: 0000000000000000 R14: 00007f5181fe5fa0 R15: 00007ffc0c2042e8 [ 75.617654][ T5261] [ 75.825787][ T5259] EXT4-fs: Ignoring removed i_version option [ 75.873135][ T5259] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.887978][ T5259] EXT4-fs: Ignoring removed nobh option [ 75.893619][ T5259] EXT4-fs: Ignoring removed bh option [ 75.896996][ T5276] loop5: detected capacity change from 0 to 512 [ 75.909592][ T5276] EXT4-fs (loop5): can't read group descriptor 0 [ 75.923973][ T5276] loop5: detected capacity change from 0 to 512 [ 76.068708][ T36] kernel write not supported for file /280/attr/exec (pid: 36 comm: kworker/1:1) [ 76.091536][ T5259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.116278][ T5276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.202973][ T5276] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.204041][ T5259] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.611: Allocating blocks 385-513 which overlap fs metadata [ 76.223559][ T5276] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.617: corrupted inode contents [ 76.239523][ T5286] FAULT_INJECTION: forcing a failure. [ 76.239523][ T5286] name failslab, interval 1, probability 0, space 0, times 0 [ 76.252229][ T5286] CPU: 1 UID: 0 PID: 5286 Comm: syz.4.619 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 76.252292][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 76.252306][ T5286] Call Trace: [ 76.252314][ T5286] [ 76.252350][ T5286] __dump_stack+0x1d/0x30 [ 76.252375][ T5286] dump_stack_lvl+0xe8/0x140 [ 76.252400][ T5286] dump_stack+0x15/0x1b [ 76.252421][ T5286] should_fail_ex+0x265/0x280 [ 76.252458][ T5286] should_failslab+0x8c/0xb0 [ 76.252501][ T5286] kmem_cache_alloc_noprof+0x50/0x310 [ 76.252614][ T5286] ? __anon_vma_prepare+0xcd/0x2f0 [ 76.252664][ T5286] __anon_vma_prepare+0xcd/0x2f0 [ 76.252696][ T5286] do_wp_page+0x17fa/0x23e0 [ 76.252775][ T5286] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 76.252808][ T5286] ? __rcu_read_lock+0x37/0x50 [ 76.252981][ T5286] handle_mm_fault+0x6dc/0x2ae0 [ 76.253091][ T5286] ? mas_walk+0xf2/0x120 [ 76.253120][ T5286] do_user_addr_fault+0x636/0x1090 [ 76.253152][ T5286] ? fpregs_assert_state_consistent+0x84/0xa0 [ 76.253217][ T5286] exc_page_fault+0x54/0xc0 [ 76.253254][ T5286] asm_exc_page_fault+0x26/0x30 [ 76.253280][ T5286] RIP: 0033:0x7f0d86070cc3 [ 76.253294][ T5286] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 76.253371][ T5286] RSP: 002b:00007f0d848164a0 EFLAGS: 00010202 [ 76.253389][ T5286] RAX: 0000000000000400 RBX: 00007f0d84816540 RCX: 00007f0d7c3f7000 [ 76.253401][ T5286] RDX: 00007f0d848166e0 RSI: 0000000000000009 RDI: 00007f0d848165e0 [ 76.253413][ T5286] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a7 [ 76.253425][ T5286] R10: 00000000000001c0 R11: 00007f0d84816540 R12: 0000000000000001 [ 76.253436][ T5286] R13: 00007f0d8624bfc0 R14: 0000000000000020 R15: 00007f0d848165e0 [ 76.253495][ T5286] [ 76.253506][ T5286] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.389513][ T5259] FAULT_INJECTION: forcing a failure. [ 76.389513][ T5259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.410461][ T5276] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.617: mark_inode_dirty error [ 76.411115][ T5259] CPU: 0 UID: 0 PID: 5259 Comm: syz.1.611 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 76.411200][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 76.411218][ T5259] Call Trace: [ 76.411226][ T5259] [ 76.411235][ T5259] __dump_stack+0x1d/0x30 [ 76.411271][ T5259] dump_stack_lvl+0xe8/0x140 [ 76.411318][ T5259] dump_stack+0x15/0x1b [ 76.411339][ T5259] should_fail_ex+0x265/0x280 [ 76.411381][ T5259] should_fail+0xb/0x20 [ 76.411444][ T5259] should_fail_usercopy+0x1a/0x20 [ 76.411519][ T5259] _copy_from_user+0x1c/0xb0 [ 76.411554][ T5259] kstrtouint_from_user+0x69/0xf0 [ 76.411594][ T5259] ? avc_policy_seqno+0x15/0x30 [ 76.411651][ T5259] proc_fail_nth_write+0x50/0x160 [ 76.411736][ T5259] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.411768][ T5259] vfs_write+0x266/0x8d0 [ 76.411798][ T5259] ? vfs_read+0x47f/0x6f0 [ 76.411827][ T5259] ? __rcu_read_unlock+0x4f/0x70 [ 76.411854][ T5259] ? __fget_files+0x184/0x1c0 [ 76.411912][ T5259] ? up_write+0x18/0x60 [ 76.411989][ T5259] ksys_write+0xda/0x1a0 [ 76.412076][ T5259] __x64_sys_write+0x40/0x50 [ 76.412108][ T5259] x64_sys_call+0x2cdd/0x2fb0 [ 76.412135][ T5259] do_syscall_64+0xd0/0x1a0 [ 76.412163][ T5259] ? clear_bhb_loop+0x25/0x80 [ 76.412280][ T5259] ? clear_bhb_loop+0x25/0x80 [ 76.412306][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.412333][ T5259] RIP: 0033:0x7fd56d73d41f [ 76.412352][ T5259] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 76.412376][ T5259] RSP: 002b:00007fd56bda7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 76.412400][ T5259] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd56d73d41f [ 76.412471][ T5259] RDX: 0000000000000001 RSI: 00007fd56bda70a0 RDI: 0000000000000005 [ 76.412487][ T5259] RBP: 00007fd56bda7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.412564][ T5259] R10: 0000000008000c62 R11: 0000000000000293 R12: 0000000000000002 [ 76.412580][ T5259] R13: 0000000000000000 R14: 00007fd56d965fa0 R15: 00007ffc7db8ccd8 [ 76.412657][ T5259] [ 76.503416][ T5286] loop4: detected capacity change from 0 to 512 [ 76.511194][ T5276] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.617: corrupted inode contents [ 76.523063][ T5287] EXT4-fs (loop1): pa ffff88810693e770: logic 16, phys. 129, len 24 [ 76.526640][ T5288] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.617: corrupted inode contents [ 76.530433][ T5287] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, [ 76.535585][ T5288] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.617: mark_inode_dirty error [ 76.540297][ T5287] free 0, pa_free 8 [ 76.552500][ T5286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.555586][ T5288] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.617: corrupted inode contents [ 76.775423][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.792290][ T5288] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.617: mark_inode_dirty error [ 76.804545][ T5286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.818312][ T5288] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.617: corrupted inode contents [ 76.830581][ T5286] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.869576][ T5286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.924573][ T5288] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.617: mark_inode_dirty error [ 76.971353][ T5276] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.617: corrupted inode contents [ 77.072137][ T4880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.153780][ T5328] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 77.198889][ T5328] loop4: detected capacity change from 0 to 8192 [ 77.235461][ T5328] loop4: p1 p2 < > p3 p4 < p5 > [ 77.235475][ T5328] loop4: partition table partially beyond EOD, truncated [ 77.235574][ T5328] loop4: p1 size 100663296 extends beyond EOD, truncated [ 77.236853][ T5328] loop4: p2 start 591104 is beyond EOD, truncated [ 77.236869][ T5328] loop4: p3 start 33572980 is beyond EOD, truncated [ 77.237179][ T5328] loop4: p5 size 100663296 extends beyond EOD, truncated [ 77.443846][ T5337] FAULT_INJECTION: forcing a failure. [ 77.443846][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 77.456610][ T5337] CPU: 1 UID: 0 PID: 5337 Comm: syz.2.636 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 77.456637][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 77.456712][ T5337] Call Trace: [ 77.456720][ T5337] [ 77.456730][ T5337] __dump_stack+0x1d/0x30 [ 77.456756][ T5337] dump_stack_lvl+0xe8/0x140 [ 77.456782][ T5337] dump_stack+0x15/0x1b [ 77.456803][ T5337] should_fail_ex+0x265/0x280 [ 77.456840][ T5337] ? __se_sys_memfd_create+0x1cc/0x590 [ 77.456925][ T5337] should_failslab+0x8c/0xb0 [ 77.456957][ T5337] __kmalloc_cache_noprof+0x4c/0x320 [ 77.456984][ T5337] __se_sys_memfd_create+0x1cc/0x590 [ 77.457016][ T5337] __x64_sys_memfd_create+0x31/0x40 [ 77.457056][ T5337] x64_sys_call+0x122f/0x2fb0 [ 77.457083][ T5337] do_syscall_64+0xd0/0x1a0 [ 77.457116][ T5337] ? clear_bhb_loop+0x25/0x80 [ 77.457136][ T5337] ? clear_bhb_loop+0x25/0x80 [ 77.457158][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.457180][ T5337] RIP: 0033:0x7f575c39e969 [ 77.457268][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.457289][ T5337] RSP: 002b:00007f575aa06d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 77.457310][ T5337] RAX: ffffffffffffffda RBX: 0000000000001053 RCX: 00007f575c39e969 [ 77.457325][ T5337] RDX: 00007f575aa06dec RSI: 0000000000000000 RDI: 00007f575c421444 [ 77.457338][ T5337] RBP: 0000200000002100 R08: 00007f575aa06b07 R09: 0000000000000000 [ 77.457421][ T5337] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 77.457433][ T5337] R13: 00007f575aa06dec R14: 00007f575aa06df0 R15: 00007ffc91862f58 [ 77.457452][ T5337] [ 77.630880][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 77.630905][ T29] audit: type=1326 audit(1746004631.594:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f575c39d37c code=0x7ffc0000 [ 77.662109][ T29] audit: type=1326 audit(1746004631.594:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f575c39d41f code=0x7ffc0000 [ 77.685359][ T29] audit: type=1326 audit(1746004631.594:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f575c39d5ca code=0x7ffc0000 [ 77.708585][ T29] audit: type=1326 audit(1746004631.594:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 77.732100][ T29] audit: type=1326 audit(1746004631.594:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5336 comm="syz.2.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575c39e969 code=0x7ffc0000 [ 77.767030][ T29] audit: type=1400 audit(1746004631.724:2271): avc: denied { create } for pid=5338 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.786869][ T29] audit: type=1400 audit(1746004631.724:2272): avc: denied { setopt } for pid=5338 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.911549][ T5348] loop4: detected capacity change from 0 to 512 [ 77.932748][ T5348] EXT4-fs (loop4): can't read group descriptor 0 [ 77.942288][ T5350] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 77.959738][ T29] audit: type=1326 audit(1746004631.914:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56d73e969 code=0x7ffc0000 [ 77.965350][ T5348] loop4: detected capacity change from 0 to 512 [ 77.982532][ T29] audit: type=1326 audit(1746004631.914:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd56d73d2d0 code=0x7ffc0000 [ 78.011663][ T29] audit: type=1326 audit(1746004631.914:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56d73e969 code=0x7ffc0000 [ 78.064334][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.087205][ T5348] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.139522][ T5348] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.640: corrupted inode contents [ 78.181231][ T5348] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.640: mark_inode_dirty error [ 78.197471][ T5366] loop1: detected capacity change from 0 to 512 [ 78.204336][ T5366] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.204404][ T5348] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.640: corrupted inode contents [ 78.220989][ T5366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.237329][ T5366] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.646: corrupted in-inode xattr: bad e_name length [ 78.253855][ T5366] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.646: couldn't read orphan inode 15 (err -117) [ 78.266118][ T5367] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.640: corrupted inode contents [ 78.266258][ T5366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.290819][ T5367] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.640: mark_inode_dirty error [ 78.301078][ T5366] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 78.307003][ T5367] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.640: corrupted inode contents [ 78.329267][ T5367] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.640: mark_inode_dirty error [ 78.340815][ T5367] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.640: corrupted inode contents [ 78.357394][ T5367] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.640: mark_inode_dirty error [ 78.370479][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.412470][ T5348] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.640: corrupted inode contents [ 78.432794][ T5385] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 78.511695][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.547776][ T5394] FAULT_INJECTION: forcing a failure. [ 78.547776][ T5394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.561287][ T5394] CPU: 1 UID: 0 PID: 5394 Comm: syz.5.656 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 78.561319][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 78.561332][ T5394] Call Trace: [ 78.561338][ T5394] [ 78.561421][ T5394] __dump_stack+0x1d/0x30 [ 78.561446][ T5394] dump_stack_lvl+0xe8/0x140 [ 78.561469][ T5394] dump_stack+0x15/0x1b [ 78.561490][ T5394] should_fail_ex+0x265/0x280 [ 78.561543][ T5394] should_fail_alloc_page+0xf2/0x100 [ 78.561575][ T5394] __alloc_frozen_pages_noprof+0xff/0x360 [ 78.561604][ T5394] alloc_pages_mpol+0xb3/0x250 [ 78.561634][ T5394] vma_alloc_folio_noprof+0x1aa/0x300 [ 78.561657][ T5394] handle_mm_fault+0x1056/0x2ae0 [ 78.561701][ T5394] ? mas_walk+0xf2/0x120 [ 78.561724][ T5394] do_user_addr_fault+0x636/0x1090 [ 78.561808][ T5394] ? switch_fpu_return+0xe/0x20 [ 78.561835][ T5394] exc_page_fault+0x54/0xc0 [ 78.561867][ T5394] asm_exc_page_fault+0x26/0x30 [ 78.561887][ T5394] RIP: 0033:0x7f5181c80cc3 [ 78.561927][ T5394] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 78.561945][ T5394] RSP: 002b:00007f51804264a0 EFLAGS: 00010202 [ 78.561960][ T5394] RAX: 0000000000004000 RBX: 00007f5180426540 RCX: 00007f5178007000 [ 78.561972][ T5394] RDX: 00007f51804266e0 RSI: 0000000000000007 RDI: 00007f51804265e0 [ 78.561984][ T5394] RBP: 00000000000000e7 R08: 0000000000000009 R09: 00000000000001c5 [ 78.561996][ T5394] R10: 00000000000001d2 R11: 00007f5180426540 R12: 0000000000000001 [ 78.562071][ T5394] R13: 00007f5181e5bfc0 R14: 000000000000000b R15: 00007f51804265e0 [ 78.562089][ T5394] [ 78.562416][ T5394] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 78.590171][ T5396] pim6reg1: entered promiscuous mode [ 78.623231][ T5394] loop5: detected capacity change from 0 to 512 [ 78.625541][ T5396] pim6reg1: entered allmulticast mode [ 78.764318][ T5398] vlan2: entered promiscuous mode [ 78.769450][ T5398] team0: entered promiscuous mode [ 78.774637][ T5398] team_slave_0: entered promiscuous mode [ 78.780534][ T5398] team_slave_1: entered promiscuous mode [ 78.786701][ T5398] team0: Device vlan2 is already an upper device of the team interface [ 78.821142][ T5407] lo: entered promiscuous mode [ 78.826026][ T5407] lo: entered allmulticast mode [ 78.858024][ T5411] pim6reg1: entered promiscuous mode [ 78.863545][ T5411] pim6reg1: entered allmulticast mode [ 78.961666][ T5426] loop4: detected capacity change from 0 to 512 [ 78.970196][ T5426] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.980306][ T5428] loop5: detected capacity change from 0 to 512 [ 78.991526][ T5428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.001775][ T5426] EXT4-fs (loop4): 1 truncate cleaned up [ 79.008270][ T5426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.043182][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.053781][ T5428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.067535][ T5428] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.092626][ T4880] EXT4-fs error (device loop5): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /38/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 79.772613][ T5445] pim6reg1: entered promiscuous mode [ 79.778055][ T5445] pim6reg1: entered allmulticast mode [ 80.892952][ T5466] netlink: 100 bytes leftover after parsing attributes in process `syz.2.686'. [ 81.144412][ T5460] chnl_net:caif_netlink_parms(): no params data found [ 81.154284][ T5483] pim6reg1: entered promiscuous mode [ 81.159674][ T5483] pim6reg1: entered allmulticast mode [ 81.237800][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.244945][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.253922][ T5460] bridge_slave_0: entered allmulticast mode [ 81.272965][ T5460] bridge_slave_0: entered promiscuous mode [ 81.281938][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.289065][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.293779][ T3386] kernel write not supported for file /430/attr/exec (pid: 3386 comm: kworker/1:3) [ 81.296535][ T5460] bridge_slave_1: entered allmulticast mode [ 81.312315][ T5460] bridge_slave_1: entered promiscuous mode [ 81.343042][ T5460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.357775][ T5460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.380165][ T5460] team0: Port device team_slave_0 added [ 81.387059][ T5460] team0: Port device team_slave_1 added [ 81.405305][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.412338][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.438504][ T5460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.451846][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.458852][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.484875][ T5460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.521479][ T5460] hsr_slave_0: entered promiscuous mode [ 81.537793][ T5460] hsr_slave_1: entered promiscuous mode [ 81.547790][ T5460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.565573][ T5460] Cannot create hsr debugfs directory [ 81.657910][ T5460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.667289][ T5460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.676315][ T5460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.685648][ T5460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.702980][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.710109][ T5460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.717504][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.724609][ T5460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.768966][ T5460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.782033][ T1684] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.790313][ T1684] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.804809][ T5460] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.824974][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.832125][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.859634][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.866861][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.908611][ T5503] netlink: 100 bytes leftover after parsing attributes in process `syz.2.696'. [ 81.954288][ T5460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.072666][ T5460] veth0_vlan: entered promiscuous mode [ 82.082139][ T5460] veth1_vlan: entered promiscuous mode [ 82.099996][ T5460] veth0_macvtap: entered promiscuous mode [ 82.107610][ T5460] veth1_macvtap: entered promiscuous mode [ 82.119123][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.129652][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.139592][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.150102][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.161665][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.173890][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.184386][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.194382][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.204968][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.218352][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.228471][ T5460] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237564][ T5460] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.246321][ T5460] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.255101][ T5460] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.400362][ T5529] sd 0:0:1:0: device reset [ 82.476608][ T5536] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 82.480002][ T5535] pim6reg1: entered promiscuous mode [ 82.493209][ T5535] pim6reg1: entered allmulticast mode [ 82.500319][ T5533] IPVS: stopping master sync thread 5536 ... [ 82.529644][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 82.540442][ T5533] bridge_slave_1: left allmulticast mode [ 82.546115][ T5533] bridge_slave_1: left promiscuous mode [ 82.552000][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.576945][ T5533] bridge_slave_0: left allmulticast mode [ 82.582810][ T5533] bridge_slave_0: left promiscuous mode [ 82.588563][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.778870][ T5543] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 82.820484][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 82.820499][ T29] audit: type=1326 audit(1746004636.774:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.850319][ T29] audit: type=1326 audit(1746004636.774:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.873945][ T29] audit: type=1326 audit(1746004636.774:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.897484][ T29] audit: type=1326 audit(1746004636.774:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.920892][ T29] audit: type=1326 audit(1746004636.774:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.944246][ T29] audit: type=1326 audit(1746004636.774:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.967742][ T29] audit: type=1326 audit(1746004636.774:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.991090][ T29] audit: type=1326 audit(1746004636.774:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 82.993693][ T5551] loop6: detected capacity change from 0 to 512 [ 83.014522][ T29] audit: type=1326 audit(1746004636.774:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 83.014559][ T29] audit: type=1326 audit(1746004636.774:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1786e969 code=0x7ffc0000 [ 83.070448][ T5551] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 83.222083][ T5556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5556 comm=syz.2.709 [ 83.338818][ T5569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 83.449607][ T5574] loop4: detected capacity change from 0 to 8192 [ 83.538264][ T5573] pim6reg1: entered promiscuous mode [ 83.543716][ T5573] pim6reg1: entered allmulticast mode [ 83.578020][ T5576] netlink: 100 bytes leftover after parsing attributes in process `syz.4.716'. [ 83.682929][ T5578] loop6: detected capacity change from 0 to 512 [ 83.705673][ T5578] EXT4-fs: Ignoring removed oldalloc option [ 83.745454][ T5578] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.717: Parent and EA inode have the same ino 15 [ 83.792990][ T5578] EXT4-fs (loop6): 1 orphan inode deleted [ 83.815079][ T5578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.027709][ T5460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.251936][ T5588] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 84.371932][ T5592] No such timeout policy "syz0" [ 84.494622][ T5601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 84.597988][ T5609] loop4: detected capacity change from 0 to 512 [ 84.605075][ T5609] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.616317][ T5609] EXT4-fs (loop4): 1 truncate cleaned up [ 84.623221][ T5609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.651239][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.691398][ T5616] smc: net device bond0 applied user defined pnetid SYZ0 [ 84.701018][ T5616] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.725410][ T5615] loop4: detected capacity change from 0 to 1024 [ 84.734751][ T5615] EXT4-fs: Ignoring removed orlov option [ 84.740540][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.748951][ T5618] netlink: 24 bytes leftover after parsing attributes in process `¬í'. [ 84.772693][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-9c00-000000000000 r/w without journal. Quota mode: none. [ 84.846558][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-9c00-000000000000. [ 84.872064][ T5627] loop4: detected capacity change from 0 to 512 [ 84.879167][ T5627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.899926][ T5627] EXT4-fs (loop4): 1 truncate cleaned up [ 84.906333][ T5627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.954885][ T5627] FAULT_INJECTION: forcing a failure. [ 84.954885][ T5627] name failslab, interval 1, probability 0, space 0, times 0 [ 84.967590][ T5627] CPU: 1 UID: 0 PID: 5627 Comm: syz.4.733 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 84.967622][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.967636][ T5627] Call Trace: [ 84.967644][ T5627] [ 84.967764][ T5627] __dump_stack+0x1d/0x30 [ 84.967788][ T5627] dump_stack_lvl+0xe8/0x140 [ 84.967811][ T5627] dump_stack+0x15/0x1b [ 84.967829][ T5627] should_fail_ex+0x265/0x280 [ 84.967884][ T5627] ? seq_create_client1+0x37/0x320 [ 84.967906][ T5627] should_failslab+0x8c/0xb0 [ 84.967940][ T5627] __kmalloc_cache_noprof+0x4c/0x320 [ 84.968013][ T5627] ? __pfx_snd_seq_open+0x10/0x10 [ 84.968041][ T5627] seq_create_client1+0x37/0x320 [ 84.968064][ T5627] ? __pfx_snd_seq_open+0x10/0x10 [ 84.968091][ T5627] snd_seq_open+0x50/0x320 [ 84.968164][ T5627] ? __pfx_snd_seq_open+0x10/0x10 [ 84.968203][ T5627] snd_open+0x237/0x2a0 [ 84.968240][ T5627] chrdev_open+0x2e8/0x3a0 [ 84.968274][ T5627] do_dentry_open+0x646/0xa20 [ 84.968310][ T5627] ? __pfx_chrdev_open+0x10/0x10 [ 84.968417][ T5627] vfs_open+0x37/0x1e0 [ 84.968436][ T5627] path_openat+0x1c5e/0x2170 [ 84.968477][ T5627] do_filp_open+0x109/0x230 [ 84.968516][ T5627] io_openat2+0x272/0x390 [ 84.968599][ T5627] io_openat+0x1b/0x30 [ 84.968624][ T5627] io_issue_sqe+0x1a8/0xb70 [ 84.968660][ T5627] io_submit_sqes+0x64c/0x1000 [ 84.968748][ T5627] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 84.968813][ T5627] ? __rcu_read_unlock+0x4f/0x70 [ 84.968837][ T5627] ? get_pid_task+0x96/0xd0 [ 84.968936][ T5627] ? proc_fail_nth_write+0x12d/0x160 [ 84.968991][ T5627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.969019][ T5627] ? vfs_write+0x75e/0x8d0 [ 84.969140][ T5627] ? __rcu_read_unlock+0x4f/0x70 [ 84.969163][ T5627] ? __fget_files+0x184/0x1c0 [ 84.969194][ T5627] ? fput+0x8f/0xc0 [ 84.969250][ T5627] __x64_sys_io_uring_enter+0x78/0x90 [ 84.969285][ T5627] x64_sys_call+0x28c8/0x2fb0 [ 84.969312][ T5627] do_syscall_64+0xd0/0x1a0 [ 84.969336][ T5627] ? clear_bhb_loop+0x25/0x80 [ 84.969469][ T5627] ? clear_bhb_loop+0x25/0x80 [ 84.969493][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.969517][ T5627] RIP: 0033:0x7f0d861ae969 [ 84.969535][ T5627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.969555][ T5627] RSP: 002b:00007f0d84817038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 84.969605][ T5627] RAX: ffffffffffffffda RBX: 00007f0d863d5fa0 RCX: 00007f0d861ae969 [ 84.969619][ T5627] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000008 [ 84.969633][ T5627] RBP: 00007f0d84817090 R08: 0000000000000000 R09: 0000000000000000 [ 84.969646][ T5627] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 84.969659][ T5627] R13: 0000000000000000 R14: 00007f0d863d5fa0 R15: 00007ffe036bb208 [ 84.969680][ T5627] [ 85.342678][ T5624] ================================================================== [ 85.351098][ T5624] BUG: KCSAN: data-race in io_submit_sqes / io_uring_show_fdinfo [ 85.358866][ T5624] [ 85.361208][ T5624] read-write to 0xffff88810a2fe870 of 4 bytes by task 5625 on cpu 0: [ 85.369292][ T5624] io_submit_sqes+0x235/0x1000 [ 85.374089][ T5624] io_sq_thread+0x778/0x1110 [ 85.378711][ T5624] ret_from_fork+0x4b/0x60 [ 85.383174][ T5624] ret_from_fork_asm+0x1a/0x30 [ 85.387970][ T5624] [ 85.390316][ T5624] read to 0xffff88810a2fe870 of 4 bytes by task 5624 on cpu 1: [ 85.397875][ T5624] io_uring_show_fdinfo+0x150/0xc40 [ 85.403112][ T5624] seq_show+0x331/0x3b0 [ 85.407291][ T5624] traverse+0x141/0x3a0 [ 85.411466][ T5624] seq_lseek+0xb5/0x170 [ 85.415647][ T5624] __x64_sys_lseek+0xe5/0x160 [ 85.420358][ T5624] x64_sys_call+0x2d2a/0x2fb0 [ 85.425063][ T5624] do_syscall_64+0xd0/0x1a0 [ 85.429618][ T5624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.435566][ T5624] [ 85.437904][ T5624] value changed: 0x0000e4d3 -> 0x0000e4f2 [ 85.443643][ T5624] [ 85.446028][ T5624] Reported by Kernel Concurrency Sanitizer on: [ 85.452194][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: syz.0.732 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 85.464545][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 85.474632][ T5624] ================================================================== [ 85.491495][ T5631] pim6reg1: entered promiscuous mode [ 85.496988][ T5631] pim6reg1: entered allmulticast mode [ 85.525615][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.502623][ T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.561649][ T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.651711][ T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.712350][ T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.807112][ T51] bridge_slave_1: left allmulticast mode [ 86.812849][ T51] bridge_slave_1: left promiscuous mode [ 86.818536][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.827245][ T51] bridge_slave_0: left allmulticast mode [ 86.832956][ T51] bridge_slave_0: left promiscuous mode [ 86.838676][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.963328][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.974028][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.983752][ T51] bond0 (unregistering): Released all slaves [ 86.992411][ T51] bond1 (unregistering): Released all slaves [ 87.002049][ T51] bond2 (unregistering): Released all slaves [ 87.073487][ T51] IPVS: stopping backup sync thread 3740 ... [ 87.098376][ T51] hsr_slave_0: left promiscuous mode [ 87.107470][ T51] veth1_macvtap: left promiscuous mode [ 87.113471][ T51] veth0_macvtap: left promiscuous mode [ 87.119071][ T51] veth1_vlan: left promiscuous mode [ 87.126423][ T51] veth0_vlan: left promiscuous mode [ 87.193563][ T51] team0 (unregistering): Port device team_slave_1 removed [ 87.205984][ T51] team0 (unregistering): Port device team_slave_0 removed