last executing test programs: 1m55.267300589s ago: executing program 4 (id=187): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="f07a6ed7185988c7936fd711e18b9b37ea117b155ff8b24b76b6d0973967b2059f6980fd16d449b3d2c96c56bc9c4d0cf7c7650bd590827a6edb9490f681c9453fa26aa8d79da8c1e3df185a144d15fb022380ac5f91c4c31a3a2913bfd40c02f78bb27b612cfe7a088bd1b00b08cc4ad9d4740bcc3c6256cd91fa85aceb281a8b0bb6399e4579dec308385229720d89008e535bf9933961e1b5b31912be8146ff317e48481da07b55a2f654d6a8001718b98585c081e74f6bf5a37acdc22c6959d4eb41ba85c529b4e34fea142ed04104ee1780f35a2f53c798168216b55882bc", 0xe1}, {&(0x7f0000000680)="c82a87dea0d09f7ba61705d4506d8a8013224a63108c79d03bc043a080213466ac03b186cbd9d21555d6ef4c9a24c2149ee50bbb3d0c572f606ae4d7f4eab0127a873890feb33bf3345e17bc6766fba3ad29b0eebcde7da2a04352840ec8cb492ac79a550d7220caca8224", 0x6b}, {&(0x7f0000000d80)="0c13c0a4dcfc95f05e016f547dc8b66064bc8d5e9172c80435d0a430db77e93d53fd879621df4e81b6e7f59d63284b4e1417b645ca3a287b737ffec530724c0829e16251d249cf0fe6e249000c8ffeb774b66cca4a460148c67724c793e55e7e6c87e62601b2e9e500b269ac59feaa1f50d74de7e99170acddeced5244afccf92963f2a2f3beafce1988a8244744bdf3de6f3fd5ddceca82effc31703e51e25a616314dabd77e1ee53e3143802f4c18be21f08640c5277ad850691770954f69461a98172f324f85ba322f6e2eb71bbe6968a50dca5cc90", 0xd7}, {&(0x7f0000000e80)="f356bd170802852d74f578f375b655867f2a385d891bc3b61550f376fcf0fb75678c7ea001bf491d7744c545f3796bc3b5d6b0197776a356ec9519e8c9d153b5cf004f0275a2887f479914cb110e7d1494ad682ea05c4bdcfe15e97cd9e2bb18c9ab507d3a0acf5b17e8c31283461cefd5a1bc8448f40941f91cd7580950f6354e3fa4865cc1e3dd1041b58b01860df02b08167dfa8c4eae8bd53e81a54314547a01c2db156078d293bb21c05a9b33bb8dbdf1c056e3fffdb45f2c74d2d2197c98359e18", 0xc4}], 0x4, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1dd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x50}}, {{&(0x7f0000001080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001200)=[{&(0x7f00000010c0)="56cdbf9c33b779403fb05023c584c21fa8438592672d418fe0f97f20953c7bdf78e5d849259b6d1bd2458a4cd20586ace4cd5c2af26df3ab529f1284c8433eaf38af019699ecf6effb047401ce33266c89ec8fa83d7e5885a1ffabf45fffbee23e9b1d2066dacf7dfc6f40c509506dc58d0d4beb5f8935205c072a87eb2e298e6fbe74f4b5425b6418f9868e17db707a9157bdf1d33c427832d2c1bf7f26dfb24c79ee03a1212b215db2d245e4ffc5a8929932706153d9ea2d21c2cc05128291c8cc6cf4657d56359aca779679c2bcde21ff65788f590b4a62f5b06dfeec7979", 0xe0}, {&(0x7f00000011c0)}], 0x2, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x78}}, {{&(0x7f00000012c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001300)="9441b4d56467c7bb538d191519393e2c723789faaaaf9c234fa7f92a", 0x1c}, {&(0x7f0000001340)="12453e1ceb0d8cfba5971c8bb65ad631eb8768436cafbae29845959d57059ff580c5cf2671d1781178bb7a70b842a3aeffe4f59569fb7779aa8edad44ccd58407ee59b38d57f8281c0117ccb7f7a4f9e76dd1a9fcbe24aa27d16baa283f46f90ebf04684be8b2fe1679dcc399ca7959893271a9dde79d0a97c12e3db230ee7987e55dfe94b5278e1549538b7f70679ba9f", 0x91}, {&(0x7f0000001400)="d65ed38f8c805f12f98ef4700df8ac3c31e635bf97d4c92758fff4a6e8fc32a4e1e5e8aff10f8cd15bb896810646a685fe99783d6b3772535cc5ed5fe2c3bae259dd118e20374ffaf2e0a1b8163f1bca0e4b0fd466abb54e8a8e67b250827fec698c8b80e53d43fa91068f21b19e598ccc80bb67f605929634eb3fed320e58b46941c0e2c6691dadcd32ae7a11425427dfa0673423d7f6e5c01c896215280954b8d8ffbaa059b5f9914e7f1e8e78c9cede8e96e4957cd365201ed2dfec62b2f863c7ed752c12b18e5048bd8d4eaf8d1b3564cf4192791b2fa4512896fd74ddd62cfb0a8866089d782efba7547ad1c337be4553", 0xf3}], 0x3, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x9d, [@rand_addr=0x64010102]}]}}}], 0x30}}], 0x5, 0x24001844) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="0000288aa06400"/28, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1m55.160377989s ago: executing program 4 (id=190): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) r7 = socket(0x10, 0x803, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r12, 0x114, 0x7, &(0x7f0000000240)={@sco={0x1f, @none}, {&(0x7f00000000c0)=""/140, 0x8c}, &(0x7f0000000040), 0x19}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r13 = inotify_init1(0x80800) close(r13) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$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") 1m54.518648462s ago: executing program 4 (id=195): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x61, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 1m54.44011881s ago: executing program 4 (id=197): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xffd, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 1m54.168659407s ago: executing program 4 (id=202): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2401, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) set_mempolicy_home_node(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) lstat(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getresgid(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x4000000000007ff}, 0x18) 1m54.071367797s ago: executing program 4 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0xa, 0x5, 0x0) r3 = memfd_secret(0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x18) fcntl$setlease(r3, 0x400, 0x0) close(r3) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x4, @private2, 0x7fd}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084000017da5b7b002000000081000000"], 0x18}, 0x280400d5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1m54.071058866s ago: executing program 32 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0xa, 0x5, 0x0) r3 = memfd_secret(0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x18) fcntl$setlease(r3, 0x400, 0x0) close(r3) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x4, @private2, 0x7fd}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084000017da5b7b002000000081000000"], 0x18}, 0x280400d5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 56.437723617s ago: executing program 3 (id=1560): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r8, 0x25, 0x4}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r9, 0x4) fcntl$dupfd(r0, 0x0, r0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r11, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) 56.163405624s ago: executing program 3 (id=1567): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 56.124335938s ago: executing program 3 (id=1568): openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x1, 0x2c0, &(0x7f0000000440)="$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") r1 = open(&(0x7f0000000300)='./file1\x00', 0x147842, 0x126) preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1) 56.043845686s ago: executing program 3 (id=1571): socket$inet(0x2b, 0x801, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='rss_stat\x00', r3, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x30, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}}, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x2c4b, 0x3180, 0x8000, 0x40024f}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) 55.739825136s ago: executing program 3 (id=1578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000280)=""/4, 0x4, 0x0, &(0x7f00000002c0)=""/101, 0x65}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x20, 0x0, 0x0) 55.378363162s ago: executing program 33 (id=1584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x20, 0x0, 0x0) 3.155373249s ago: executing program 2 (id=1847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x32, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 2.84687359s ago: executing program 2 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 2.459640318s ago: executing program 2 (id=1857): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000000ac1414de8049438fec194ba5375a1ec7"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 2.178626765s ago: executing program 0 (id=1861): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) r6 = socket(0x10, 0x803, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000240)={@sco={0x1f, @none}, {&(0x7f00000000c0)=""/140, 0x8c}, &(0x7f0000000040), 0x19}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r12 = inotify_init1(0x80800) close(r12) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$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") 1.785344324s ago: executing program 0 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000000400"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syncfs(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r0], &(0x7f00000005c0)=""/234, 0xfffffffffffffd6c, 0xea, 0xffffffff, 0xdd57, 0x10000}, 0x11) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8927, &(0x7f0000000080)='\x804\x01v\xaa\xd5\x10\x90\x94\xcf\xf3:,\x03\b$\xcfs\xf8l\xf0\x86Q\t3\x03^d7\xab=&\b\x00\x00\x00\x00\x00\x00\xe7\xc4\x16\xd7tE;\xe5\xfd\x17\x8b\nl\x19\x91\xd9\xd9\xc9\n\x00\n\xe63\xe6\xdd\x19FR') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000001c0), 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x840) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x80045300, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='ext4_mb_release_group_pa\x00', r10}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.046725237s ago: executing program 6 (id=1883): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 994.499792ms ago: executing program 6 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0x11, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x8, 0x3, 0xac9b, {0x170f}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 975.217294ms ago: executing program 0 (id=1885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x81, r2, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b49c45b8eb00000071103300000000001100000000000000950000100000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='f2fs_write_end\x00', r3, 0x0, 0x80000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fee3ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="62b3ecf7c9c1d309522fe14094fbffff1b3e03004bbb9b5e6c63f040391ba40dc66830ffa1db62b7e4525d342566f6a206f82894e968"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r7, &(0x7f0000000040)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r7, 0x1) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, &(0x7f0000000100)={{}, {0xe, 0xfc}, 0x4, 0x7}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000304010000000000000000160000", @ANYRES32=0x0, @ANYBLOB="43c20000000000002000128009000100766c616e00000000100002800c000300040000000200000014000300766c616e3000"/60], 0x54}, 0x1, 0xba01, 0x0, 0x4009}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0x6}}}, 0x24}}, 0x0) 902.117821ms ago: executing program 6 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000040000000007000000074600"], 0x50) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x5, 0x3355e513, 0x3, 0x6, 0x40, 0x800, 0x7f, 0x4}, 0x0, &(0x7f0000000380)={0x4, 0x7, 0x2, 0x4, 0x4, 0x3, 0x5, 0x7}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={[0x400]}, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='kfree\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="2b3e7c2b8f416b19d67f0000cc000000000034eb", @ANYRES32=r4, @ANYBLOB="00000000000000000000000000000000000000001a585bf73f1a88f35d043e7016eafa6b75ea9afe8ee25cb8496b1afda9241ad853812d87c3c26c818cdf1765ba7b8fd5bffb3568dfb9d8e4c237b0ff6dc04b0deb5dfc156d050e7ca69d5105e31ad469370a9f58a568764e9c70363f8d2ab200b8f454b35b0a8887fbb3ee5d45b9d63e027488dd25fbc27591ccd13e9c67702535916c26cdf78b404c323d73f47324ab", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r3], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 850.151776ms ago: executing program 5 (id=1887): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) 832.568898ms ago: executing program 0 (id=1888): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='rss_stat\x00', r1, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 802.152261ms ago: executing program 5 (id=1889): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000001b70800000000396f18beb1af87101c00e0347b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000edf3cfd17384549c55116282875038f0cc851931bcde0cf527c040a855838a24919165f7095af109423e07d19148979e11b111d68304a83be2e3d7458d843eea6f0293be5c6dee164818f03b978e64d0aa6acc1fe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='rxrpc_rtt_rx\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) read$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x22a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x320, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2f, 0x0, [{0x8, 0xc, 0x7, 0x4}, {0xffff, 0x2, 0x4, 0x1}, {0xfff, 0x8, 0x9f, 0x6}, {0x0, 0x9, 0xfc, 0x8}, {0x382c, 0x10, 0x5, 0x2}, {0x7ff, 0x59, 0x81, 0x10}, {0xcc, 0x2, 0x9b, 0x1}, {0x8, 0x5, 0x7, 0x8}, {0xbd, 0x2, 0x10, 0x5}, {0x99, 0x9, 0x7, 0x9}, {0x0, 0xd6, 0x10, 0x83}, {0x7fff, 0x40, 0x0, 0x9}, {0x40, 0xf7, 0x16, 0x2}, {0xf001, 0x2, 0xff, 0x10000000}, {0x7, 0x95, 0x8a, 0x2}, {0x7, 0xfe, 0x81, 0x1ff}, {0x721, 0x1, 0x4, 0x51c}, {0x5, 0x3, 0x6, 0x80000001}, {0x95cf, 0x8, 0xc, 0x9}, {0x7ff, 0x5, 0x2, 0x5}, {0x2, 0x80, 0x6, 0x7fff}, {0x81, 0xfb, 0x3, 0x5}, {0x100, 0x9, 0x1, 0xfffffffc}, {0x101, 0x10, 0x6, 0x7e2}, {0x800, 0x5e, 0x7, 0x3}, {0x3, 0x6, 0x1, 0x1}, {0x88c, 0x0, 0x0, 0x3}, {0xfff, 0x1, 0x3, 0x9}, {0x4, 0x0, 0x0, 0x4}, {0x8, 0xff, 0x0, 0x800}, {0x5cc, 0x8, 0x4, 0x5}, {0x1, 0xd, 0x9, 0xb}, {0xfffa, 0xc5, 0x0, 0x7ff}, {0x4d7e, 0xc7, 0x7, 0x1}, {0xed, 0x4, 0x0, 0x6}, {0x2647, 0x4, 0x4, 0x6}, {0x6, 0x8, 0x0, 0xb}, {0x2, 0xbd, 0xa, 0x4acb}, {0x401, 0x1d, 0xc, 0x7f}, {0x1, 0x4, 0x4, 0x10001}, {0xb675, 0x4, 0x9, 0x3}, {0x8, 0x9, 0x6, 0x2}, {0x0, 0x2, 0x40}, {0x0, 0x7, 0x6, 0x3}, {0x7fff, 0x7, 0xe6, 0x26}, {0x458f, 0x65, 0x9, 0x200}, {0xff22, 0xf0, 0x5, 0x4}, {0xffff, 0xfa, 0x1, 0x3}, {0x1, 0x6, 0xf1, 0x5}, {0x4, 0x3, 0x4, 0xfffff5ab}, {0xfff, 0x7, 0x1, 0x1ff}, {0x7fff, 0x8, 0x4, 0x83}, {0x6, 0x1, 0xff, 0x1}, {0x1, 0x5, 0x80, 0xfffffffe}, {0xff, 0x1, 0x9, 0x3ff}, {0x5, 0x5, 0x4, 0x4}, {0x5a, 0x1, 0xf, 0x2}, {0x0, 0x5, 0x1, 0x7}, {0x8, 0x6, 0xff}, {0x6, 0x2, 0x0, 0x1}, {0x1, 0x9, 0x98, 0x7}, {0x8a0, 0x0, 0x2, 0x6}, {0x4, 0x8, 0x5, 0x81}, {0x800, 0x4, 0x0, 0x5}], {0x81}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x7, 0x74}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 794.022112ms ago: executing program 0 (id=1891): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) socket(0x10, 0x803, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) 771.721734ms ago: executing program 6 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000e2", @ANYRES16=r4, @ANYBLOB="00072cbd7000ffdbdf250400000020000580070001006962000004000280080001007564700007000100696200000c00018008000300100000003c000280080002000500000008000100530000000400040008000200040000001c000380080001000000000008000100070000000800010000000080140003800800030001ffffff08000300"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$TIOCGSID(r8, 0x5429, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r10, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 578.980013ms ago: executing program 6 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x40, {{@in=@remote, @in=@multicast1, 0x4e20, 0x7, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x67}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "aae76ca46f30ef8dca174278c457734ba05022c9b79f1d26de260b"}}]}, 0x158}}, 0x4000804) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028006001300"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 545.488996ms ago: executing program 0 (id=1895): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x3a, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffc, @mcast1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3f27) r7 = socket$nl_generic(0x10, 0x3, 0x10) readv(r5, &(0x7f0000000cc0)=[{&(0x7f00000005c0)=""/84, 0x54}, {&(0x7f00000006c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/67, 0x43}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000840)}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/152, 0x98}], 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03000000040000040000fa000000000000000000", @ANYRESHEX, @ANYBLOB="0000e0ffff4be6d2e3a66faf2430c8000000000013e0ef6aa42773a4be4a2b8eb5783c982fa0460b3d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010000000000000c0000000c000000020000000000de000000000d000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r8, 0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x59, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) 477.576953ms ago: executing program 5 (id=1897): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) 250.858395ms ago: executing program 5 (id=1901): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000280)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 250.449205ms ago: executing program 1 (id=1902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='rss_stat\x00', r1, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 249.737396ms ago: executing program 6 (id=1903): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 239.615846ms ago: executing program 1 (id=1904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000e2", @ANYRES16=r4, @ANYBLOB="00072cbd7000ffdbdf250400000020000580070001006962000004000280080001007564700007000100696200000c00018008000300100000003c000280080002000500000008000100530000000400040008000200040000001c000380080001000000000008000100070000000800010000000080140003800800030001ffffff08000300"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/vlan/vlan0\x00') r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$TIOCGSID(r8, 0x5429, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r10, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 217.751448ms ago: executing program 5 (id=1905): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) 177.482072ms ago: executing program 2 (id=1906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r2, &(0x7f0000000c80)=""/103, 0x67) 157.245804ms ago: executing program 2 (id=1907): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) syz_read_part_table(0x59a, &(0x7f0000000b80)="$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") 137.422376ms ago: executing program 1 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0)="7f2f437fc6b9a732b59915e22fce30e729be5c8104fcb5eb57e9699201e3381f982016e3b8df5bf1f60a1d57e1ffb7a53476ba3cd2a90f8f7c4330d3bb10657445d9028f9e06c166d4ad963ae7b56c2f7926db4e25aa84fdd23fda8c3e281d80d9e94188", 0x81, r2, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b49c45b8eb000000711033000000000011000000000000009500001000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='f2fs_write_end\x00', r3, 0x0, 0x80000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fee3ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="62b3ecf7c9c1d309522fe14094fbffff1b3e03004bbb9b5e6c63f040391ba40dc66830ffa1db62b7e4525d342566f6a206f82894e968"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r7, &(0x7f0000000040)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r7, 0x1) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, &(0x7f0000000100)={{}, {0xe, 0xfc}, 0x4, 0x7}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000304010000000000000000160000", @ANYRES32=0x0, @ANYBLOB="43c20000000000002000128009000100766c616e00000000100002800c000300040000000200000014000300766c616e3000"/60], 0x54}, 0x1, 0xba01, 0x0, 0x4009}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0x6}}}, 0x24}}, 0x0) 19.236058ms ago: executing program 1 (id=1909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = socket(0x10, 0x3, 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmmsg$sock(r3, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="978207465f6143bd49dc3befdb498e45437f88c33155f98b799bd9c9b45766b71766d9fb935eb96fe71fa680f8f487", 0x2f}, {&(0x7f00000002c0)="ca9993447a14af3750d2b34d876d997b2098c895545a5aeb06410f03c5caa943a6ec73ecebdcff18ff217d5e1dd718f38e833e4530fe1e5c3f7ca0deb09b3dbb2cb389e599faccb3e96ee9ecd906994b992394670da97b1df969408de484264d6c04fb8b11f108d09fc00a262533ddaacc8e40f8008a", 0x76}, {&(0x7f0000000140)}, {&(0x7f0000000340)="8a8fbbdb94e29254888d4a00b76905ffbbb385329df59f3aaada888d3509546fb236721d3aa0fb59d121d5102b99044665da6435daa83195df43201952039352b2feb27f6de67c2eb8ee3294a6684794164e737bbbcfff189161d75836a053fc637db789fc40b0ae330def50dbd1f4eb4343bdcaa42496af", 0x78}, {&(0x7f00000004c0)="4e3fb6c497b2a03b7cf989b6fe46b0d015955329641b72f719902f4c9aa8787fb54aadbbb79285e31a2d7adb8f762712aeb1bfc8d50b9a3a8c86ada89b7d0e3c0a6560924c830e58b57c9b6236a593d9643441e2a1ec637f681f698048f3471280426e62b787f4ecdd6fece4bad9cb8f395c2c0061a11f29b2c1cd3268241d3f4b61ab4faf4000d92fa7cecf51f4aac2113222d01c352a97d9f910e8788875d32de5709ad9da94755eac1cfb300a8b4f290edaaf75eded56a77f3f5e9bcc954b6ed7f6d8f39126140964f478a41bbee32c17b9273324d22579ea25", 0xdb}], 0x5}}], 0x1, 0x4008000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x318, 0x13, 0x400, 0x70bd27, 0x25dfdbfe, {0x25, 0xc3, 0x9, 0x6, {0x4e24, 0x4e20, [0x7, 0x3, 0x4, 0xffffffff], [0x9, 0x100, 0x800, 0xf6a], r5, [0xad9, 0x80000000]}, 0x73e, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xea, 0x1, "0bcd00dfe178e95825dfba67389dda5ec89615eef475df47570ec2fbd52e68407c86b64a22bbee20a056d289f154821be08faba1956b3a76868a32a740f755809dea41c2810cf2d5ec04042f31063215b6b5c680b3dcb28fe6cce48a3fd92f87d524ba27a35dea04aac2291b56f87f48de3fce492f0b8a0b2225e3a4004081219b135c8429782e9202700055333ac884fff4efde2617fda57709eb5a2f4f110c33432530faa3bc20fcff6edb352eec86501641922b7e04eecc97028d28705c720a8a20a38da80dabb13ba564046fda15f6f58ddf0a722978ce029e199ab6eb53371e592790b9"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "f15d57508f2c9ccdda206b74e51febea3be38cd64dbcf66f0e6ea1843f870dca2daffcd729bd1d137dc64bf477d3214bc5cd3a82f6c26866f02ed3dea92f672938d0250b09"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "825bf6ac026c6e7ffd4e5cdd6b8bde00fe1454237c576b8938cf2e2aece1a973330ace031898e4"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "ce33830dce29b45c9211d0ee5da73006ec98480c3cd6716eedc16d102f8402d4b7defec405ade0de8df551c603c97bfecdc0e6fefa412d327f99a5518ed99b9502295d2b6908000f4a69ca6baaabd02240f8e700b400ac6c097aabcb05ca9cb4840e8a93987656eee5b434a5c0dd8b2e562270b3d69d7977d93a939289584123a5e85df3d08625cb04f87e79d78bdcd4f766af676f8b1a015767bfc0004f738be0f55fdf860f8b99534a0f62cf7e83b757524b0ad6b888baacb448dd876fcddd5d3a1b7f85ad"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "af440ce0ba13c42322c37ce347e9fc4179e0b83aabd92f7b0477d73cae0d03eb37c5e2679d331ef85395f20ebd1aec962ba41a2ff111da79651f84b9df1998c9afb7bec3ab59735c3d55ffd917b9b42dd96151f32f08ee418b85b4b03d37f0789b3ba728b85bde3f452748f33b111fcaf495cbebff23f320c77e4021215dc0bc4f3451a5805c59ac3d763c43347a646e27cba8cf901c2d15"}]}, 0x318}}, 0x20060801) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000001bfa200000000000007020000f8ffffffb703000008000000b7009500000100"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, 0x14, 0x7a3cc0df0763377f, 0x70bd27, 0x0, {0x10, 0x3d}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f26ffc0c1b0a6cfdf9"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r6, @ANYBLOB="25ab4947484faae0d61503512227fbc075e3190ff4ffc70d6ab775645720c5133e9f9904a7ef8c817c6aec3c8465e232efa19e5c904d9dd4dd2f6bcf2e6d4432b68ebcee14dcde48e223a1dffdb8ee9f2dd0c9dbed1b3c849a8b3e5582484d9ad5127abe2d27d777c4c59492c35636ded1e2a7dca6a4cd7feaa743af76fd240320ca05545dc8df738979ee16fd804fde994ebab262f84e79962d3a8f6498ffdbc6af12492de70d9797cf849f0eab75d9690a08023457d120faabc70b1bb7666305f11a4c06f68b6e8912580b64656e2bfcb9ec2a5863765624319227b92a414c77a8248f94263f55adc646a46f534b150c8aa2b3062be2db61af1b503f1bac484a10331a45eabb671e3af0b34f5123ad83848ba731a49c7390616b0595adaa33b1e444ee085f4edc03b31847d3b5380a4632ed9f7f9d92af531d75d0f2255c76aa950565fc3d7c39b1cf", @ANYRESOCT=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1f, 0x0, &(0x7f0000000100)) 0s ago: executing program 2 (id=1910): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700100000000000ff000020850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r8, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r10, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x2f, &(0x7f0000000440)=""/147, &(0x7f00000002c0)=0x93) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@o_path={&(0x7f00000003c0)='./file0\x00', r2, 0x4000, r0}, 0x18) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x9}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1184: iget: bad i_size value: 38620345925642 [ 81.494787][ T6768] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 81.506929][ T6764] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1184: couldn't read orphan inode 15 (err -117) [ 81.525027][ T6768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.532650][ T6764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.553386][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 81.554985][ T6762] xt_bpf: check failed: parse error [ 81.563632][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 81.579226][ T6768] bond3 (unregistering): Released all slaves [ 81.579772][ T6764] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1184: bg 0: block 5: invalid block bitmap [ 81.602638][ T6762] loop2: detected capacity change from 0 to 128 [ 81.649104][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.660408][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 81.686124][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 81.701543][ T6762] vhci_hcd: invalid port number 96 [ 81.706702][ T6762] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 81.724363][ T6784] xt_hashlimit: max too large, truncated to 1048576 [ 81.732041][ T6784] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.776938][ T6787] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 81.802884][ T6789] loop5: detected capacity change from 0 to 2048 [ 81.835025][ T6789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.864959][ T6789] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.887357][ T6787] bond3: (slave veth21): Enslaving as an active interface with a down link [ 81.908262][ T6803] loop1: detected capacity change from 0 to 512 [ 81.922748][ T6787] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1193'. [ 81.932266][ T6803] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 81.936541][ T6806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1194: bg 0: block 345: padding at end of block bitmap is not set [ 81.959424][ T6806] EXT4-fs (loop5): Remounting filesystem read-only [ 81.963407][ T6803] loop1: detected capacity change from 0 to 512 [ 81.966126][ T341] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 82.001295][ T6803] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 82.018736][ T6809] netlink: 660 bytes leftover after parsing attributes in process `syz.2.1200'. [ 82.043229][ T6809] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 82.062953][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.091300][ T6803] 9pnet: Unknown protocol version 9p20 [ 82.093300][ T6816] loop5: detected capacity change from 0 to 512 [ 82.107021][ T6816] EXT4-fs: Ignoring removed nobh option [ 82.122984][ T6816] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1201: iget: bad i_size value: 38620345925642 [ 82.183580][ T6816] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1201: couldn't read orphan inode 15 (err -117) [ 82.201976][ T6816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.221067][ T6816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1201: bg 0: block 5: invalid block bitmap [ 82.234765][ T6823] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 82.258547][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.284602][ T6823] bond2 (unregistering): Released all slaves [ 82.300414][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1209'. [ 82.421163][ T6831] xt_bpf: check failed: parse error [ 82.427678][ T6831] loop1: detected capacity change from 0 to 128 [ 82.467995][ T6843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6843 comm=syz.0.1209 [ 82.497592][ T6831] vhci_hcd: invalid port number 96 [ 82.502775][ T6831] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 82.515602][ T6835] xt_bpf: check failed: parse error [ 82.522732][ T6835] loop5: detected capacity change from 0 to 128 [ 82.529211][ T6848] loop2: detected capacity change from 0 to 1024 [ 82.538926][ T6848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.549865][ T6833] netlink: 'syz.0.1209': attribute type 21 has an invalid length. [ 82.558766][ T6848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.584247][ T6833] loop0: detected capacity change from 0 to 4096 [ 82.592262][ T6835] vhci_hcd: invalid port number 96 [ 82.592350][ T6848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.597383][ T6835] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 82.617448][ T6833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.624183][ T6833] EXT4-fs: Ignoring removed i_version option [ 82.641495][ T6833] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 82.678602][ T6848] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 82.733300][ T6849] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 82.802109][ T6863] loop1: detected capacity change from 0 to 512 [ 82.809407][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.823001][ T6862] loop3: detected capacity change from 0 to 512 [ 82.842929][ T6862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.870999][ T6863] EXT4-fs: Ignoring removed nobh option [ 82.934808][ T6863] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1218: iget: bad i_size value: 38620345925642 [ 82.953437][ T6862] EXT4-fs (loop3): 1 truncate cleaned up [ 82.975572][ T6875] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 82.986838][ T6876] loop0: detected capacity change from 0 to 512 [ 82.991012][ T6863] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1218: couldn't read orphan inode 15 (err -117) [ 82.993590][ T6862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.019425][ T6878] siw: device registration error -23 [ 83.020108][ T6875] bond4 (unregistering): Released all slaves [ 83.026113][ T6863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.050929][ T6876] EXT4-fs: Ignoring removed bh option [ 83.085953][ T6862] ipvlan0: entered promiscuous mode [ 83.102961][ T6876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.125778][ T6876] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.140042][ T6863] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1218: bg 0: block 5: invalid block bitmap [ 83.180161][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.189479][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.232773][ T6883] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 83.247471][ T6883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.259311][ T6883] bond2 (unregistering): Released all slaves [ 83.293376][ T6888] xt_hashlimit: max too large, truncated to 1048576 [ 83.322282][ T6888] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.537146][ T6909] loop0: detected capacity change from 0 to 512 [ 83.545681][ T6909] EXT4-fs: Ignoring removed nobh option [ 83.558177][ T6909] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1235: iget: bad i_size value: 38620345925642 [ 83.607707][ T6909] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1235: couldn't read orphan inode 15 (err -117) [ 83.620499][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.620719][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.648800][ T6913] loop2: detected capacity change from 0 to 256 [ 83.663859][ T6909] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1235: bg 0: block 5: invalid block bitmap [ 83.686462][ T6913] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.696610][ T6913] FAT-fs (loop2): Filesystem has been set read-only [ 83.730132][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.762407][ T6917] netlink: 'syz.5.1239': attribute type 1 has an invalid length. [ 83.776717][ T6920] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 83.788592][ T6920] bond4 (unregistering): Released all slaves [ 83.828364][ T6919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 83.849180][ T6919] bond4 (unregistering): Released all slaves [ 83.883831][ T6926] SELinux: failed to load policy [ 84.098127][ T6936] xt_bpf: check failed: parse error [ 84.106120][ T6936] loop2: detected capacity change from 0 to 128 [ 84.117786][ T6943] loop5: detected capacity change from 0 to 256 [ 84.171034][ T6936] vhci_hcd: invalid port number 96 [ 84.176206][ T6936] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 84.246565][ T6945] loop2: detected capacity change from 0 to 4096 [ 84.253369][ T6945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.260035][ T6945] EXT4-fs: Ignoring removed i_version option [ 84.266392][ T6945] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 84.420164][ T6954] siw: device registration error -23 [ 84.494102][ T6956] loop1: detected capacity change from 0 to 256 [ 84.572845][ T6959] SELinux: failed to load policy [ 84.722109][ T6973] validate_nla: 1 callbacks suppressed [ 84.722123][ T6973] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 84.742182][ T6973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.746585][ T6974] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 84.757286][ T6975] netlink: 'syz.5.1258': attribute type 21 has an invalid length. [ 84.767025][ T6973] bond1 (unregistering): Released all slaves [ 84.784158][ T6962] xt_bpf: check failed: parse error [ 84.791976][ T6962] loop2: detected capacity change from 0 to 128 [ 84.816494][ T6974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.879527][ T6974] bond4 (unregistering): Released all slaves [ 84.891559][ T6962] vhci_hcd: invalid port number 96 [ 84.896698][ T6962] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 85.002537][ T6992] loop3: detected capacity change from 0 to 128 [ 85.027316][ T6996] loop0: detected capacity change from 0 to 512 [ 85.059518][ T6992] FAT-fs (loop3): Directory bread(block 162) failed [ 85.079654][ T6996] EXT4-fs: Ignoring removed nobh option [ 85.096599][ T6992] FAT-fs (loop3): Directory bread(block 163) failed [ 85.115963][ T6992] FAT-fs (loop3): Directory bread(block 164) failed [ 85.122777][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 85.122821][ T29] audit: type=1326 audit(1761583165.657:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.122871][ T6996] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1270: iget: bad i_size value: 38620345925642 [ 85.129193][ T29] audit: type=1326 audit(1761583165.657:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.152994][ T6992] FAT-fs (loop3): Directory bread(block 165) failed [ 85.165116][ T29] audit: type=1326 audit(1761583165.667:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.218387][ T29] audit: type=1326 audit(1761583165.667:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.241813][ T29] audit: type=1326 audit(1761583165.667:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.266044][ T29] audit: type=1326 audit(1761583165.747:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.289343][ T29] audit: type=1326 audit(1761583165.747:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.293582][ T6992] FAT-fs (loop3): Directory bread(block 166) failed [ 85.312800][ T29] audit: type=1326 audit(1761583165.747:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.342762][ T29] audit: type=1326 audit(1761583165.747:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.342767][ T6992] FAT-fs (loop3): Directory bread(block 167) failed [ 85.342791][ T29] audit: type=1326 audit(1761583165.747:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 85.368582][ T6992] FAT-fs (loop3): Directory bread(block 168) failed [ 85.372959][ T6996] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1270: couldn't read orphan inode 15 (err -117) [ 85.430672][ T6992] FAT-fs (loop3): Directory bread(block 169) failed [ 85.436180][ T7001] xt_hashlimit: max too large, truncated to 1048576 [ 85.455028][ T6992] FAT-fs (loop3): Directory bread(block 162) failed [ 85.455459][ T7001] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.470832][ T6992] FAT-fs (loop3): Directory bread(block 163) failed [ 85.481233][ T6992] bio_check_eod: 2 callbacks suppressed [ 85.481246][ T6992] syz.3.1268: attempt to access beyond end of device [ 85.481246][ T6992] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 85.500715][ T6996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.556279][ T6992] syz.3.1268: attempt to access beyond end of device [ 85.556279][ T6992] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 85.575014][ T6996] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1270: bg 0: block 5: invalid block bitmap [ 85.597383][ T6990] xt_bpf: check failed: parse error [ 85.604656][ T6990] loop5: detected capacity change from 0 to 128 [ 85.611883][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.656205][ T7011] siw: device registration error -23 [ 85.721223][ T6990] vhci_hcd: invalid port number 96 [ 85.726379][ T6990] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 85.735298][ T7019] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 85.766451][ T7024] loop0: detected capacity change from 0 to 512 [ 85.773319][ T7019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.894104][ T7024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.913924][ T7033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7033 comm=syz.3.1281 [ 85.928332][ T7024] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.972649][ T7033] netlink: 'syz.3.1281': attribute type 21 has an invalid length. [ 85.997275][ T7033] loop3: detected capacity change from 0 to 4096 [ 86.013850][ T7033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.020480][ T7033] EXT4-fs: Ignoring removed i_version option [ 86.047073][ T7038] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 86.078153][ T7027] SELinux: failed to load policy [ 86.084311][ T7038] bond4 (unregistering): Released all slaves [ 86.093505][ T7033] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096) [ 86.296825][ T7057] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 86.321713][ T7054] __nla_validate_parse: 26 callbacks suppressed [ 86.321773][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 86.340793][ T7057] bond4: (slave veth17): Enslaving as an active interface with a down link [ 86.358646][ T7057] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1293'. [ 86.375695][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.424050][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1298'. [ 86.533831][ T7080] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1302'. [ 86.544300][ T7080] syû: rxe_newlink: already configured on bond_slave_0 [ 86.587235][ T7088] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 86.597872][ T7088] bond5 (unregistering): Released all slaves [ 86.622672][ T7091] xt_hashlimit: max too large, truncated to 1048576 [ 86.629830][ T7091] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.677814][ T7095] loop3: detected capacity change from 0 to 256 [ 86.729179][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 86.743431][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 86.860780][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 86.952092][ T7111] loop3: detected capacity change from 0 to 512 [ 86.972782][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.985439][ T7111] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.083048][ T7117] loop2: detected capacity change from 0 to 256 [ 87.093429][ T7119] xt_hashlimit: max too large, truncated to 1048576 [ 87.100768][ T7119] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.199628][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'. [ 87.275830][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 87.314137][ T7137] netlink: 'syz.3.1323': attribute type 21 has an invalid length. [ 87.324659][ T7137] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1323'. [ 87.352983][ T7140] loop1: detected capacity change from 0 to 512 [ 87.371295][ T7139] siw: device registration error -23 [ 87.435105][ T7144] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.445143][ T7144] SELinux: failed to load policy [ 87.452017][ T7140] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.493296][ T7150] syû: rxe_newlink: already configured on bond_slave_0 [ 87.501227][ T7148] xt_hashlimit: max too large, truncated to 1048576 [ 87.508357][ T7148] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.716990][ T7181] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 87.724335][ T7183] loop1: detected capacity change from 0 to 512 [ 87.742948][ T7183] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.779954][ T7190] loop2: detected capacity change from 0 to 512 [ 87.827569][ T7194] loop0: detected capacity change from 0 to 512 [ 87.834367][ T7190] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.861050][ T7194] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.933575][ T7202] loop3: detected capacity change from 0 to 256 [ 87.983149][ T7208] xt_hashlimit: max too large, truncated to 1048576 [ 87.991737][ T7208] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.003128][ T7210] loop1: detected capacity change from 0 to 4096 [ 88.055611][ T7210] FAULT_INJECTION: forcing a failure. [ 88.055611][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 88.068285][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz.1.1354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.068346][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.068359][ T7210] Call Trace: [ 88.068365][ T7210] [ 88.068464][ T7210] __dump_stack+0x1d/0x30 [ 88.068487][ T7210] dump_stack_lvl+0xe8/0x140 [ 88.068507][ T7210] dump_stack+0x15/0x1b [ 88.068521][ T7210] should_fail_ex+0x265/0x280 [ 88.068578][ T7210] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 88.068602][ T7210] should_failslab+0x8c/0xb0 [ 88.068625][ T7210] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 88.068648][ T7210] ? ext4_alloc_inode+0x38/0x310 [ 88.068683][ T7210] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 88.068706][ T7210] ext4_alloc_inode+0x38/0x310 [ 88.068731][ T7210] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 88.068753][ T7210] alloc_inode+0x40/0x170 [ 88.068776][ T7210] iget_locked+0xf9/0x5d0 [ 88.068814][ T7210] __ext4_iget+0x152/0x22d0 [ 88.068915][ T7210] ? d_alloc_parallel+0xbc4/0xc70 [ 88.068943][ T7210] ext4_lookup+0x161/0x390 [ 88.069041][ T7210] __lookup_slow+0x193/0x250 [ 88.069062][ T7210] lookup_slow+0x3c/0x60 [ 88.069080][ T7210] walk_component+0x1ec/0x220 [ 88.069107][ T7210] path_lookupat+0xfe/0x2a0 [ 88.069136][ T7210] filename_lookup+0x147/0x340 [ 88.069216][ T7210] user_path_at+0x3e/0x130 [ 88.069238][ T7210] do_fchownat+0xb0/0x210 [ 88.069264][ T7210] __x64_sys_lchown+0x4a/0x60 [ 88.069299][ T7210] x64_sys_call+0x2865/0x3000 [ 88.069321][ T7210] do_syscall_64+0xd2/0x200 [ 88.069418][ T7210] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.069443][ T7210] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.069471][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.069493][ T7210] RIP: 0033:0x7fd7a2feefc9 [ 88.069513][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.069529][ T7210] RSP: 002b:00007fd7a1a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 88.069670][ T7210] RAX: ffffffffffffffda RBX: 00007fd7a3245fa0 RCX: 00007fd7a2feefc9 [ 88.069682][ T7210] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000200000000240 [ 88.069692][ T7210] RBP: 00007fd7a1a57090 R08: 0000000000000000 R09: 0000000000000000 [ 88.069702][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.069713][ T7210] R13: 00007fd7a3246038 R14: 00007fd7a3245fa0 R15: 00007fff9594e3b8 [ 88.069731][ T7210] [ 88.410365][ T7227] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 88.420296][ T7227] SELinux: failed to load policy [ 88.493957][ T7236] netlink: 'syz.3.1365': attribute type 1 has an invalid length. [ 88.560476][ T7252] syû: rxe_newlink: already configured on bond_slave_0 [ 88.658380][ T7250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7250 comm=syz.0.1367 [ 88.681565][ T7256] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 88.693062][ T7256] bond3 (unregistering): Released all slaves [ 88.716675][ T7261] lo speed is unknown, defaulting to 1000 [ 88.845223][ T7250] netlink: 'syz.0.1367': attribute type 21 has an invalid length. [ 89.089329][ T7244] loop0: detected capacity change from 0 to 4096 [ 89.098352][ T7244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.105061][ T7244] EXT4-fs: Ignoring removed i_version option [ 89.113002][ T7244] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 89.267909][ T7284] bond4: (slave veth25): Enslaving as an active interface with a down link [ 89.278997][ T7283] loop2: detected capacity change from 0 to 8192 [ 89.429856][ T7295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.450162][ T7296] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 89.463319][ T7296] bond5 (unregistering): Released all slaves [ 89.493708][ T7295] bond1 (unregistering): Released all slaves [ 89.583971][ T7311] syû: rxe_newlink: already configured on bond_slave_0 [ 89.660369][ T7321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7321 comm=syz.1.1392 [ 89.692840][ T7321] loop1: detected capacity change from 0 to 4096 [ 89.709562][ T7321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.716295][ T7321] EXT4-fs: Ignoring removed i_version option [ 89.726768][ T7321] /dev/loop1: Can't open blockdev [ 89.763750][ T7326] validate_nla: 4 callbacks suppressed [ 89.763764][ T7326] netlink: 'syz.3.1394': attribute type 1 has an invalid length. [ 89.802924][ T7326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.811846][ T7331] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 89.823302][ T7331] team0: Port device dummy0 added [ 89.834425][ T7326] bond4 (unregistering): Released all slaves [ 89.845057][ T7336] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 89.856652][ T7328] SELinux: policydb version 0 does not match my version range 15-35 [ 89.865209][ T7328] SELinux: failed to load policy [ 89.910641][ T7336] bond1: (slave veth15): Enslaving as an active interface with a down link [ 89.932857][ T7343] loop5: detected capacity change from 0 to 512 [ 89.976551][ T7343] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 90.018781][ T7343] EXT4-fs (loop5): 1 truncate cleaned up [ 90.067277][ T7343] ipvlan0: entered promiscuous mode [ 90.153764][ T7355] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 90.190829][ T7359] xt_bpf: check failed: parse error [ 90.218718][ T7342] loop2: detected capacity change from 0 to 128 [ 90.222284][ T7362] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 90.255180][ T7362] SELinux: failed to load policy [ 90.291345][ T7342] vhci_hcd: invalid port number 96 [ 90.296593][ T7342] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 90.306582][ T7367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7367 comm=syz.3.1407 [ 90.364082][ T7367] loop3: detected capacity change from 0 to 4096 [ 90.380471][ T7367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.387146][ T7367] EXT4-fs: Ignoring removed i_version option [ 90.413776][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 90.413791][ T29] audit: type=1326 audit(1761583170.947:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.442716][ T7375] loop1: detected capacity change from 0 to 512 [ 90.443596][ T29] audit: type=1326 audit(1761583170.947:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.473197][ T29] audit: type=1326 audit(1761583170.947:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.473848][ T7367] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096) [ 90.496716][ T29] audit: type=1326 audit(1761583170.947:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.496742][ T29] audit: type=1326 audit(1761583170.947:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.551997][ T29] audit: type=1326 audit(1761583170.947:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.575443][ T29] audit: type=1326 audit(1761583170.947:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.598861][ T29] audit: type=1326 audit(1761583170.947:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.622181][ T29] audit: type=1326 audit(1761583170.947:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7370 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 90.648957][ T29] audit: type=1326 audit(1761583171.187:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 90.686233][ T7375] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.787117][ T7387] netlink: 'syz.5.1416': attribute type 1 has an invalid length. [ 90.819640][ T7391] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 90.829772][ T7391] SELinux: failed to load policy [ 90.843244][ T7393] loop5: detected capacity change from 0 to 512 [ 90.880305][ T7393] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.974320][ T7399] xt_bpf: check failed: parse error [ 90.981008][ T7399] loop2: detected capacity change from 0 to 128 [ 91.038534][ T7399] vhci_hcd: invalid port number 96 [ 91.043729][ T7399] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 91.062374][ T7410] loop5: detected capacity change from 0 to 128 [ 91.077391][ T7410] FAT-fs (loop5): Directory bread(block 162) failed [ 91.090642][ T7410] FAT-fs (loop5): Directory bread(block 163) failed [ 91.105662][ T7410] FAT-fs (loop5): Directory bread(block 164) failed [ 91.121149][ T7410] FAT-fs (loop5): Directory bread(block 165) failed [ 91.133700][ T7410] FAT-fs (loop5): Directory bread(block 166) failed [ 91.148306][ T7410] FAT-fs (loop5): Directory bread(block 167) failed [ 91.159202][ T7410] FAT-fs (loop5): Directory bread(block 168) failed [ 91.159201][ T7411] loop1: detected capacity change from 0 to 512 [ 91.167681][ T7410] FAT-fs (loop5): Directory bread(block 169) failed [ 91.200182][ T7411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.218353][ T7410] FAT-fs (loop5): Directory bread(block 162) failed [ 91.230622][ T7411] EXT4-fs (loop1): 1 truncate cleaned up [ 91.235365][ T7410] FAT-fs (loop5): Directory bread(block 163) failed [ 91.243522][ T7410] syz.5.1425: attempt to access beyond end of device [ 91.243522][ T7410] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 91.243647][ T7419] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 91.256788][ T7410] syz.5.1425: attempt to access beyond end of device [ 91.256788][ T7410] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 91.344282][ T7411] ipvlan0: entered promiscuous mode [ 91.358369][ T7419] __nla_validate_parse: 36 callbacks suppressed [ 91.358384][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 91.414965][ T7426] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 91.438432][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1433'. [ 91.453361][ T7426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.468183][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 91.481233][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 91.503501][ T7426] bond3 (unregistering): Released all slaves [ 91.604785][ T7434] loop2: detected capacity change from 0 to 256 [ 91.611957][ T7435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7435 comm=syz.0.1433 [ 91.634957][ T7435] netlink: 'syz.0.1433': attribute type 21 has an invalid length. [ 91.641505][ T7437] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 91.642942][ T7435] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1433'. [ 91.659573][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 91.672776][ T7434] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.682927][ T7434] FAT-fs (loop2): Filesystem has been set read-only [ 91.692410][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 91.705691][ T7437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.717539][ T7435] loop0: detected capacity change from 0 to 4096 [ 91.724360][ T7435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.730991][ T7435] EXT4-fs: Ignoring removed i_version option [ 91.738778][ T7435] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 91.770225][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 91.819271][ T7440] bond4 (unregistering): Released all slaves [ 91.832330][ T7442] loop2: detected capacity change from 0 to 512 [ 91.872119][ T7442] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.961888][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 91.974828][ T7455] loop1: detected capacity change from 0 to 512 [ 91.983536][ T7455] EXT4-fs: Ignoring removed nobh option [ 91.983693][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'. [ 92.004402][ T7455] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1441: iget: bad i_size value: 38620345925642 [ 92.019020][ T7455] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1441: couldn't read orphan inode 15 (err -117) [ 92.040965][ T7459] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 92.046841][ T7455] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1441: bg 0: block 5: invalid block bitmap [ 92.101534][ T7456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7456 comm=syz.3.1442 [ 92.117923][ T7465] loop1: detected capacity change from 0 to 128 [ 92.132609][ T7459] bond3: (slave veth25): Enslaving as an active interface with a down link [ 92.153670][ T7465] FAT-fs (loop1): Directory bread(block 162) failed [ 92.160331][ T7465] FAT-fs (loop1): Directory bread(block 163) failed [ 92.167103][ T7456] loop3: detected capacity change from 0 to 4096 [ 92.177163][ T7456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.183851][ T7456] EXT4-fs: Ignoring removed i_version option [ 92.190694][ T7465] FAT-fs (loop1): Directory bread(block 164) failed [ 92.197307][ T7465] FAT-fs (loop1): Directory bread(block 165) failed [ 92.204191][ T7465] FAT-fs (loop1): Directory bread(block 166) failed [ 92.210984][ T7465] FAT-fs (loop1): Directory bread(block 167) failed [ 92.217639][ T7465] FAT-fs (loop1): Directory bread(block 168) failed [ 92.219675][ T7456] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096) [ 92.224299][ T7465] FAT-fs (loop1): Directory bread(block 169) failed [ 92.243434][ T7465] FAT-fs (loop1): Directory bread(block 162) failed [ 92.255963][ T7465] FAT-fs (loop1): Directory bread(block 163) failed [ 92.278884][ T7465] syz.1.1445: attempt to access beyond end of device [ 92.278884][ T7465] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 92.294824][ T7465] syz.1.1445: attempt to access beyond end of device [ 92.294824][ T7465] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 92.356163][ T7478] loop0: detected capacity change from 0 to 512 [ 92.405514][ T7478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.422907][ T7478] EXT4-fs (loop0): 1 truncate cleaned up [ 92.458368][ T7478] ipvlan0: entered promiscuous mode [ 92.471887][ T7493] loop2: detected capacity change from 0 to 512 [ 92.492885][ T7494] siw: device registration error -23 [ 92.528206][ T7493] EXT4-fs: Ignoring removed nobh option [ 92.547834][ T7493] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1456: iget: bad i_size value: 38620345925642 [ 92.565233][ T7493] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1456: couldn't read orphan inode 15 (err -117) [ 92.581689][ T7493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1456: bg 0: block 5: invalid block bitmap [ 92.640062][ T7504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.658715][ T7502] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 92.674557][ T7502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.686618][ T7502] bond4 (unregistering): Released all slaves [ 92.724977][ T7504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.800411][ T7510] loop2: detected capacity change from 0 to 4096 [ 92.809153][ T7510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.815824][ T7510] EXT4-fs: Ignoring removed i_version option [ 92.824133][ T7510] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 92.837456][ T7504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.905833][ T7512] bond4: (slave veth27): Enslaving as an active interface with a down link [ 92.923954][ T7504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.000672][ T158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029160][ T158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059593][ T158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077977][ T158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.088524][ T7517] loop2: detected capacity change from 0 to 128 [ 93.124525][ T7517] FAT-fs (loop2): Directory bread(block 162) failed [ 93.137812][ T7517] FAT-fs (loop2): Directory bread(block 163) failed [ 93.146689][ T7517] FAT-fs (loop2): Directory bread(block 164) failed [ 93.155821][ T7521] xt_hashlimit: max too large, truncated to 1048576 [ 93.168096][ T7517] FAT-fs (loop2): Directory bread(block 165) failed [ 93.174922][ T7517] FAT-fs (loop2): Directory bread(block 166) failed [ 93.181781][ T7517] FAT-fs (loop2): Directory bread(block 167) failed [ 93.191051][ T7521] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.214739][ T7525] loop5: detected capacity change from 0 to 512 [ 93.224333][ T7525] EXT4-fs: Ignoring removed nobh option [ 93.238736][ T7517] FAT-fs (loop2): Directory bread(block 168) failed [ 93.246022][ T7517] FAT-fs (loop2): Directory bread(block 169) failed [ 93.258492][ T7527] SELinux: failed to load policy [ 93.266036][ T7517] FAT-fs (loop2): Directory bread(block 162) failed [ 93.272976][ T7517] FAT-fs (loop2): Directory bread(block 163) failed [ 93.278234][ T7525] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1468: iget: bad i_size value: 38620345925642 [ 93.292425][ T7525] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1468: couldn't read orphan inode 15 (err -117) [ 93.304735][ T7517] syz.2.1464: attempt to access beyond end of device [ 93.304735][ T7517] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 93.317992][ T7517] syz.2.1464: attempt to access beyond end of device [ 93.317992][ T7517] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 93.345124][ T7525] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1468: bg 0: block 5: invalid block bitmap [ 93.388189][ T7533] loop2: detected capacity change from 0 to 256 [ 93.407935][ T7533] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.418113][ T7533] FAT-fs (loop2): Filesystem has been set read-only [ 93.552239][ T7545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7545 comm=syz.5.1474 [ 93.625275][ T7545] loop5: detected capacity change from 0 to 4096 [ 93.649188][ T7545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.655963][ T7545] EXT4-fs: Ignoring removed i_version option [ 93.666428][ T7559] loop2: detected capacity change from 0 to 128 [ 93.683665][ T7559] FAT-fs (loop2): Directory bread(block 162) failed [ 93.690518][ T7559] FAT-fs (loop2): Directory bread(block 163) failed [ 93.697552][ T7559] FAT-fs (loop2): Directory bread(block 164) failed [ 93.704466][ T7559] FAT-fs (loop2): Directory bread(block 165) failed [ 93.711319][ T7559] FAT-fs (loop2): Directory bread(block 166) failed [ 93.718240][ T7559] FAT-fs (loop2): Directory bread(block 167) failed [ 93.726362][ T7559] FAT-fs (loop2): Directory bread(block 168) failed [ 93.733338][ T7559] FAT-fs (loop2): Directory bread(block 169) failed [ 93.740008][ T7560] infiniband syz!: set down [ 93.744577][ T7560] infiniband syz!: added team_slave_0 [ 93.751779][ T7559] FAT-fs (loop2): Directory bread(block 162) failed [ 93.760787][ T7559] FAT-fs (loop2): Directory bread(block 163) failed [ 93.768062][ T7560] RDS/IB: syz!: added [ 93.772364][ T7560] smc: adding ib device syz! with port count 1 [ 93.773877][ T7545] EXT4-fs (loop5): cluster size (1024) smaller than block size (4096) [ 93.778758][ T7560] smc: ib device syz! port 1 has no pnetid [ 93.793154][ T7559] syz.2.1482: attempt to access beyond end of device [ 93.793154][ T7559] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 93.807095][ T7559] syz.2.1482: attempt to access beyond end of device [ 93.807095][ T7559] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 93.943400][ T7568] loop0: detected capacity change from 0 to 512 [ 93.980985][ T7568] EXT4-fs: Ignoring removed nobh option [ 94.010469][ T7568] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1484: iget: bad i_size value: 38620345925642 [ 94.025527][ T7568] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1484: couldn't read orphan inode 15 (err -117) [ 94.040716][ T7575] loop5: detected capacity change from 0 to 256 [ 94.048843][ T7575] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 94.058982][ T7575] FAT-fs (loop5): Filesystem has been set read-only [ 94.068070][ T7568] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1484: bg 0: block 5: invalid block bitmap [ 94.135577][ T7577] loop0: detected capacity change from 0 to 4096 [ 94.142852][ T7577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.149465][ T7577] EXT4-fs: Ignoring removed i_version option [ 94.156677][ T7577] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 94.167850][ T7579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.182392][ T7579] bond5 (unregistering): Released all slaves [ 94.197576][ T7571] siw: device registration error -23 [ 94.269636][ T7584] loop0: detected capacity change from 0 to 512 [ 94.283941][ T7584] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.298315][ T7584] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.1491: corrupted inode contents [ 94.333802][ T7584] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.1491: mark_inode_dirty error [ 94.352508][ T7584] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.1491: corrupted inode contents [ 94.370635][ T7584] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1491: mark_inode_dirty error [ 94.403320][ T7602] loop2: detected capacity change from 0 to 1024 [ 94.411367][ T7602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.419734][ T7602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.505055][ T7609] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 94.531522][ T7609] bond4 (unregistering): Released all slaves [ 94.554501][ T7612] loop0: detected capacity change from 0 to 4096 [ 94.561174][ T7612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.567832][ T7612] EXT4-fs: Ignoring removed i_version option [ 94.579857][ T7612] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 94.594687][ T7616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.614040][ T7616] bond5 (unregistering): Released all slaves [ 94.646526][ T7619] SELinux: failed to load policy [ 94.664733][ T7621] loop2: detected capacity change from 0 to 128 [ 94.671978][ T7621] FAT-fs (loop2): Directory bread(block 162) failed [ 94.678655][ T7621] FAT-fs (loop2): Directory bread(block 163) failed [ 94.706459][ T7621] FAT-fs (loop2): Directory bread(block 164) failed [ 94.714320][ T7621] FAT-fs (loop2): Directory bread(block 165) failed [ 94.727650][ T7621] FAT-fs (loop2): Directory bread(block 166) failed [ 94.735085][ T7621] FAT-fs (loop2): Directory bread(block 167) failed [ 94.748736][ T7621] FAT-fs (loop2): Directory bread(block 168) failed [ 94.755563][ T7621] FAT-fs (loop2): Directory bread(block 169) failed [ 94.768215][ T7634] xt_hashlimit: max too large, truncated to 1048576 [ 94.768639][ T7621] FAT-fs (loop2): Directory bread(block 162) failed [ 94.776383][ T7634] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.782187][ T7621] FAT-fs (loop2): Directory bread(block 163) failed [ 94.799796][ T7621] syz.2.1505: attempt to access beyond end of device [ 94.799796][ T7621] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 94.813432][ T7621] syz.2.1505: attempt to access beyond end of device [ 94.813432][ T7621] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 94.877919][ T7643] validate_nla: 4 callbacks suppressed [ 94.877934][ T7643] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 94.915959][ T7646] netlink: 'syz.5.1516': attribute type 1 has an invalid length. [ 94.925437][ T7643] bond5: (slave veth29): Enslaving as an active interface with a down link [ 94.960390][ T7646] bond5: (slave veth19): Enslaving as an active interface with a down link [ 95.044657][ T7658] loop5: detected capacity change from 0 to 256 [ 95.064784][ T7658] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.074997][ T7658] FAT-fs (loop5): Filesystem has been set read-only [ 95.131395][ T7660] SELinux: failed to load policy [ 95.139763][ T7652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7652 comm=syz.2.1517 [ 95.169951][ T7652] netlink: 'syz.2.1517': attribute type 21 has an invalid length. [ 95.179968][ T7669] loop5: detected capacity change from 0 to 128 [ 95.196642][ T7652] loop2: detected capacity change from 0 to 4096 [ 95.208395][ T7652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.215083][ T7652] EXT4-fs: Ignoring removed i_version option [ 95.224403][ T7669] FAT-fs (loop5): Directory bread(block 162) failed [ 95.231635][ T7669] FAT-fs (loop5): Directory bread(block 163) failed [ 95.238436][ T7669] FAT-fs (loop5): Directory bread(block 164) failed [ 95.245979][ T7669] FAT-fs (loop5): Directory bread(block 165) failed [ 95.252990][ T7652] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 95.261887][ T7669] FAT-fs (loop5): Directory bread(block 166) failed [ 95.268523][ T7669] FAT-fs (loop5): Directory bread(block 167) failed [ 95.275473][ T7669] FAT-fs (loop5): Directory bread(block 168) failed [ 95.296223][ T7669] FAT-fs (loop5): Directory bread(block 169) failed [ 95.303845][ T7675] FAULT_INJECTION: forcing a failure. [ 95.303845][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 95.316520][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.3.1526 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.316547][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.316577][ T7675] Call Trace: [ 95.316583][ T7675] [ 95.316590][ T7675] __dump_stack+0x1d/0x30 [ 95.316617][ T7675] dump_stack_lvl+0xe8/0x140 [ 95.316635][ T7675] dump_stack+0x15/0x1b [ 95.316649][ T7675] should_fail_ex+0x265/0x280 [ 95.316675][ T7675] should_failslab+0x8c/0xb0 [ 95.316698][ T7675] kmem_cache_alloc_noprof+0x50/0x480 [ 95.316721][ T7675] ? ep_ptable_queue_proc+0x4d/0x150 [ 95.316840][ T7675] ep_ptable_queue_proc+0x4d/0x150 [ 95.316855][ T7675] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 95.316873][ T7675] rds_poll+0x6c/0x310 [ 95.316891][ T7675] ? __pfx_rds_poll+0x10/0x10 [ 95.316936][ T7675] sock_poll+0x20d/0x230 [ 95.316956][ T7675] ? __pfx_sock_poll+0x10/0x10 [ 95.316974][ T7675] ep_insert+0x9a4/0xdb0 [ 95.316998][ T7675] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 95.317019][ T7675] do_epoll_ctl+0x686/0x8a0 [ 95.317045][ T7675] __x64_sys_epoll_ctl+0xcb/0x100 [ 95.317069][ T7675] x64_sys_call+0x706/0x3000 [ 95.317158][ T7675] do_syscall_64+0xd2/0x200 [ 95.317174][ T7675] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.317208][ T7675] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.317284][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.317302][ T7675] RIP: 0033:0x7f9dfb93efc9 [ 95.317372][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.317387][ T7675] RSP: 002b:00007f9dfa3a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 95.317405][ T7675] RAX: ffffffffffffffda RBX: 00007f9dfbb95fa0 RCX: 00007f9dfb93efc9 [ 95.317416][ T7675] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 95.317427][ T7675] RBP: 00007f9dfa3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.317469][ T7675] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 95.317479][ T7675] R13: 00007f9dfbb96038 R14: 00007f9dfbb95fa0 R15: 00007ffd59de8cf8 [ 95.317494][ T7675] [ 95.553080][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 95.553096][ T29] audit: type=1326 audit(1761583176.087:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.582988][ T29] audit: type=1326 audit(1761583176.087:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.588320][ T7669] FAT-fs (loop5): Directory bread(block 162) failed [ 95.606386][ T29] audit: type=1326 audit(1761583176.087:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.636491][ T29] audit: type=1326 audit(1761583176.087:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.644147][ T7669] FAT-fs (loop5): Directory bread(block 163) failed [ 95.659959][ T29] audit: type=1326 audit(1761583176.087:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.690086][ T29] audit: type=1326 audit(1761583176.087:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.713902][ T29] audit: type=1326 audit(1761583176.087:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.737387][ T29] audit: type=1326 audit(1761583176.087:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.760919][ T29] audit: type=1326 audit(1761583176.087:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.784395][ T29] audit: type=1326 audit(1761583176.087:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 95.826564][ T7683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7683 comm=syz.2.1529 [ 95.846726][ T7691] netlink: 'syz.5.1531': attribute type 1 has an invalid length. [ 95.863764][ T7683] loop2: detected capacity change from 0 to 4096 [ 95.871687][ T7691] bond6: (slave veth21): Enslaving as an active interface with a down link [ 95.872483][ T7683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.887207][ T7683] EXT4-fs: Ignoring removed i_version option [ 95.896340][ T7683] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 95.982880][ T7700] loop2: detected capacity change from 0 to 4096 [ 95.989866][ T7700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.996656][ T7700] EXT4-fs: Ignoring removed i_version option [ 96.004590][ T7700] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 96.081775][ T7704] loop0: detected capacity change from 0 to 512 [ 96.099578][ T7704] EXT4-fs: Ignoring removed nobh option [ 96.120361][ T7704] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1537: iget: bad i_size value: 38620345925642 [ 96.148443][ T7704] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1537: couldn't read orphan inode 15 (err -117) [ 96.161308][ T7710] netlink: 'syz.2.1536': attribute type 21 has an invalid length. [ 96.176502][ T7704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1537: bg 0: block 5: invalid block bitmap [ 96.251750][ T7716] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 96.268186][ T7716] SELinux: failed to load policy [ 96.294283][ T7712] SELinux: failed to load policy [ 96.306605][ T7722] FAULT_INJECTION: forcing a failure. [ 96.306605][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 96.319256][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.2.1544 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.319281][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.319293][ T7722] Call Trace: [ 96.319299][ T7722] [ 96.319306][ T7722] __dump_stack+0x1d/0x30 [ 96.319325][ T7722] dump_stack_lvl+0xe8/0x140 [ 96.319341][ T7722] dump_stack+0x15/0x1b [ 96.319354][ T7722] should_fail_ex+0x265/0x280 [ 96.319370][ T7722] should_failslab+0x8c/0xb0 [ 96.319394][ T7722] kmem_cache_alloc_noprof+0x50/0x480 [ 96.319416][ T7722] ? alloc_empty_file+0x76/0x200 [ 96.319440][ T7722] alloc_empty_file+0x76/0x200 [ 96.319466][ T7722] alloc_file_pseudo+0xc6/0x160 [ 96.319483][ T7722] __shmem_file_setup+0x1de/0x210 [ 96.319499][ T7722] shmem_zero_setup+0x63/0xd0 [ 96.319521][ T7722] mmap_region+0xf54/0x1620 [ 96.319559][ T7722] do_mmap+0x9b3/0xbe0 [ 96.319577][ T7722] vm_mmap_pgoff+0x17a/0x2e0 [ 96.319604][ T7722] ksys_mmap_pgoff+0xc2/0x310 [ 96.319620][ T7722] ? __x64_sys_mmap+0x49/0x70 [ 96.319640][ T7722] x64_sys_call+0x14a3/0x3000 [ 96.319657][ T7722] do_syscall_64+0xd2/0x200 [ 96.319672][ T7722] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.319694][ T7722] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.319718][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.319737][ T7722] RIP: 0033:0x7f25e88cefc9 [ 96.319751][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.319767][ T7722] RSP: 002b:00007f25e732f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 96.319785][ T7722] RAX: ffffffffffffffda RBX: 00007f25e8b25fa0 RCX: 00007f25e88cefc9 [ 96.319797][ T7722] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 96.319809][ T7722] RBP: 00007f25e732f090 R08: ffffffffffffffff R09: 000000005dd93000 [ 96.319821][ T7722] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 96.319833][ T7722] R13: 00007f25e8b26038 R14: 00007f25e8b25fa0 R15: 00007ffd64126098 [ 96.319850][ T7722] [ 96.322214][ T7720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7720 comm=syz.3.1543 [ 96.459957][ T7734] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 96.489258][ T7735] loop3: detected capacity change from 0 to 4096 [ 96.562039][ T7736] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 96.564326][ T7741] __nla_validate_parse: 32 callbacks suppressed [ 96.564367][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 96.575187][ T7734] 8021q: adding VLAN 0 to HW filter on device bond6 [ 96.579426][ T7735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.587153][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 96.591610][ T7735] EXT4-fs: Ignoring removed i_version option [ 96.600016][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 96.621797][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 96.634159][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'. [ 96.643805][ T7735] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096) [ 96.672284][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'. [ 96.688894][ T7729] bond6 (unregistering): Released all slaves [ 96.715701][ T7746] loop3: detected capacity change from 0 to 256 [ 96.733805][ T7746] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.744028][ T7746] FAT-fs (loop3): Filesystem has been set read-only [ 96.804305][ T7753] binfmt_misc: register: failed to install interpreter file ./file0 [ 96.860996][ T7761] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 96.894364][ T7759] pim6reg1: entered promiscuous mode [ 96.895839][ T7764] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 96.899704][ T7759] pim6reg1: entered allmulticast mode [ 96.932479][ T7761] bond4: (slave veth27): Enslaving as an active interface with a down link [ 96.973981][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'. [ 97.000221][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 97.026065][ T7761] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1560'. [ 97.038122][ T7770] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7770 comm=syz.2.1565 [ 97.052831][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 97.137528][ T7770] loop2: detected capacity change from 0 to 4096 [ 97.146972][ T7770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.153674][ T7770] EXT4-fs: Ignoring removed i_version option [ 97.167580][ T7770] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 97.177495][ T7781] loop3: detected capacity change from 0 to 256 [ 97.191023][ T7781] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.201155][ T7781] FAT-fs (loop3): Filesystem has been set read-only [ 97.252537][ T7787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.257088][ T7785] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 97.294772][ T7785] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.318302][ T7785] bond6 (unregistering): Released all slaves [ 97.422028][ T7787] loop3: detected capacity change from 0 to 1024 [ 97.433750][ T7799] loop0: detected capacity change from 0 to 512 [ 97.440270][ T7799] EXT4-fs: Ignoring removed nobh option [ 97.447826][ T7799] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1576: iget: bad i_size value: 38620345925642 [ 97.447991][ T7787] EXT4-fs mount: 37 callbacks suppressed [ 97.448037][ T7787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.481651][ T7799] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1576: couldn't read orphan inode 15 (err -117) [ 97.497801][ T7799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.514316][ T7799] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1576: bg 0: block 5: invalid block bitmap [ 97.537156][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.545432][ T3320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 97.562365][ T3320] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 97.605646][ T7803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.716504][ T7809] xt_hashlimit: max too large, truncated to 1048576 [ 97.723762][ T7809] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.873274][ T134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.912997][ T134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.930099][ T7816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 97.942100][ T7816] bond6 (unregistering): Released all slaves [ 97.963379][ T134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.005109][ T7819] lo speed is unknown, defaulting to 1000 [ 98.073117][ T134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.087832][ T7833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7833 comm=syz.2.1587 [ 98.100472][ T7833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7833 comm=syz.2.1587 [ 98.138557][ T7833] lo speed is unknown, defaulting to 1000 [ 98.150950][ T7819] chnl_net:caif_netlink_parms(): no params data found [ 98.256662][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.264058][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.288432][ T7819] bridge_slave_0: entered allmulticast mode [ 98.322682][ T7819] bridge_slave_0: entered promiscuous mode [ 98.373642][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.380843][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.391515][ T7819] bridge_slave_1: entered allmulticast mode [ 98.398564][ T7819] bridge_slave_1: entered promiscuous mode [ 98.409392][ T134] bridge_slave_1: left allmulticast mode [ 98.415104][ T134] bridge_slave_1: left promiscuous mode [ 98.420930][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.440010][ T134] bridge_slave_0: left allmulticast mode [ 98.445775][ T134] bridge_slave_0: left promiscuous mode [ 98.451525][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.563626][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.574248][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.584285][ T134] bond0 (unregistering): Released all slaves [ 98.599361][ T134] bond1 (unregistering): (slave veth5): Releasing active interface [ 98.610414][ T134] bond1 (unregistering): Released all slaves [ 98.619124][ T134] bond2 (unregistering): (slave veth9): Releasing active interface [ 98.628093][ T134] bond2 (unregistering): Released all slaves [ 98.636620][ T134] bond3 (unregistering): (slave veth19): Releasing active interface [ 98.645833][ T134] bond3 (unregistering): Released all slaves [ 98.654597][ T134] bond4 (unregistering): (slave veth27): Releasing active interface [ 98.663553][ T134] bond4 (unregistering): Released all slaves [ 98.680265][ T9] syû: Port: 1 Link DOWN [ 98.743374][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.756153][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.825203][ T7819] team0: Port device team_slave_0 added [ 98.836955][ T7819] team0: Port device team_slave_1 added [ 98.843751][ T134] hsr_slave_0: left promiscuous mode [ 98.849450][ T134] hsr_slave_1: left promiscuous mode [ 98.855938][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.863592][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.881945][ T134] veth1_macvtap: left promiscuous mode [ 98.887540][ T134] veth0_macvtap: left promiscuous mode [ 98.945798][ T134] team0 (unregistering): Port device team_slave_1 removed [ 98.956005][ T134] team0 (unregistering): Port device team_slave_0 removed [ 98.964392][ T31] smc: removing ib device syz! [ 98.969381][ T52] smc: removing ib device syû [ 99.034154][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.041207][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.067218][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.101537][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.108516][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.134465][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.176611][ T7819] hsr_slave_0: entered promiscuous mode [ 99.191041][ T7819] hsr_slave_1: entered promiscuous mode [ 99.210986][ T7819] debugfs: 'hsr0' already exists in 'hsr' [ 99.216744][ T7819] Cannot create hsr debugfs directory [ 99.349603][ T7819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.360362][ T7819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.372378][ T7819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.401960][ T7819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.440478][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.472188][ T7819] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.481458][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.488537][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.499417][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.506489][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.568283][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.657219][ T7819] veth0_vlan: entered promiscuous mode [ 99.664833][ T7819] veth1_vlan: entered promiscuous mode [ 99.678688][ T7819] veth0_macvtap: entered promiscuous mode [ 99.686480][ T7819] veth1_macvtap: entered promiscuous mode [ 99.697006][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.707297][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.718081][ T134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.727176][ T134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.736514][ T134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.746800][ T134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.187830][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 139.187845][ T29] audit: type=1400 audit(1761583219.727:8165): avc: denied { read write } for pid=8022 comm="syz.0.1598" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.188512][ T8029] pim6reg1: entered promiscuous mode [ 139.194097][ T29] audit: type=1400 audit(1761583219.727:8166): avc: denied { open } for pid=8022 comm="syz.0.1598" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.217254][ T8029] pim6reg1: entered allmulticast mode [ 139.232107][ T8031] loop5: detected capacity change from 0 to 164 [ 139.306400][ T8031] bio_check_eod: 2 callbacks suppressed [ 139.306415][ T8031] syz.5.1602: attempt to access beyond end of device [ 139.306415][ T8031] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 139.313145][ T29] audit: type=1326 audit(1761583219.847:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.6.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78e8efc9 code=0x7ffc0000 [ 139.349486][ T29] audit: type=1326 audit(1761583219.847:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.6.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78e8efc9 code=0x7ffc0000 [ 139.384922][ T8032] loop2: detected capacity change from 0 to 2048 [ 139.402918][ T8048] validate_nla: 4 callbacks suppressed [ 139.402930][ T8048] netlink: 'syz.0.1603': attribute type 21 has an invalid length. [ 139.417119][ T29] audit: type=1326 audit(1761583219.917:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 139.420638][ T8031] syz.5.1602: attempt to access beyond end of device [ 139.420638][ T8031] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 139.440670][ T29] audit: type=1326 audit(1761583219.917:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 139.470648][ T8048] __nla_validate_parse: 15 callbacks suppressed [ 139.470663][ T8048] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1603'. [ 139.477566][ T29] audit: type=1326 audit(1761583219.917:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 139.483726][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 139.492911][ T29] audit: type=1326 audit(1761583219.917:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 139.548333][ T29] audit: type=1326 audit(1761583219.917:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 139.571848][ T29] audit: type=1326 audit(1761583219.917:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 139.657134][ T8040] loop2: p2 p3 p7 [ 139.675874][ T8032] loop2: p2 p3 p7 [ 139.747740][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 139.752897][ T8041] udevd[8041]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 139.758024][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 139.777466][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 139.844809][ T8062] loop0: detected capacity change from 0 to 164 [ 139.856900][ T8062] syz.0.1611: attempt to access beyond end of device [ 139.856900][ T8062] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 139.871038][ T8062] syz.0.1611: attempt to access beyond end of device [ 139.871038][ T8062] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 139.911850][ T8065] loop0: detected capacity change from 0 to 2048 [ 139.944673][ T8040] loop0: p2 p3 p7 [ 139.956950][ T8065] loop0: p2 p3 p7 [ 140.014416][ T8041] udevd[8041]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 140.025434][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 140.035527][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 140.046455][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 140.057326][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 140.057696][ T8067] xt_bpf: check failed: parse error [ 140.075688][ T8067] loop2: detected capacity change from 0 to 128 [ 140.091874][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 140.132440][ T8067] vhci_hcd: invalid port number 96 [ 140.137575][ T8067] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 140.177927][ T8076] loop0: detected capacity change from 0 to 512 [ 140.199689][ T8076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.215513][ T8076] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.273524][ T8081] loop2: detected capacity change from 0 to 2048 [ 140.282815][ T8083] loop1: detected capacity change from 0 to 512 [ 140.293166][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.303892][ T8083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.316576][ T8083] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.334057][ T8081] loop2: p2 p3 p7 [ 140.381740][ T8091] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 140.385824][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 140.393958][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 140.400360][ T8041] udevd[8041]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 140.433253][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.459539][ T8094] netlink: 660 bytes leftover after parsing attributes in process `syz.1.1623'. [ 140.469962][ T8091] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1622'. [ 140.503331][ T8094] infiniband syû: set down [ 140.507780][ T8094] infiniband syû: added bond_slave_0 [ 140.508237][ T8097] xt_hashlimit: max too large, truncated to 1048576 [ 140.521435][ T8097] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.530520][ T8094] RDS/IB: syû: added [ 140.555559][ T8094] smc: adding ib device syû with port count 1 [ 140.565490][ T8094] smc: ib device syû port 1 has no pnetid [ 140.572840][ T8105] loop5: detected capacity change from 0 to 512 [ 140.591624][ T8104] loop2: detected capacity change from 0 to 164 [ 140.599886][ T8104] syz.2.1625: attempt to access beyond end of device [ 140.599886][ T8104] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.623583][ T8104] syz.2.1625: attempt to access beyond end of device [ 140.623583][ T8104] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.625402][ T8105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.650455][ T8105] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.702068][ T8111] loop6: detected capacity change from 0 to 512 [ 140.711395][ T8113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8113 comm=syz.2.1629 [ 140.749960][ T8111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.780528][ T8113] loop2: detected capacity change from 0 to 4096 [ 140.791685][ T8111] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.811762][ T8113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.818436][ T8113] EXT4-fs: Ignoring removed i_version option [ 140.821182][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.862803][ T8113] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 140.937865][ T7819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.947407][ T8124] loop5: detected capacity change from 0 to 2048 [ 140.971188][ T8128] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 140.990324][ T8128] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.002643][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 141.008067][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 141.028351][ T8124] loop5: p2 p3 p7 [ 141.098791][ T8139] bond6 (unregistering): Released all slaves [ 141.111311][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 141.132246][ T8135] loop2: detected capacity change from 0 to 2048 [ 141.144948][ T8141] netlink: 'syz.5.1640': attribute type 1 has an invalid length. [ 141.158135][ T8141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 141.187000][ T8135] loop2: p2 p3 p7 [ 141.194289][ T8141] bond8 (unregistering): Released all slaves [ 141.220429][ T3004] loop2: p2 p3 p7 [ 141.359669][ T8159] loop0: detected capacity change from 0 to 512 [ 141.369245][ T8158] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 141.382829][ T8159] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.458294][ T8163] netlink: 'syz.5.1650': attribute type 1 has an invalid length. [ 141.469794][ T8159] EXT4-fs (loop0): 1 truncate cleaned up [ 141.484895][ T8159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.512504][ T8159] ipvlan0: entered promiscuous mode [ 141.629049][ T8176] netlink: 'syz.2.1654': attribute type 1 has an invalid length. [ 141.651365][ T8176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.665363][ T8176] bond6 (unregistering): Released all slaves [ 141.795147][ T8189] loop2: detected capacity change from 0 to 164 [ 141.828433][ T8190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8190 comm=syz.5.1655 [ 141.841428][ T8189] syz.2.1659: attempt to access beyond end of device [ 141.841428][ T8189] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 141.865095][ T8189] syz.2.1659: attempt to access beyond end of device [ 141.865095][ T8189] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 141.893100][ T8190] netlink: 'syz.5.1655': attribute type 21 has an invalid length. [ 141.928386][ T8190] loop5: detected capacity change from 0 to 4096 [ 141.935206][ T8190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.941934][ T8190] EXT4-fs: Ignoring removed i_version option [ 141.975623][ T8190] EXT4-fs (loop5): cluster size (1024) smaller than block size (4096) [ 141.991441][ T8197] netlink: 'syz.6.1662': attribute type 1 has an invalid length. [ 142.017058][ T8197] vlan0: entered allmulticast mode [ 142.022294][ T8197] veth0_vlan: entered allmulticast mode [ 142.073019][ T8201] siw: device registration error -23 [ 142.156777][ T8208] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 142.176973][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.184423][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.195267][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.220396][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.227840][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.253123][ T8215] loop5: detected capacity change from 0 to 2048 [ 142.254424][ T8217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8217 comm=syz.0.1678 [ 142.285221][ T8217] loop0: detected capacity change from 0 to 4096 [ 142.294315][ T8217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.296287][ T8215] loop5: p2 p3 p7 [ 142.300978][ T8217] EXT4-fs: Ignoring removed i_version option [ 142.312486][ T8217] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 142.458080][ T8231] loop1: detected capacity change from 0 to 512 [ 142.492722][ T8231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.518365][ T8231] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.534707][ T8241] loop5: detected capacity change from 0 to 512 [ 142.566039][ T8241] ------------[ cut here ]------------ [ 142.571552][ T8241] EA inode 11 i_nlink=2 [ 142.571833][ T8241] WARNING: CPU: 1 PID: 8241 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 142.586112][ T8241] Modules linked in: [ 142.590035][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.5.1681 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.599775][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.609948][ T8241] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 142.612941][ T8243] loop2: detected capacity change from 0 to 512 [ 142.616638][ T8241] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 a5 c8 55 86 4c 89 ee e8 87 fb 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 c9 b5 03 0f 1f 84 00 00 00 00 00 [ 142.642545][ T8241] RSP: 0018:ffffc90003a635a0 EFLAGS: 00010246 [ 142.648618][ T8241] RAX: 62810b332d339400 RBX: ffff8881004901a8 RCX: 0000000000080000 [ 142.656619][ T8241] RDX: ffffc9000fca8000 RSI: 0000000000003ffc RDI: 0000000000003ffd [ 142.664683][ T8241] RBP: 0000000000000002 R08: 0001c90003a63427 R09: 0000000000000000 [ 142.672721][ T8241] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888100490158 [ 142.680741][ T8241] R13: 000000000000000b R14: ffff888100490110 R15: 0000000000000001 [ 142.688761][ T8241] FS: 00007fdaadda76c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 142.697733][ T8241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.704336][ T8241] CR2: 000020000000c000 CR3: 0000000138f6a000 CR4: 00000000003506f0 [ 142.712344][ T8241] Call Trace: [ 142.715627][ T8241] [ 142.718558][ T8241] ext4_xattr_set_entry+0x77f/0x1020 [ 142.723995][ T8241] ext4_xattr_ibody_set+0x184/0x3c0 [ 142.729270][ T8243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.739393][ T8241] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 142.745313][ T8241] __ext4_expand_extra_isize+0x246/0x280 [ 142.751110][ T8241] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 142.756618][ T8241] ext4_evict_inode+0x80e/0xd90 [ 142.761530][ T8241] ? __pfx_ext4_evict_inode+0x10/0x10 [ 142.766919][ T8241] evict+0x2e3/0x550 [ 142.770892][ T8241] ? __dquot_initialize+0x146/0x7c0 [ 142.776099][ T8241] iput+0x4ed/0x650 [ 142.779996][ T8241] ext4_process_orphan+0x1a9/0x1c0 [ 142.785164][ T8241] ext4_orphan_cleanup+0x6a8/0xa00 [ 142.790322][ T8241] ext4_fill_super+0x3483/0x3810 [ 142.795414][ T8241] ? snprintf+0x86/0xb0 [ 142.799577][ T8241] ? set_blocksize+0x1a8/0x310 [ 142.804384][ T8241] ? sb_set_blocksize+0xe3/0x100 [ 142.809356][ T8241] ? setup_bdev_super+0x30e/0x370 [ 142.810903][ T8249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8249 comm=syz.0.1682 [ 142.814411][ T8241] ? __pfx_ext4_fill_super+0x10/0x10 [ 142.832314][ T8241] get_tree_bdev_flags+0x291/0x300 [ 142.837438][ T8241] ? __pfx_ext4_fill_super+0x10/0x10 [ 142.842779][ T8241] get_tree_bdev+0x1f/0x30 [ 142.847286][ T8241] ext4_get_tree+0x1c/0x30 [ 142.851757][ T8241] vfs_get_tree+0x57/0x1d0 [ 142.856173][ T8241] do_new_mount+0x24d/0x660 [ 142.860725][ T8241] path_mount+0x4a5/0xb70 [ 142.865063][ T8241] ? user_path_at+0x109/0x130 [ 142.869816][ T8241] __se_sys_mount+0x28c/0x2e0 [ 142.874537][ T8241] __x64_sys_mount+0x67/0x80 [ 142.879141][ T8241] x64_sys_call+0x2b51/0x3000 [ 142.883933][ T8241] do_syscall_64+0xd2/0x200 [ 142.888510][ T8241] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.894614][ T8241] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.900381][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.906324][ T8241] RIP: 0033:0x7fdaaf34076a [ 142.910771][ T8241] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.930481][ T8241] RSP: 002b:00007fdaadda6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.932061][ T8243] EXT4-fs (loop2): 1 truncate cleaned up [ 142.938964][ T8241] RAX: ffffffffffffffda RBX: 00007fdaadda6ef0 RCX: 00007fdaaf34076a [ 142.952593][ T8241] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fdaadda6eb0 [ 142.960616][ T8241] RBP: 0000200000000180 R08: 00007fdaadda6ef0 R09: 0000000000800718 [ 142.968587][ T8241] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 142.976677][ T8241] R13: 00007fdaadda6eb0 R14: 000000000000046f R15: 0000200000000200 [ 142.984768][ T8241] [ 142.987776][ T8241] ---[ end trace 0000000000000000 ]--- [ 143.000990][ T8243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.045648][ T8249] loop0: detected capacity change from 0 to 4096 [ 143.054743][ T8249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.061384][ T8249] EXT4-fs: Ignoring removed i_version option [ 143.071064][ T8243] ipvlan0: entered promiscuous mode [ 143.082365][ T8241] EXT4-fs (loop5): 1 orphan inode deleted [ 143.088510][ T8241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.091435][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.118483][ T8249] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 143.211855][ T8254] loop1: detected capacity change from 0 to 164 [ 143.221767][ T8254] syz.1.1683: attempt to access beyond end of device [ 143.221767][ T8254] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 143.235909][ T8254] syz.1.1683: attempt to access beyond end of device [ 143.235909][ T8254] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.249785][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.366755][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.383914][ T8260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8260 comm=syz.6.1686 [ 143.427828][ T8268] loop0: detected capacity change from 0 to 164 [ 143.458128][ T8260] loop6: detected capacity change from 0 to 4096 [ 143.469019][ T8260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.475683][ T8260] EXT4-fs: Ignoring removed i_version option [ 143.484206][ T8260] EXT4-fs (loop6): cluster size (1024) smaller than block size (4096) [ 143.576253][ T8270] 8021q: adding VLAN 0 to HW filter on device bond8 [ 143.587287][ T8280] siw: device registration error -23 [ 143.637380][ T8270] bond8 (unregistering): Released all slaves [ 143.671957][ T8272] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8272 comm=syz.2.1693 [ 143.752469][ T8272] loop2: detected capacity change from 0 to 4096 [ 143.760240][ T8272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.766898][ T8272] EXT4-fs: Ignoring removed i_version option [ 143.784015][ T8296] loop5: detected capacity change from 0 to 512 [ 143.799750][ T8296] EXT4-fs: Ignoring removed nobh option [ 143.818818][ T8272] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 143.828465][ T8296] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1701: iget: bad i_size value: 38620345925642 [ 143.829152][ T8291] xt_bpf: check failed: parse error [ 143.843049][ T8296] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1701: couldn't read orphan inode 15 (err -117) [ 143.858933][ T8296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.871563][ T8291] loop0: detected capacity change from 0 to 128 [ 143.917976][ T8296] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1701: bg 0: block 5: invalid block bitmap [ 143.931916][ T8291] vhci_hcd: invalid port number 96 [ 143.937051][ T8291] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 143.968734][ T8303] loop1: detected capacity change from 0 to 2048 [ 143.969500][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.024351][ T8307] loop5: detected capacity change from 0 to 164 [ 144.042180][ T8309] loop6: detected capacity change from 0 to 2048 [ 144.052170][ T8040] loop1: p2 p3 p7 [ 144.071711][ T8303] loop1: p2 p3 p7 [ 144.115670][ T8138] loop6: p2 p3 p7 [ 144.146606][ T8309] loop6: p2 p3 p7 [ 144.241258][ T8328] team0: Port device team_slave_1 removed [ 144.323548][ T8334] loop6: detected capacity change from 0 to 512 [ 144.339560][ T8334] EXT4-fs: Ignoring removed nobh option [ 144.382930][ T8334] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1717: iget: bad i_size value: 38620345925642 [ 144.433555][ T8334] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1717: couldn't read orphan inode 15 (err -117) [ 144.493882][ T8334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.515003][ T8334] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1717: bg 0: block 5: invalid block bitmap [ 144.541320][ T7819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.606673][ T8340] xt_bpf: check failed: parse error [ 144.613120][ T8340] loop2: detected capacity change from 0 to 128 [ 144.651339][ T8340] vhci_hcd: invalid port number 96 [ 144.656478][ T8340] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 144.671296][ T8349] 9p: Unknown access argument 00000000000000000000ýÿ•: -22 [ 144.723228][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 144.723243][ T29] audit: type=1400 audit(1761583225.267:8651): avc: denied { write } for pid=8348 comm="syz.6.1722" name="arp" dev="proc" ino=4026533451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.754992][ T8352] loop6: detected capacity change from 0 to 128 [ 144.764708][ T8354] __nla_validate_parse: 51 callbacks suppressed [ 144.764723][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1724'. [ 144.784503][ T8354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8354 comm=syz.2.1724 [ 144.793573][ T29] audit: type=1400 audit(1761583225.327:8652): avc: denied { create } for pid=8348 comm="syz.6.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.814291][ T8354] loop2: detected capacity change from 0 to 4096 [ 144.817479][ T29] audit: type=1400 audit(1761583225.357:8653): avc: denied { write } for pid=8348 comm="syz.6.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.823524][ T8354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.849135][ T8354] EXT4-fs: Ignoring removed i_version option [ 144.858203][ T8354] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096) [ 144.900075][ T8357] loop2: detected capacity change from 0 to 2048 [ 144.935384][ T8040] loop2: p2 p3 p7 [ 144.947223][ T8357] loop2: p2 p3 p7 [ 145.024124][ T8321] udevd[8321]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 145.024208][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 145.037827][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 145.059155][ T8368] loop6: detected capacity change from 0 to 512 [ 145.066104][ T8368] EXT4-fs: Ignoring removed nobh option [ 145.077004][ T8368] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1730: iget: bad i_size value: 38620345925642 [ 145.090361][ T8368] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1730: couldn't read orphan inode 15 (err -117) [ 145.103326][ T8368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.123654][ T8368] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1730: bg 0: block 5: invalid block bitmap [ 145.140398][ T29] audit: type=1326 audit(1761583225.677:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.163872][ T29] audit: type=1326 audit(1761583225.677:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.187315][ T29] audit: type=1326 audit(1761583225.677:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.210746][ T29] audit: type=1326 audit(1761583225.677:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.224679][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 145.236014][ T29] audit: type=1326 audit(1761583225.677:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.266471][ T29] audit: type=1326 audit(1761583225.677:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.290617][ T29] audit: type=1326 audit(1761583225.677:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a2feefc9 code=0x7ffc0000 [ 145.315922][ T7819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.348192][ T8373] validate_nla: 5 callbacks suppressed [ 145.348206][ T8373] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 145.351071][ T8375] xt_hashlimit: max too large, truncated to 1048576 [ 145.375512][ T8375] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.399430][ T8373] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.409072][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 145.452440][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 145.460132][ T8378] netlink: 'syz.5.1734': attribute type 1 has an invalid length. [ 145.475367][ T8373] bond6 (unregistering): Released all slaves [ 145.484605][ T8389] 9p: Unknown access argument 00000000000000000000ýÿ•: -22 [ 145.494157][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1734'. [ 145.503910][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1734'. [ 145.527495][ T8391] netlink: 'syz.6.1740': attribute type 1 has an invalid length. [ 145.548010][ T8396] loop0: detected capacity change from 0 to 128 [ 145.558223][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1740'. [ 145.577393][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1740'. [ 145.607212][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 145.640331][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 145.672118][ T8405] netlink: 'syz.5.1742': attribute type 21 has an invalid length. [ 146.493372][ T8427] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 146.505513][ T8427] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.516804][ T8427] bond4 (unregistering): Released all slaves [ 146.539916][ T8430] loop6: detected capacity change from 0 to 164 [ 146.551090][ T8430] syz.6.1754: attempt to access beyond end of device [ 146.551090][ T8430] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.565335][ T8430] syz.6.1754: attempt to access beyond end of device [ 146.565335][ T8430] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.597092][ T8432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8432 comm=syz.6.1755 [ 146.645383][ T8432] loop6: detected capacity change from 0 to 4096 [ 146.660476][ T8434] loop5: detected capacity change from 0 to 2048 [ 146.661621][ T8438] netlink: 'syz.1.1756': attribute type 12 has an invalid length. [ 146.667544][ T8432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.681489][ T8432] EXT4-fs: Ignoring removed i_version option [ 146.688206][ T8432] EXT4-fs (loop6): cluster size (1024) smaller than block size (4096) [ 146.734430][ T8138] loop5: p2 p3 p7 [ 146.744038][ T8441] siw: device registration error -23 [ 146.749300][ T8434] loop5: p2 p3 p7 [ 146.767466][ T8444] netlink: 'syz.0.1757': attribute type 21 has an invalid length. [ 146.814993][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 146.826057][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 146.837333][ T8138] udevd[8138]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 146.848729][ T8450] loop1: detected capacity change from 0 to 512 [ 146.867195][ T8138] udevd[8138]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 146.878378][ T8321] udevd[8321]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 146.889264][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 146.903035][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.929837][ T8450] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.019037][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.039755][ T8467] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 147.049118][ T8467] @: renamed from vlan0 (while UP) [ 147.143811][ T8485] loop2: detected capacity change from 0 to 512 [ 147.150662][ T8485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.165713][ T8485] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm wÞ££‘: invalid indirect mapped block 4294967295 (level 0) [ 147.184428][ T8488] veth0_to_team: entered promiscuous mode [ 147.191133][ T8485] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm wÞ££‘: invalid indirect mapped block 4294967295 (level 1) [ 147.205188][ T8485] EXT4-fs (loop2): 1 orphan inode deleted [ 147.210966][ T8485] EXT4-fs (loop2): 1 truncate cleaned up [ 147.217113][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.239024][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.355008][ T8490] netlink: 'syz.2.1776': attribute type 21 has an invalid length. [ 147.408977][ T8500] loop2: detected capacity change from 0 to 512 [ 147.436079][ T8502] netlink: 'syz.6.1781': attribute type 1 has an invalid length. [ 147.445978][ T8500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.458620][ T8500] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.522025][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.581960][ T8513] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 147.710171][ T8520] netlink: 'syz.2.1787': attribute type 21 has an invalid length. [ 147.864280][ T8530] loop0: detected capacity change from 0 to 2048 [ 147.914143][ T8040] loop0: p2 p3 p7 [ 147.925115][ T8530] loop0: p2 p3 p7 [ 148.000999][ T8138] udevd[8138]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 148.084451][ T8545] loop1: detected capacity change from 0 to 512 [ 148.128948][ T8545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.148224][ T8545] EXT4-fs (loop1): 1 truncate cleaned up [ 148.155981][ T8545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.191714][ T8545] ipvlan0: entered promiscuous mode [ 148.198902][ T8556] FAULT_INJECTION: forcing a failure. [ 148.198902][ T8556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.212260][ T8556] CPU: 1 UID: 0 PID: 8556 Comm: syz.5.1800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.212291][ T8556] Tainted: [W]=WARN [ 148.212297][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.212379][ T8556] Call Trace: [ 148.212384][ T8556] [ 148.212391][ T8556] __dump_stack+0x1d/0x30 [ 148.212410][ T8556] dump_stack_lvl+0xe8/0x140 [ 148.212430][ T8556] dump_stack+0x15/0x1b [ 148.212446][ T8556] should_fail_ex+0x265/0x280 [ 148.212492][ T8556] should_fail_alloc_page+0xf2/0x100 [ 148.212524][ T8556] __alloc_frozen_pages_noprof+0xff/0x360 [ 148.212556][ T8556] alloc_pages_mpol+0xb3/0x260 [ 148.212643][ T8556] alloc_pages_noprof+0x90/0x130 [ 148.212701][ T8556] pte_alloc_one+0x1e/0xd0 [ 148.212724][ T8556] __pte_alloc+0x32/0x290 [ 148.212752][ T8556] handle_mm_fault+0x1c18/0x2be0 [ 148.212804][ T8556] ? vma_start_read+0x141/0x1f0 [ 148.212833][ T8556] do_user_addr_fault+0x630/0x1080 [ 148.212853][ T8556] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.212899][ T8556] exc_page_fault+0x62/0xa0 [ 148.212997][ T8556] asm_exc_page_fault+0x26/0x30 [ 148.213079][ T8556] RIP: 0033:0x7fdaaf200ca6 [ 148.213094][ T8556] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 148.213110][ T8556] RSP: 002b:00007fdaadda64a0 EFLAGS: 00010246 [ 148.213142][ T8556] RAX: 0000000000000001 RBX: 00007fdaadda6540 RCX: 0000000000000101 [ 148.213155][ T8556] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fdaadda65e0 [ 148.213235][ T8556] RBP: 0000000000000102 R08: 00007fdaa5987000 R09: 0000000000000000 [ 148.213274][ T8556] R10: 0000000000000000 R11: 00007fdaadda6550 R12: 0000000000000001 [ 148.213286][ T8556] R13: 00007fdaaf3ddc40 R14: 0000000000000000 R15: 00007fdaadda65e0 [ 148.213338][ T8556] [ 148.213358][ T8556] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 148.397969][ T8559] 9p: Unknown access argument 00000000000000000000ýÿ•: -22 [ 148.417143][ T8556] loop5: detected capacity change from 0 to 512 [ 148.428437][ T8556] EXT4-fs (loop5): 1 orphan inode deleted [ 148.434901][ T8556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.449555][ T8562] loop0: detected capacity change from 0 to 128 [ 148.485735][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.628388][ T8571] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 148.688147][ T8577] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.717423][ T8580] loop0: detected capacity change from 0 to 164 [ 148.725418][ T8580] syz.0.1809: attempt to access beyond end of device [ 148.725418][ T8580] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 148.793533][ T8580] syz.0.1809: attempt to access beyond end of device [ 148.793533][ T8580] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 148.818349][ T8586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8586 comm=syz.6.1806 [ 148.913716][ T8592] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.925552][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.940851][ T8586] loop6: detected capacity change from 0 to 4096 [ 148.957644][ T8586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.964447][ T8586] EXT4-fs: Ignoring removed i_version option [ 148.997393][ T8586] EXT4-fs (loop6): cluster size (1024) smaller than block size (4096) [ 149.047957][ T8604] xt_bpf: check failed: parse error [ 149.057378][ T8592] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.074859][ T8588] loop5: detected capacity change from 0 to 128 [ 149.111027][ T8588] vhci_hcd: invalid port number 96 [ 149.116174][ T8588] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 149.129750][ T8608] 8021q: adding VLAN 0 to HW filter on device bond8 [ 149.152669][ T8592] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.166110][ T8611] 9p: Unknown access argument 00000000000000000000ýÿ•: -22 [ 149.224273][ T8618] loop6: detected capacity change from 0 to 128 [ 149.233766][ T8592] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.304121][ T8624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 149.317331][ T8624] bond9 (unregistering): Released all slaves [ 149.368715][ T134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.382962][ T134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.387484][ T8633] loop1: detected capacity change from 0 to 164 [ 149.402390][ T8633] syz.1.1828: attempt to access beyond end of device [ 149.402390][ T8633] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 149.422614][ T158] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.455991][ T8633] syz.1.1828: attempt to access beyond end of device [ 149.455991][ T8633] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.469186][ T8639] loop6: detected capacity change from 0 to 164 [ 149.480762][ T8639] syz.6.1831: attempt to access beyond end of device [ 149.480762][ T8639] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 149.494904][ T8639] syz.6.1831: attempt to access beyond end of device [ 149.494904][ T8639] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.544579][ T134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.564547][ T8646] loop2: detected capacity change from 0 to 512 [ 149.577976][ T8643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 149.588844][ T8650] loop0: detected capacity change from 0 to 512 [ 149.617998][ T8646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.642677][ T8650] EXT4-fs: Ignoring removed nobh option [ 149.660608][ T8653] xt_bpf: check failed: parse error [ 149.672252][ T8647] loop6: detected capacity change from 0 to 128 [ 149.683618][ T8650] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1836: iget: bad i_size value: 38620345925642 [ 149.685288][ T8646] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.710650][ T8650] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1836: couldn't read orphan inode 15 (err -117) [ 149.724886][ T8650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.735864][ T8656] loop1: detected capacity change from 0 to 2048 [ 149.744854][ T8650] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1836: bg 0: block 5: invalid block bitmap [ 149.760965][ T8647] vhci_hcd: invalid port number 96 [ 149.766083][ T8647] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 149.775670][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.809556][ T8660] __nla_validate_parse: 38 callbacks suppressed [ 149.809570][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1840'. [ 149.853294][ T8040] loop1: p2 p3 p7 [ 149.866601][ T8656] loop1: p2 p3 p7 [ 149.875999][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.895790][ T8664] 8021q: adding VLAN 0 to HW filter on device bond9 [ 149.917982][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 149.956327][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 149.966402][ T8671] xt_hashlimit: max too large, truncated to 1048576 [ 149.984705][ T8671] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 149.985175][ T8664] bond9 (unregistering): Released all slaves [ 150.040267][ T8326] udevd[8326]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 150.051790][ T8321] udevd[8321]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 150.051842][ T8674] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1840'. [ 150.066931][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 150.070683][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1840'. [ 150.095113][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 150.108545][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 150.139503][ T8677] FAULT_INJECTION: forcing a failure. [ 150.139503][ T8677] name failslab, interval 1, probability 0, space 0, times 0 [ 150.152236][ T8677] CPU: 1 UID: 0 PID: 8677 Comm: syz.6.1846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.152264][ T8677] Tainted: [W]=WARN [ 150.152269][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.152281][ T8677] Call Trace: [ 150.152289][ T8677] [ 150.152302][ T8677] __dump_stack+0x1d/0x30 [ 150.152356][ T8677] dump_stack_lvl+0xe8/0x140 [ 150.152373][ T8677] dump_stack+0x15/0x1b [ 150.152387][ T8677] should_fail_ex+0x265/0x280 [ 150.152428][ T8677] should_failslab+0x8c/0xb0 [ 150.152494][ T8677] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 150.152616][ T8677] ? __alloc_skb+0x101/0x320 [ 150.152640][ T8677] __alloc_skb+0x101/0x320 [ 150.152662][ T8677] netlink_alloc_large_skb+0xbf/0xf0 [ 150.152687][ T8677] netlink_sendmsg+0x3cf/0x6b0 [ 150.152715][ T8677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.152731][ T8677] __sock_sendmsg+0x145/0x180 [ 150.152750][ T8677] ____sys_sendmsg+0x31e/0x4e0 [ 150.152777][ T8677] ___sys_sendmsg+0x17b/0x1d0 [ 150.152859][ T8677] __x64_sys_sendmsg+0xd4/0x160 [ 150.152969][ T8677] x64_sys_call+0x191e/0x3000 [ 150.152987][ T8677] do_syscall_64+0xd2/0x200 [ 150.153002][ T8677] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.153076][ T8677] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.153139][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.153158][ T8677] RIP: 0033:0x7f0a78e8efc9 [ 150.153171][ T8677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.153185][ T8677] RSP: 002b:00007f0a778ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.153201][ T8677] RAX: ffffffffffffffda RBX: 00007f0a790e5fa0 RCX: 00007f0a78e8efc9 [ 150.153211][ T8677] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 150.153283][ T8677] RBP: 00007f0a778ef090 R08: 0000000000000000 R09: 0000000000000000 [ 150.153298][ T8677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.153308][ T8677] R13: 00007f0a790e6038 R14: 00007f0a790e5fa0 R15: 00007fff9a89ed28 [ 150.153326][ T8677] [ 150.165849][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 150.176232][ T8138] udevd[8138]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 150.191745][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 150.250747][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 150.250761][ T29] audit: type=1326 audit(1761583230.767:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.374972][ T8692] loop1: detected capacity change from 0 to 512 [ 150.376947][ T29] audit: type=1326 audit(1761583230.767:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.388910][ T8692] EXT4-fs: Ignoring removed nobh option [ 150.396430][ T29] audit: type=1326 audit(1761583230.767:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.396455][ T29] audit: type=1326 audit(1761583230.767:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.436679][ T8692] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1850: iget: bad i_size value: 38620345925642 [ 150.456754][ T29] audit: type=1326 audit(1761583230.777:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.464295][ T8692] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1850: couldn't read orphan inode 15 (err -117) [ 150.485652][ T29] audit: type=1326 audit(1761583230.777:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.509556][ T8692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.529613][ T29] audit: type=1326 audit(1761583230.827:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.597993][ T8692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1850: bg 0: block 5: invalid block bitmap [ 150.616165][ T29] audit: type=1326 audit(1761583230.827:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.652355][ T29] audit: type=1326 audit(1761583230.827:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.675794][ T29] audit: type=1326 audit(1761583230.827:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8680 comm="syz.2.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e88cefc9 code=0x7ffc0000 [ 150.700949][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.774337][ T8705] loop1: detected capacity change from 0 to 2048 [ 150.786097][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1856'. [ 150.797380][ T8707] siw: device registration error -23 [ 150.804560][ T8709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8709 comm=syz.5.1856 [ 150.825889][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 150.842713][ T8040] loop1: p2 p3 p7 [ 150.846700][ T8709] loop5: detected capacity change from 0 to 4096 [ 150.847586][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 150.865117][ T8709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.871866][ T8709] EXT4-fs: Ignoring removed i_version option [ 150.881552][ T8709] EXT4-fs (loop5): cluster size (1024) smaller than block size (4096) [ 150.896494][ T8705] loop1: p2 p3 p7 [ 150.977358][ T8138] udevd[8138]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 150.979000][ T8042] udevd[8042]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 150.988912][ T8040] udevd[8040]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 151.007593][ T8720] validate_nla: 12 callbacks suppressed [ 151.007661][ T8720] netlink: 'syz.6.1858': attribute type 21 has an invalid length. [ 151.028864][ T8138] udevd[8138]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 151.122213][ T8723] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 151.134637][ T8728] loop5: detected capacity change from 0 to 512 [ 151.156379][ T8728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.189592][ T8728] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.257908][ T4032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.298138][ T8739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8739 comm=syz.0.1861 [ 151.320864][ T8739] netlink: 'syz.0.1861': attribute type 21 has an invalid length. [ 151.359113][ T8724] loop0: detected capacity change from 0 to 4096 [ 151.365951][ T8724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.372624][ T8724] EXT4-fs: Ignoring removed i_version option [ 151.379803][ T8724] EXT4-fs (loop0): cluster size (1024) smaller than block size (4096) [ 151.432576][ T8734] xt_bpf: check failed: parse error [ 151.439413][ T8734] loop1: detected capacity change from 0 to 128 [ 151.455695][ T8746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8746 comm=syz.5.1869 [ 151.482068][ T8734] vhci_hcd: invalid port number 96 [ 151.487192][ T8734] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 151.494591][ T8746] loop5: detected capacity change from 0 to 4096 [ 151.501496][ T8746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.508120][ T8746] EXT4-fs: Ignoring removed i_version option [ 151.530896][ T8746] EXT4-fs (loop5): cluster size (1024) smaller than block size (4096) [ 151.574248][ T8753] 9p: Unknown access argument 00000000000000000000ýÿ•: -22 [ 151.626505][ T8756] loop1: detected capacity change from 0 to 128 [ 152.020851][ T8765] loop1: detected capacity change from 0 to 512 [ 152.055230][ T8765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.067952][ T8765] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.081893][ T8769] vlan0: entered allmulticast mode [ 152.087048][ T8769] dummy0: entered allmulticast mode [ 152.108582][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.200497][ T8783] loop6: detected capacity change from 0 to 512 [ 152.213424][ T8783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.228955][ T8783] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.285794][ T7819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.320790][ T8790] xt_hashlimit: max too large, truncated to 1048576 [ 152.325023][ T8789] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 152.328118][ T8790] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.336593][ T8781] xt_bpf: check failed: parse error [ 152.354618][ T8781] loop1: detected capacity change from 0 to 128 [ 152.359496][ T8789] 8021q: adding VLAN 0 to HW filter on device bond9 [ 152.386913][ T8789] bond9 (unregistering): Released all slaves [ 152.398688][ T8793] siw: device registration error -23 [ 152.404571][ T8781] vhci_hcd: invalid port number 96 [ 152.409690][ T8781] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 152.510061][ T8802] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 152.547703][ T8802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.563505][ T8806] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 152.625629][ T8815] loop1: detected capacity change from 0 to 2048 [ 152.632669][ T8816] netlink: 'syz.0.1891': attribute type 21 has an invalid length. [ 152.658528][ T8800] xt_bpf: check failed: parse error [ 152.665542][ T8800] loop5: detected capacity change from 0 to 128 [ 152.701365][ T8800] vhci_hcd: invalid port number 96 [ 152.706593][ T8800] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 152.726018][ T8815] loop1: p2 p3 p7 [ 152.791880][ T8825] netlink: 'syz.6.1894': attribute type 19 has an invalid length. [ 152.821363][ T8828] xt_hashlimit: max too large, truncated to 1048576 [ 152.831789][ T8828] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.847008][ T8829] loop5: detected capacity change from 0 to 164 [ 152.856765][ T8821] wireguard0: entered promiscuous mode [ 152.862281][ T8821] wireguard0: entered allmulticast mode [ 152.873749][ T8837] loop1: detected capacity change from 0 to 164 [ 152.888197][ T8838] SELinux: failed to load policy [ 152.894190][ T8837] syz.1.1898: attempt to access beyond end of device [ 152.894190][ T8837] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 152.909694][ T8829] syz.5.1897: attempt to access beyond end of device [ 152.909694][ T8829] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 152.913975][ T8837] syz.1.1898: attempt to access beyond end of device [ 152.913975][ T8837] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.948556][ T8829] syz.5.1897: attempt to access beyond end of device [ 152.948556][ T8829] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 152.994990][ T8842] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 153.054628][ T8855] syû: rxe_newlink: already configured on bond_slave_0 [ 153.174441][ T8867] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 153.188507][ T8867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.199165][ T8865] loop2: detected capacity change from 0 to 2048 [ 153.211166][ T8867] bond5 (unregistering): Released all slaves [ 153.253694][ T8865] loop2: p2 p3 p7 [ 153.289722][ T8321] ================================================================== [ 153.297834][ T8321] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 153.305139][ T8321] [ 153.307467][ T8321] write to 0xffff88811b5c29a0 of 4 bytes by task 8042 on cpu 0: [ 153.315084][ T8321] touch_atime+0x1e8/0x340 [ 153.319512][ T8321] shmem_file_read_iter+0x477/0x540 [ 153.324703][ T8321] vfs_read+0x64c/0x770 [ 153.328852][ T8321] ksys_read+0xda/0x1a0 [ 153.333014][ T8321] __x64_sys_read+0x40/0x50 [ 153.337516][ T8321] x64_sys_call+0x27c0/0x3000 [ 153.342200][ T8321] do_syscall_64+0xd2/0x200 [ 153.346783][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.352678][ T8321] [ 153.354990][ T8321] read to 0xffff88811b5c29a0 of 4 bytes by task 8321 on cpu 1: [ 153.362613][ T8321] atime_needs_update+0x25f/0x3e0 [ 153.367642][ T8321] touch_atime+0x4a/0x340 [ 153.371971][ T8321] shmem_file_read_iter+0x477/0x540 [ 153.377196][ T8321] vfs_read+0x64c/0x770 [ 153.381354][ T8321] ksys_read+0xda/0x1a0 [ 153.385507][ T8321] __x64_sys_read+0x40/0x50 [ 153.390009][ T8321] x64_sys_call+0x27c0/0x3000 [ 153.394693][ T8321] do_syscall_64+0xd2/0x200 [ 153.399201][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.405087][ T8321] [ 153.407395][ T8321] value changed: 0x3156d3a8 -> 0x31f23e30 [ 153.413105][ T8321] [ 153.415415][ T8321] Reported by Kernel Concurrency Sanitizer on: [ 153.421558][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.432489][ T8321] Tainted: [W]=WARN [ 153.436283][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.446337][ T8321] ================================================================== [ 153.474718][ T8875] loop1: detected capacity change from 0 to 512 [ 153.499604][ T8875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.512332][ T8875] EXT4-fs (loop1): 1 truncate cleaned up [ 153.518345][ T8875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.557503][ T8875] ipvlan0: entered promiscuous mode [ 154.111473][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.