last executing test programs: 14.976214522s ago: executing program 0 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x14, r4, 0x1, 0x80, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 14.939158723s ago: executing program 0 (id=150): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0xc0000, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(0x0, 0x591002, 0x50f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRES8=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='cachefiles_coherency\x00', r6}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7}, &(0x7f0000000900), &(0x7f0000000940)=r8}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 13.776496165s ago: executing program 0 (id=164): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) select(0x406f205456671cf9, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) process_madvise(r5, &(0x7f0000000000)=[{0x0}], 0x100000000000000d, 0x15, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r0, 0x141601) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) 12.860245863s ago: executing program 0 (id=177): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) pipe(&(0x7f0000019480)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file1', [{0x20, '\xf2\xf8[).\'{\xf9'}, {0x20, 'ext4\x00'}, {0x20, 'ext4\x00'}, {}], 0xa, "c8147bc9534f2a96c4322909445a4dc1cffb42b3f6abbcfb6140cb16c9f1d1869761858c549cf786bea3aef7bbab8576dd3aa9e3c46f9e9db0a6e81fbebf9dc899a1a970d5ad9788c19c9b8042ba227e030c1df32a274e063454e0c25b919bfa0c58992a2f7ab02734371085ce55baa2dc887dceabdb1457d08edf6202ad8bceb257152a75307a31056a5514caa3b44100bc70ea37969e36a5b03f41f9fbead29bf17cc428845a14ca4987a17baed0f4d895aa5ceeb184dfe7d3e451cddc3a17"}, 0xe1) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) io_setup(0x3, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x58a, r5, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0xb1, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001478659e6060000008000910e81f836a99b7a396f085dd3ef5c704974e10d75449e1d7e9efdc8bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @multicast1}, &(0x7f00000002c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) 10.862934191s ago: executing program 32 (id=197): socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20000004) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = socket(0x10, 0x803, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x20, 0x121d0000000000, 0xfffffffc, 0x7, 0x0, 0x1b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r6 = dup(r5) sendfile(r6, r4, 0x0, 0x8000fffffffc) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), 0xffffffffffffffff, 0x2}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @multicast1}, &(0x7f00000002c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) 5.816232978s ago: executing program 4 (id=292): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0xa88d, 0x4, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x66, 0x0, 0x8, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@ra={0x94, 0x4}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x1, 0xf, "094db4437ae67e77a78d354207"}, {0x1, 0x6, "842e44a3"}, {0x2e40ba88cda791f3, 0x3, "93"}, {0x2, 0x2}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0xe, [{@multicast2, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@private=0xa010101, 0x80}, {@broadcast, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xfffffff9}]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 5.789751049s ago: executing program 4 (id=293): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf2501"], 0x18}}, 0x2000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5.76496301s ago: executing program 4 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.645305602s ago: executing program 4 (id=299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002440)={0x4, 0xffff, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='initcall_level\x00', r2, 0x0, 0x6}, 0x18) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x4, 0x1f, 0x1d, 0x1, "619aae711f5aae641ef8d17cdf444546165cc3c1fb02943dabe5154b081a7b990237bd2a05531d7bb5c5eac61e564add58aab3bd2ee92958439adb580035a2a0", "62880e930287b3fed25eac2ae99b5d1ab1ba3c06b33b0a18856113d9c71f9535", [0x1, 0x7]}) 5.249739889s ago: executing program 4 (id=306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) read$rfkill(r1, &(0x7f00000003c0), 0x8) 4.908408306s ago: executing program 4 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @initdev}, &(0x7f0000000340)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1e, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x0, 0x2, 0x1, 0x6, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x0, 0x1, 0xa, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x6f, &(0x7f0000000100)=""/111, 0x41000, 0x22, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x1, 0x1, 0x8, 0x2}, {0x5, 0x1, 0x10}], 0x10, 0x8}, 0x94) 4.908179256s ago: executing program 33 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @initdev}, &(0x7f0000000340)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1e, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x0, 0x2, 0x1, 0x6, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x0, 0x1, 0xa, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x6f, &(0x7f0000000100)=""/111, 0x41000, 0x22, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x1, 0x1, 0x8, 0x2}, {0x5, 0x1, 0x10}], 0x10, 0x8}, 0x94) 2.064250781s ago: executing program 2 (id=370): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) getresuid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0)) 2.037631541s ago: executing program 2 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.940893013s ago: executing program 3 (id=373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') (fail_nth: 9) 1.699345188s ago: executing program 3 (id=375): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}) 1.644927609s ago: executing program 3 (id=377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x1800) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 1.503517231s ago: executing program 2 (id=378): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.393332903s ago: executing program 2 (id=381): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) select(0x406f205456671cf9, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x100000000000000d, 0x15, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r0, 0x141601) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x2) 1.186839637s ago: executing program 6 (id=391): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9}, 0x0, 0x10010000, 0xa, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x36e3}}, './file0\x00'}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) (fail_nth: 3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x5}, &(0x7f0000000100)=0x8) socket$kcm(0x10, 0x2, 0x0) 833.961144ms ago: executing program 3 (id=396): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) (async) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 806.206255ms ago: executing program 3 (id=398): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @remote, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 608.687979ms ago: executing program 3 (id=402): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x23) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030529bd7000fcffffff00003ddf", @ANYRES32=r4, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd61) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)="7636242a0254adfd5922b0f851fa3c4ed6f978d69f04306ae0513c9f7fa173dd44c40631f70d7a054d3611fc1454b4d0f41a01e84cd8b86f152242b726c796c3151913b329e5213d58cba9bf8876", &(0x7f0000000400), 0x80000002, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5aa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18035ed1f732f027b9bc000000000000000000000000000000718611bef067d4df6b0575882fd9ce123300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x80) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRESHEX=r5, @ANYBLOB="0033a153353200000000000000b703000000000000850000001b00de00b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x748f, 0x4) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) 532.83362ms ago: executing program 2 (id=405): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) getresuid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0)) 520.90968ms ago: executing program 1 (id=406): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x23) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030529bd7000fcffffff00003ddf", @ANYRES32=r4, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd61) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5aa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18035ed1f732f027b9bc000000000000000000000000000000718611bef067d4df6b0575882fd9ce123300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x80) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRESHEX=r5, @ANYBLOB="0033a153353200000000000000b703000000000000850000001b00de00b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x748f, 0x4) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r9, r9, 0x0, 0x800000009) 479.376361ms ago: executing program 2 (id=409): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @auto="22b4858e6f021900"}}) (async) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") r1 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000b40)='cifs.idmap\x00', 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000840)=0x14) (async) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000880)='.pending_reads\x00', 0x440001, 0x110) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) (async) r7 = dup2(r6, r5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r7, 0x20, &(0x7f0000000240)={&(0x7f00000001c0)=""/11, 0xb, 0x0, &(0x7f0000000200)=""/10, 0xa}}, 0x10) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e00000008000000700000000118000000100400", @ANYRES32=r7, @ANYBLOB="a0d100"/20, @ANYRES64=r5, @ANYRES32=r7, @ANYBLOB], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000080000000001600009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x2f, r7, 0x8, &(0x7f0000000100)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xd, 0x70, 0x3}, 0x10, r8, r9, 0x6, &(0x7f0000000780), &(0x7f0000000580)=[{0x2, 0x5, 0xd, 0x1}, {0x1, 0x4, 0xc, 0x2}, {0x3, 0x2, 0x3, 0x2}, {0x6, 0x2, 0xc, 0x6}, {0x0, 0x4, 0x1, 0x1}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x14, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x885, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@generic={0x8, 0x2, 0xa, 0x7, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x343f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000c40)=""/4096, 0x41000, 0x60, '\x00', r3, @cgroup_sock=0x22, r4, 0x8, &(0x7f00000008c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x7, 0x5, 0x6}, 0x10, r8, r0, 0xa, 0x0, &(0x7f0000000940)=[{0x1, 0x3, 0x0, 0x7}, {0x1, 0x1, 0x9, 0x4}, {0x5, 0x3, 0x4, 0xa}, {0x4, 0x5, 0xf, 0x3}, {0x5, 0x2, 0x3, 0x2}, {0x1, 0x4, 0xf, 0x5}, {0x5, 0x5, 0xb, 0x3}, {0x4, 0x5, 0x10}, {0x4, 0x5, 0xb, 0x5}, {0x5, 0x4, 0x10, 0x8}], 0x10, 0x1}, 0x94) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5c00ffff00", 0x5, 0x0, 0x0, 0x2}]) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4010) 476.785551ms ago: executing program 1 (id=410): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 373.056203ms ago: executing program 5 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xcd}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x24000094) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r10, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10) r15 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5516, 0x2000000}) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r12, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'bridge0\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8400000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000400000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="2afb2300"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 360.702653ms ago: executing program 1 (id=413): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000740)={0x11, 0x19, r3, 0x1, 0x7f, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 252.780236ms ago: executing program 6 (id=414): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dax}]}, 0xfe, 0x473, &(0x7f0000000940)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095f638c71a00ee79b3"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x1100}, 0x2062) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4120}, {0xffffffffffffffff, 0x8153}], 0x2, 0x0, 0x0, 0x0) 252.426696ms ago: executing program 1 (id=415): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r2}, 0x38) 227.613006ms ago: executing program 1 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) read$rfkill(r1, 0x0, 0x0) 215.555176ms ago: executing program 1 (id=417): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x3000008, 0x18013, 0xffffffffffffffff, 0xffffd000) set_mempolicy(0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x10001, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (fail_nth: 6) 195.781206ms ago: executing program 6 (id=418): syz_clone3(&(0x7f00000003c0)={0x232b8800, 0x0, 0x0, 0x0, {0x4000025}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x58) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000030000000073797a30000000001400078008001240ffffff6476000000000000ff050004000000000010000300686173683a69702c6d616300050005000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x94) r3 = open(0x0, 0x14927e, 0x20) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 166.631567ms ago: executing program 5 (id=419): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 165.935687ms ago: executing program 5 (id=420): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x23) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030529bd7000fcffffff00003ddf", @ANYRES32=r4, @ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd61) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5aa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18035ed1f732f027b9bc000000000000000000000000000000718611bef067d4df6b0575882fd9ce123300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x80) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRESHEX=r5, @ANYBLOB="0033a153353200000000000000b703000000000000850000001b00de00b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0x748f, 0x4) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r9, r9, 0x0, 0x800000009) 164.581857ms ago: executing program 6 (id=421): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x200809) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) 134.679248ms ago: executing program 5 (id=422): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0x2}, 0x1) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800200400000000000000090000000000005cfd000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000002380000", @ANYRES32=0x0, @ANYBLOB="540003007665746820000000000000000000000008"], 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r8, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x11, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r2, 0x0, 0x0) fchdir(r10) 36.32758ms ago: executing program 5 (id=423): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0xa88d, 0x4, {{0x1d, 0x4, 0x3, 0x0, 0x74, 0x66, 0x0, 0x8, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@ra={0x94, 0x4}, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x1, 0xf, "094db4437ae67e77a78d354207"}, {0x1, 0x6, "842e44a3"}, {0x2, 0xe, "4e3d76ac3680e0c770eb22e4"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x2c, 0xf1, 0x3, 0xe, [{@multicast2, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@private=0xa010101, 0x80}, {@broadcast, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xfffffff9}]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 17.28878ms ago: executing program 6 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.48766ms ago: executing program 5 (id=425): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000002c0)=""/149, &(0x7f0000000240)=0x95) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x800009, @empty, 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000002100)={0xa, 0x4e21, 0x8001, @mcast2, 0x2}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002140)="cf", 0x1}], 0x202}}], 0x2, 0x0) shutdown(r4, 0x1) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x7f, 0x100}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/73, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8000, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 0s ago: executing program 6 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000021004000080220ff0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r4, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r9, @ANYBLOB="08000200ac1414ea"], 0x20}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x40) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r11 = socket(0x10, 0x803, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xd}}}, 0x24}}, 0x0) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): mode [ 29.776270][ T3302] team0: Port device team_slave_0 added [ 29.801241][ T3302] team0: Port device team_slave_1 added [ 29.808245][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.829892][ T3304] team0: Port device team_slave_0 added [ 29.837253][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.854076][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.863796][ T3304] team0: Port device team_slave_1 added [ 29.870527][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.884039][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.890986][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.916955][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.943034][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.949987][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.975898][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.001151][ T3307] team0: Port device team_slave_0 added [ 30.009708][ T3307] team0: Port device team_slave_1 added [ 30.020612][ T3301] team0: Port device team_slave_0 added [ 30.026570][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.033634][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.059655][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.076537][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.083682][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.090816][ T3305] bridge_slave_0: entered allmulticast mode [ 30.097348][ T3305] bridge_slave_0: entered promiscuous mode [ 30.104291][ T3301] team0: Port device team_slave_1 added [ 30.110335][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.117325][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.143482][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.160077][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.167314][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.174472][ T3305] bridge_slave_1: entered allmulticast mode [ 30.180953][ T3305] bridge_slave_1: entered promiscuous mode [ 30.194316][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.201276][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.227266][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.258052][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.265063][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.290998][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.303741][ T3302] hsr_slave_0: entered promiscuous mode [ 30.309780][ T3302] hsr_slave_1: entered promiscuous mode [ 30.320280][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.327290][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.353212][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.381610][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.391148][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.398126][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.424051][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.451187][ T3301] hsr_slave_0: entered promiscuous mode [ 30.457154][ T3301] hsr_slave_1: entered promiscuous mode [ 30.463218][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.468931][ T3301] Cannot create hsr debugfs directory [ 30.476484][ T3304] hsr_slave_0: entered promiscuous mode [ 30.482675][ T3304] hsr_slave_1: entered promiscuous mode [ 30.488486][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.494225][ T3304] Cannot create hsr debugfs directory [ 30.505842][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.550658][ T3307] hsr_slave_0: entered promiscuous mode [ 30.557063][ T3307] hsr_slave_1: entered promiscuous mode [ 30.563061][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 30.568791][ T3307] Cannot create hsr debugfs directory [ 30.577607][ T3305] team0: Port device team_slave_0 added [ 30.591005][ T3305] team0: Port device team_slave_1 added [ 30.622397][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.629353][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.655477][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.669079][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.676190][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.702211][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.804550][ T3305] hsr_slave_0: entered promiscuous mode [ 30.810538][ T3305] hsr_slave_1: entered promiscuous mode [ 30.817028][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.822784][ T3305] Cannot create hsr debugfs directory [ 30.879315][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.887906][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.901348][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.917081][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.949203][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.961664][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.970532][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.982721][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.015531][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.031175][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.045401][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.056359][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.065947][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.074631][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.095654][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.113454][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.128572][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.143169][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.159897][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.170066][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.179263][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.202574][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.218010][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.235090][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.243352][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.250410][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.265597][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.272660][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.281159][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.288270][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.301421][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.312909][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.319976][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.336528][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.359725][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.366845][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.375830][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.382912][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.397040][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.407538][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.455783][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.469023][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.479516][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.497733][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.517225][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.533736][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.543513][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.554122][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.574231][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.581313][ T3315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.590122][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.597234][ T3315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.613566][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.620736][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.637689][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.644840][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.670663][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.689001][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.699423][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.733586][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.758308][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.786192][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.830100][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.857542][ T3304] veth0_vlan: entered promiscuous mode [ 31.875109][ T3304] veth1_vlan: entered promiscuous mode [ 31.898590][ T3304] veth0_macvtap: entered promiscuous mode [ 31.927343][ T3302] veth0_vlan: entered promiscuous mode [ 31.938203][ T3302] veth1_vlan: entered promiscuous mode [ 31.950922][ T3302] veth0_macvtap: entered promiscuous mode [ 31.967511][ T3304] veth1_macvtap: entered promiscuous mode [ 31.974589][ T3307] veth0_vlan: entered promiscuous mode [ 31.981695][ T3302] veth1_macvtap: entered promiscuous mode [ 31.998164][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.006073][ T3307] veth1_vlan: entered promiscuous mode [ 32.013854][ T3301] veth0_vlan: entered promiscuous mode [ 32.028400][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.039479][ T3301] veth1_vlan: entered promiscuous mode [ 32.048939][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.064950][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.075382][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.095979][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.096593][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.096606][ T29] audit: type=1400 audit(1757001507.615:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.yFlRhN/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.108616][ T3307] veth0_macvtap: entered promiscuous mode [ 32.142197][ T29] audit: type=1400 audit(1757001507.655:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.154664][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.164315][ T29] audit: type=1400 audit(1757001507.655:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.yFlRhN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.176162][ T3307] veth1_macvtap: entered promiscuous mode [ 32.198161][ T29] audit: type=1400 audit(1757001507.655:84): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.212440][ T3301] veth0_macvtap: entered promiscuous mode [ 32.225608][ T29] audit: type=1400 audit(1757001507.655:85): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.yFlRhN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.257843][ T29] audit: type=1400 audit(1757001507.655:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.yFlRhN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.285287][ T29] audit: type=1400 audit(1757001507.655:87): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.304864][ T29] audit: type=1400 audit(1757001507.655:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.327614][ T29] audit: type=1400 audit(1757001507.655:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=4688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.350800][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362859][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.370191][ T3305] veth0_vlan: entered promiscuous mode [ 32.390928][ T29] audit: type=1400 audit(1757001507.905:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.420830][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.431226][ T3301] veth1_macvtap: entered promiscuous mode [ 32.439111][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.451789][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.461814][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.471056][ T3305] veth1_vlan: entered promiscuous mode [ 32.479586][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.501491][ T3305] veth0_macvtap: entered promiscuous mode [ 32.509723][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.520590][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.536784][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.563361][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.574526][ T3476] loop4: detected capacity change from 0 to 512 [ 32.575032][ T3305] veth1_macvtap: entered promiscuous mode [ 32.598742][ T3476] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.598745][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.598759][ T3476] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.622638][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.631100][ T3476] EXT4-fs (loop4): 1 truncate cleaned up [ 32.645629][ T3476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.658987][ T3481] FAULT_INJECTION: forcing a failure. [ 32.658987][ T3481] name failslab, interval 1, probability 0, space 0, times 1 [ 32.671711][ T3481] CPU: 1 UID: 0 PID: 3481 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.671777][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.671788][ T3481] Call Trace: [ 32.671793][ T3481] [ 32.671799][ T3481] __dump_stack+0x1d/0x30 [ 32.671820][ T3481] dump_stack_lvl+0xe8/0x140 [ 32.671838][ T3481] dump_stack+0x15/0x1b [ 32.671918][ T3481] should_fail_ex+0x265/0x280 [ 32.671938][ T3481] should_failslab+0x8c/0xb0 [ 32.671962][ T3481] kmem_cache_alloc_noprof+0x50/0x310 [ 32.671993][ T3481] ? getname_kernel+0x3c/0x1f0 [ 32.672040][ T3481] ? should_fail_ex+0xdb/0x280 [ 32.672059][ T3481] getname_kernel+0x3c/0x1f0 [ 32.672083][ T3481] kern_path+0x23/0x130 [ 32.672190][ T3481] bpf_uprobe_multi_link_attach+0x231/0x910 [ 32.672217][ T3481] ? __rcu_read_unlock+0x4f/0x70 [ 32.672238][ T3481] ? __fget_files+0x184/0x1c0 [ 32.672279][ T3481] link_create+0x680/0x6e0 [ 32.672331][ T3481] __sys_bpf+0x61d/0x7b0 [ 32.672360][ T3481] __x64_sys_bpf+0x41/0x50 [ 32.672442][ T3481] x64_sys_call+0x2aea/0x2ff0 [ 32.672497][ T3481] do_syscall_64+0xd2/0x200 [ 32.672599][ T3481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.672622][ T3481] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.672647][ T3481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.672684][ T3481] RIP: 0033:0x7f5c1650ebe9 [ 32.672700][ T3481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.672718][ T3481] RSP: 002b:00007f5c14f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.672742][ T3481] RAX: ffffffffffffffda RBX: 00007f5c16745fa0 RCX: 00007f5c1650ebe9 [ 32.672753][ T3481] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 32.672765][ T3481] RBP: 00007f5c14f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 32.672776][ T3481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.672786][ T3481] R13: 00007f5c16746038 R14: 00007f5c16745fa0 R15: 00007fff1781aca8 [ 32.672850][ T3481] [ 32.886341][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.899628][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.909251][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.916456][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.931726][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.952199][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.974277][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.983135][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.008170][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.027147][ T269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.086347][ T269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.112588][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.120475][ T269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.166493][ T3509] loop4: detected capacity change from 0 to 512 [ 33.183005][ T269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.198714][ T3509] ======================================================= [ 33.198714][ T3509] WARNING: The mand mount option has been deprecated and [ 33.198714][ T3509] and is ignored by this kernel. Remove the mand [ 33.198714][ T3509] option from the mount to silence this warning. [ 33.198714][ T3509] ======================================================= [ 33.255408][ T3515] loop0: detected capacity change from 0 to 164 [ 33.265055][ T3515] rock: directory entry would overflow storage [ 33.271235][ T3515] rock: sig=0x66, size=4, remaining=3 [ 33.309575][ T3515] rock: directory entry would overflow storage [ 33.312716][ T3509] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.315861][ T3515] rock: sig=0x66, size=4, remaining=3 [ 33.327276][ T3509] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11: bg 0: block 248: padding at end of block bitmap is not set [ 33.353297][ T3509] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.11: Failed to acquire dquot type 1 [ 33.376213][ T3509] EXT4-fs (loop4): 1 truncate cleaned up [ 33.386109][ T3515] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 33.408284][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.448751][ T3515] pim6reg: entered allmulticast mode [ 33.510497][ T3519] pim6reg: left allmulticast mode [ 33.511658][ T3509] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 33.522162][ T3509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 33.522334][ T3509] vhci_hcd vhci_hcd.0: Device attached [ 33.534309][ T3509] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 33.534413][ T3520] vhci_hcd: cannot find the pending unlink 2869 [ 33.534547][ T3509] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 33.543010][ T3520] vhci_hcd: connection closed [ 33.543269][ T269] vhci_hcd: stop threads [ 33.543277][ T269] vhci_hcd: release socket [ 33.543283][ T269] vhci_hcd: disconnect device [ 33.655034][ T3527] loop0: detected capacity change from 0 to 1024 [ 33.716960][ T3527] EXT4-fs: Ignoring removed orlov option [ 33.722828][ T3527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.753464][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.900344][ T3545] Zero length message leads to an empty skb [ 34.024836][ T3549] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 34.074025][ T3509] syz.4.11 (3509) used greatest stack depth: 9280 bytes left [ 34.088836][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.210163][ T3561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28'. [ 34.220865][ T3561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28'. [ 34.308906][ T3556] loop1: detected capacity change from 0 to 1024 [ 34.334903][ T3556] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.27: Failed to acquire dquot type 0 [ 34.348687][ T3556] EXT4-fs (loop1): 1 truncate cleaned up [ 34.355382][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.426452][ T3505] syz.3.12 (3505) used greatest stack depth: 7304 bytes left [ 34.476144][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.496492][ C1] hrtimer: interrupt took 58191 ns [ 34.696562][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 34.765596][ T3609] FAULT_INJECTION: forcing a failure. [ 34.765596][ T3609] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 34.778938][ T3609] CPU: 1 UID: 0 PID: 3609 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.778962][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.778975][ T3609] Call Trace: [ 34.778982][ T3609] [ 34.778991][ T3609] __dump_stack+0x1d/0x30 [ 34.779067][ T3609] dump_stack_lvl+0xe8/0x140 [ 34.779093][ T3609] dump_stack+0x15/0x1b [ 34.779112][ T3609] should_fail_ex+0x265/0x280 [ 34.779132][ T3609] should_fail_alloc_page+0xf2/0x100 [ 34.779158][ T3609] __alloc_frozen_pages_noprof+0xff/0x360 [ 34.779190][ T3609] alloc_pages_mpol+0xb3/0x250 [ 34.779342][ T3609] folio_alloc_mpol_noprof+0x39/0x80 [ 34.779374][ T3609] shmem_get_folio_gfp+0x3cf/0xd60 [ 34.779462][ T3609] shmem_fault+0xf6/0x250 [ 34.779479][ T3609] __do_fault+0xb9/0x200 [ 34.779512][ T3609] handle_mm_fault+0xd69/0x2c20 [ 34.779550][ T3609] ? __rcu_read_unlock+0x4f/0x70 [ 34.779573][ T3609] do_user_addr_fault+0x3fe/0x1090 [ 34.779605][ T3609] exc_page_fault+0x62/0xa0 [ 34.779629][ T3609] asm_exc_page_fault+0x26/0x30 [ 34.779679][ T3609] RIP: 0010:__put_user_4+0xd/0x20 [ 34.779830][ T3609] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 34.779849][ T3609] RSP: 0018:ffffc9000322fe50 EFLAGS: 00050206 [ 34.779865][ T3609] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000001c0 [ 34.779879][ T3609] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 34.779891][ T3609] RBP: 0000000000000000 R08: 0001ffff8698d297 R09: 0000000000000000 [ 34.779905][ T3609] R10: 0000000000000003 R11: ffffffff817da810 R12: 0000000000000000 [ 34.779918][ T3609] R13: ffff888119553180 R14: 0000200000000300 R15: 0000000000000002 [ 34.779933][ T3609] ? __pfx_shmem_get_policy+0x10/0x10 [ 34.779979][ T3609] __se_sys_get_mempolicy+0x899/0xd80 [ 34.780076][ T3609] __x64_sys_get_mempolicy+0x67/0x80 [ 34.780103][ T3609] x64_sys_call+0x2882/0x2ff0 [ 34.780125][ T3609] do_syscall_64+0xd2/0x200 [ 34.780172][ T3609] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.780198][ T3609] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.780301][ T3609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.780333][ T3609] RIP: 0033:0x7f5c1650ebe9 [ 34.780348][ T3609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.780366][ T3609] RSP: 002b:00007f5c14f6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 34.780385][ T3609] RAX: ffffffffffffffda RBX: 00007f5c16745fa0 RCX: 00007f5c1650ebe9 [ 34.780399][ T3609] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 00002000000001c0 [ 34.780412][ T3609] RBP: 00007f5c14f6f090 R08: 0000000000000002 R09: 0000000000000000 [ 34.780425][ T3609] R10: 0000200000146000 R11: 0000000000000246 R12: 0000000000000001 [ 34.780435][ T3609] R13: 00007f5c16746038 R14: 00007f5c16745fa0 R15: 00007fff1781aca8 [ 34.780524][ T3609] [ 35.101949][ T3614] loop0: detected capacity change from 0 to 512 [ 35.149111][ T3614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.157259][ T3614] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 35.187706][ T3614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 35.213859][ T3617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.42'. [ 35.226506][ T3614] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.41: attempt to clear invalid blocks 2 len 1 [ 35.242968][ T3614] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.41: invalid indirect mapped block 1819239214 (level 0) [ 35.244391][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.257135][ T3614] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.41: invalid indirect mapped block 1819239214 (level 1) [ 35.280357][ T3614] EXT4-fs (loop0): 1 truncate cleaned up [ 35.286406][ T3614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.413676][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.579061][ T3663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 35.667675][ T3676] netlink: 64 bytes leftover after parsing attributes in process `syz.3.55'. [ 35.832582][ T3686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 35.883376][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.892384][ T3696] loop3: detected capacity change from 0 to 512 [ 35.913869][ T3696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.926799][ T3696] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.940592][ T3696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.62: corrupted inode contents [ 35.952764][ T3696] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.62: mark_inode_dirty error [ 35.969137][ T3696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.62: corrupted inode contents [ 35.983550][ T3696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.62: corrupted inode contents [ 35.995832][ T3696] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.62: mark_inode_dirty error [ 36.007486][ T3696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.62: corrupted inode contents [ 36.019356][ T3696] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.62: mark_inode_dirty error [ 36.031073][ T3696] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.62: corrupted inode contents [ 36.043901][ T3696] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.62: mark_inode_dirty error [ 36.067932][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.084689][ T3717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.66'. [ 36.333605][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 36.343896][ T3747] loop3: detected capacity change from 0 to 8192 [ 36.597990][ T3776] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 36.641605][ T3776] team0: Port device dummy0 added [ 36.720468][ T3787] loop4: detected capacity change from 0 to 512 [ 36.736694][ T3787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.763193][ T3787] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.929063][ T3798] loop0: detected capacity change from 0 to 512 [ 36.947235][ T3798] EXT4-fs: dax option not supported [ 37.015462][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.201871][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 37.201885][ T29] audit: type=1400 audit(1757001512.715:623): avc: denied { write } for pid=3819 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.215839][ T3822] loop1: detected capacity change from 0 to 1024 [ 37.235142][ T3822] EXT4-fs: Ignoring removed bh option [ 37.263378][ T3822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 37.279674][ T29] audit: type=1400 audit(1757001512.805:624): avc: denied { getopt } for pid=3821 comm="syz.1.96" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.307263][ T29] audit: type=1400 audit(1757001512.815:625): avc: denied { write } for pid=3821 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.339865][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 37.350103][ T3834] loop2: detected capacity change from 0 to 512 [ 37.363598][ T3834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.380705][ T3834] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.99: corrupted xattr block 95: invalid header [ 37.397713][ T3834] EXT4-fs (loop2): Remounting filesystem read-only [ 37.404330][ T3834] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 37.417364][ T3834] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 37.427716][ T3834] EXT4-fs (loop2): 1 orphan inode deleted [ 37.435011][ T3834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.457280][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.480215][ T3853] loop2: detected capacity change from 0 to 1024 [ 37.487560][ T3853] EXT4-fs: Ignoring removed orlov option [ 37.493364][ T3853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.520590][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.575851][ T29] audit: type=1326 audit(1757001513.095:626): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.599741][ T29] audit: type=1326 audit(1757001513.095:627): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.624853][ T29] audit: type=1326 audit(1757001513.125:628): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.648769][ T29] audit: type=1326 audit(1757001513.125:629): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.672530][ T29] audit: type=1326 audit(1757001513.125:630): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.696134][ T29] audit: type=1326 audit(1757001513.125:631): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.719778][ T29] audit: type=1326 audit(1757001513.125:632): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 37.953995][ T3901] program syz.3.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.967743][ T3898] FAULT_INJECTION: forcing a failure. [ 37.967743][ T3898] name failslab, interval 1, probability 0, space 0, times 0 [ 37.980576][ T3898] CPU: 0 UID: 0 PID: 3898 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.980601][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.980612][ T3898] Call Trace: [ 37.980619][ T3898] [ 37.980627][ T3898] __dump_stack+0x1d/0x30 [ 37.980647][ T3898] dump_stack_lvl+0xe8/0x140 [ 37.980693][ T3898] dump_stack+0x15/0x1b [ 37.980711][ T3898] should_fail_ex+0x265/0x280 [ 37.980854][ T3898] ? syslog_print_all+0x6f/0x3a0 [ 37.980883][ T3898] should_failslab+0x8c/0xb0 [ 37.980951][ T3898] __kmalloc_cache_noprof+0x4c/0x320 [ 37.980978][ T3898] syslog_print_all+0x6f/0x3a0 [ 37.981006][ T3898] ? avc_has_perm+0xf7/0x180 [ 37.981082][ T3898] do_syslog+0x2fd/0x7e0 [ 37.981110][ T3898] ? ksys_write+0x192/0x1a0 [ 37.981188][ T3898] __x64_sys_syslog+0x41/0x50 [ 37.981215][ T3898] x64_sys_call+0x2f36/0x2ff0 [ 37.981234][ T3898] do_syscall_64+0xd2/0x200 [ 37.981259][ T3898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.981311][ T3898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.981334][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.981360][ T3898] RIP: 0033:0x7f268682ebe9 [ 37.981373][ T3898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.981388][ T3898] RSP: 002b:00007f268526e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 37.981409][ T3898] RAX: ffffffffffffffda RBX: 00007f2686a66090 RCX: 00007f268682ebe9 [ 37.981420][ T3898] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 37.981430][ T3898] RBP: 00007f268526e090 R08: 0000000000000000 R09: 0000000000000000 [ 37.981441][ T3898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.981451][ T3898] R13: 00007f2686a66128 R14: 00007f2686a66090 R15: 00007ffec5f32098 [ 37.981467][ T3898] [ 38.274467][ T3913] FAULT_INJECTION: forcing a failure. [ 38.274467][ T3913] name failslab, interval 1, probability 0, space 0, times 0 [ 38.287167][ T3913] CPU: 0 UID: 0 PID: 3913 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.287197][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.287209][ T3913] Call Trace: [ 38.287215][ T3913] [ 38.287232][ T3913] __dump_stack+0x1d/0x30 [ 38.287253][ T3913] dump_stack_lvl+0xe8/0x140 [ 38.287316][ T3913] dump_stack+0x15/0x1b [ 38.287350][ T3913] should_fail_ex+0x265/0x280 [ 38.287369][ T3913] should_failslab+0x8c/0xb0 [ 38.287391][ T3913] kmem_cache_alloc_noprof+0x50/0x310 [ 38.287416][ T3913] ? security_inode_alloc+0x37/0x100 [ 38.287466][ T3913] security_inode_alloc+0x37/0x100 [ 38.287557][ T3913] inode_init_always_gfp+0x4b7/0x500 [ 38.287582][ T3913] ? __pfx_sock_alloc_inode+0x10/0x10 [ 38.287613][ T3913] alloc_inode+0x58/0x170 [ 38.287632][ T3913] __sock_create+0x122/0x5b0 [ 38.287735][ T3913] sock_create_kern+0x38/0x50 [ 38.287765][ T3913] mptcp_subflow_create_socket+0x84/0x630 [ 38.287791][ T3913] __mptcp_nmpc_sk+0xb3/0x3a0 [ 38.287872][ T3913] mptcp_bind+0x71/0x2f0 [ 38.287983][ T3913] __sys_bind+0x1d1/0x2a0 [ 38.288073][ T3913] __x64_sys_bind+0x3f/0x50 [ 38.288101][ T3913] x64_sys_call+0x2b6e/0x2ff0 [ 38.288123][ T3913] do_syscall_64+0xd2/0x200 [ 38.288149][ T3913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.288185][ T3913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.288211][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.288282][ T3913] RIP: 0033:0x7f5c1650ebe9 [ 38.288298][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.288389][ T3913] RSP: 002b:00007f5c14f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 38.288408][ T3913] RAX: ffffffffffffffda RBX: 00007f5c16745fa0 RCX: 00007f5c1650ebe9 [ 38.288421][ T3913] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 38.288434][ T3913] RBP: 00007f5c14f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.288542][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.288553][ T3913] R13: 00007f5c16746038 R14: 00007f5c16745fa0 R15: 00007fff1781aca8 [ 38.288573][ T3913] [ 38.288590][ T3913] socket: no more sockets [ 38.291770][ T3915] netlink: 'syz.0.118': attribute type 20 has an invalid length. [ 38.518339][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.578074][ T3928] FAULT_INJECTION: forcing a failure. [ 38.578074][ T3928] name failslab, interval 1, probability 0, space 0, times 0 [ 38.590819][ T3928] CPU: 0 UID: 0 PID: 3928 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.590845][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.590856][ T3928] Call Trace: [ 38.590888][ T3928] [ 38.590894][ T3928] __dump_stack+0x1d/0x30 [ 38.590913][ T3928] dump_stack_lvl+0xe8/0x140 [ 38.590929][ T3928] dump_stack+0x15/0x1b [ 38.590967][ T3928] should_fail_ex+0x265/0x280 [ 38.590992][ T3928] should_failslab+0x8c/0xb0 [ 38.591013][ T3928] kmem_cache_alloc_noprof+0x50/0x310 [ 38.591037][ T3928] ? prepare_creds+0x37/0x4c0 [ 38.591058][ T3928] prepare_creds+0x37/0x4c0 [ 38.591077][ T3928] copy_creds+0x8f/0x3f0 [ 38.591101][ T3928] copy_process+0x658/0x2000 [ 38.591126][ T3928] ? copy_clone_args_from_user+0x3ce/0x490 [ 38.591155][ T3928] kernel_clone+0x16c/0x5c0 [ 38.591180][ T3928] __se_sys_clone3+0x1c2/0x200 [ 38.591260][ T3928] __x64_sys_clone3+0x31/0x40 [ 38.591283][ T3928] x64_sys_call+0x1fc9/0x2ff0 [ 38.591315][ T3928] do_syscall_64+0xd2/0x200 [ 38.591401][ T3928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.591421][ T3928] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.591519][ T3928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.591537][ T3928] RIP: 0033:0x7f1225e1ebe9 [ 38.591551][ T3928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.591566][ T3928] RSP: 002b:00007f1224886f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 38.591607][ T3928] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1225e1ebe9 [ 38.591617][ T3928] RDX: 00007f1224886f20 RSI: 0000000000000058 RDI: 00007f1224886f20 [ 38.591627][ T3928] RBP: 00007f1224887090 R08: 0000000000000000 R09: 0000000000000058 [ 38.591708][ T3928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.591718][ T3928] R13: 00007f1226056038 R14: 00007f1226055fa0 R15: 00007ffc67d1be88 [ 38.591733][ T3928] [ 38.798994][ T3929] netlink: 'syz.2.122': attribute type 25 has an invalid length. [ 38.824538][ T3934] capability: warning: `syz.4.125' uses deprecated v2 capabilities in a way that may be insecure [ 38.853906][ T3935] syz.3.124 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.894196][ T3935] loop3: detected capacity change from 0 to 764 [ 38.916591][ T3945] mmap: syz.1.126 (3945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.053252][ T3955] loop1: detected capacity change from 0 to 128 [ 39.084331][ T3955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.123331][ T3955] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.191281][ T3955] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.203187][ T3983] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 39.213551][ T3984] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 39.224244][ T3983] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 39.345727][ T4001] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.378976][ T3999] loop1: detected capacity change from 0 to 764 [ 39.388372][ T3999] FAULT_INJECTION: forcing a failure. [ 39.388372][ T3999] name failslab, interval 1, probability 0, space 0, times 0 [ 39.401045][ T3999] CPU: 1 UID: 0 PID: 3999 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.401156][ T3999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.401168][ T3999] Call Trace: [ 39.401174][ T3999] [ 39.401205][ T3999] __dump_stack+0x1d/0x30 [ 39.401226][ T3999] dump_stack_lvl+0xe8/0x140 [ 39.401242][ T3999] dump_stack+0x15/0x1b [ 39.401258][ T3999] should_fail_ex+0x265/0x280 [ 39.401277][ T3999] should_failslab+0x8c/0xb0 [ 39.401355][ T3999] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 39.401421][ T3999] ? sidtab_sid2str_get+0xa0/0x130 [ 39.401454][ T3999] kmemdup_noprof+0x2b/0x70 [ 39.401580][ T3999] sidtab_sid2str_get+0xa0/0x130 [ 39.401662][ T3999] security_sid_to_context_core+0x1eb/0x2e0 [ 39.401682][ T3999] security_sid_to_context+0x27/0x40 [ 39.401700][ T3999] selinux_lsmprop_to_secctx+0x67/0xf0 [ 39.401723][ T3999] security_lsmprop_to_secctx+0x43/0x80 [ 39.401767][ T3999] audit_log_task_context+0x77/0x190 [ 39.401800][ T3999] audit_log_task+0xf4/0x250 [ 39.401825][ T3999] audit_seccomp+0x61/0x100 [ 39.401851][ T3999] ? __seccomp_filter+0x68c/0x10d0 [ 39.401914][ T3999] __seccomp_filter+0x69d/0x10d0 [ 39.401933][ T3999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 39.401966][ T3999] ? vfs_write+0x7e8/0x960 [ 39.401989][ T3999] ? __rcu_read_unlock+0x4f/0x70 [ 39.402068][ T3999] ? __fget_files+0x184/0x1c0 [ 39.402147][ T3999] __secure_computing+0x82/0x150 [ 39.402167][ T3999] syscall_trace_enter+0xcf/0x1e0 [ 39.402194][ T3999] do_syscall_64+0xac/0x200 [ 39.402224][ T3999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.402250][ T3999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.402276][ T3999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.402361][ T3999] RIP: 0033:0x7f1225e1ebe9 [ 39.402377][ T3999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.402395][ T3999] RSP: 002b:00007f1224887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.402415][ T3999] RAX: ffffffffffffffda RBX: 00007f1226055fa0 RCX: 00007f1225e1ebe9 [ 39.402427][ T3999] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000009 [ 39.402444][ T3999] RBP: 00007f1224887090 R08: 0000000000000000 R09: 0000000000000000 [ 39.402533][ T3999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.402546][ T3999] R13: 00007f1226056038 R14: 00007f1226055fa0 R15: 00007ffc67d1be88 [ 39.402566][ T3999] [ 39.652431][ T3999] lo speed is unknown, defaulting to 1000 [ 39.659240][ T3999] lo speed is unknown, defaulting to 1000 [ 39.670321][ T3999] lo speed is unknown, defaulting to 1000 [ 39.760464][ T4009] loop3: detected capacity change from 0 to 164 [ 39.770998][ T3999] infiniband sz1: set active [ 39.775770][ T3999] infiniband sz1: added lo [ 39.779611][ T4008] loop2: detected capacity change from 0 to 8192 [ 39.782222][ T10] lo speed is unknown, defaulting to 1000 [ 39.811930][ T4009] rock: directory entry would overflow storage [ 39.818254][ T4009] rock: sig=0x66, size=4, remaining=3 [ 39.876797][ T3999] RDS/IB: sz1: added [ 39.880846][ T3999] smc: adding ib device sz1 with port count 1 [ 39.914789][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.922023][ T3989] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.930508][ T3999] smc: ib device sz1 port 1 has pnetid [ 39.950360][ T4011] loop4: detected capacity change from 0 to 8192 [ 40.020634][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.035299][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.221977][ T3361] lo speed is unknown, defaulting to 1000 [ 40.240140][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.249226][ T3999] lo speed is unknown, defaulting to 1000 [ 40.269759][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.291659][ T3999] lo speed is unknown, defaulting to 1000 [ 40.300111][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.329021][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.406462][ T3999] lo speed is unknown, defaulting to 1000 [ 40.430989][ T4047] FAULT_INJECTION: forcing a failure. [ 40.430989][ T4047] name failslab, interval 1, probability 0, space 0, times 0 [ 40.443695][ T4047] CPU: 1 UID: 0 PID: 4047 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.443747][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.443759][ T4047] Call Trace: [ 40.443766][ T4047] [ 40.443774][ T4047] __dump_stack+0x1d/0x30 [ 40.443795][ T4047] dump_stack_lvl+0xe8/0x140 [ 40.443813][ T4047] dump_stack+0x15/0x1b [ 40.443829][ T4047] should_fail_ex+0x265/0x280 [ 40.443866][ T4047] should_failslab+0x8c/0xb0 [ 40.443945][ T4047] kmem_cache_alloc_noprof+0x50/0x310 [ 40.443970][ T4047] ? security_file_alloc+0x32/0x100 [ 40.444078][ T4047] security_file_alloc+0x32/0x100 [ 40.444115][ T4047] init_file+0x5c/0x1d0 [ 40.444146][ T4047] alloc_empty_file+0x8b/0x200 [ 40.444173][ T4047] path_openat+0x68/0x2170 [ 40.444189][ T4047] ? mntput+0x4b/0x80 [ 40.444282][ T4047] ? terminate_walk+0x27f/0x2a0 [ 40.444307][ T4047] ? path_openat+0x1bf8/0x2170 [ 40.444324][ T4047] ? _parse_integer_limit+0x170/0x190 [ 40.444416][ T4047] do_filp_open+0x109/0x230 [ 40.444441][ T4047] do_open_execat+0xd8/0x260 [ 40.444471][ T4047] alloc_bprm+0x25/0x350 [ 40.444493][ T4047] do_execveat_common+0x12e/0x750 [ 40.444520][ T4047] __x64_sys_execve+0x5c/0x70 [ 40.444621][ T4047] x64_sys_call+0x2716/0x2ff0 [ 40.444643][ T4047] do_syscall_64+0xd2/0x200 [ 40.444673][ T4047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.444751][ T4047] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.444806][ T4047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.444829][ T4047] RIP: 0033:0x7f5c1650ebe9 [ 40.444847][ T4047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.444872][ T4047] RSP: 002b:00007f5c14f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 40.444898][ T4047] RAX: ffffffffffffffda RBX: 00007f5c16745fa0 RCX: 00007f5c1650ebe9 [ 40.444911][ T4047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 40.444969][ T4047] RBP: 00007f5c14f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 40.444982][ T4047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.444993][ T4047] R13: 00007f5c16746038 R14: 00007f5c16745fa0 R15: 00007fff1781aca8 [ 40.445009][ T4047] [ 40.702082][ T4050] loop0: detected capacity change from 0 to 128 [ 40.710168][ T4050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 40.720889][ T4050] System zones: 1-3, 19-19, 35-36 [ 40.733388][ T4054] process 'syz.4.149' launched './file0' with NULL argv: empty string added [ 40.751276][ T3999] lo speed is unknown, defaulting to 1000 [ 40.804144][ T4058] $Hÿ: renamed from bond0 (while UP) [ 40.821549][ T4058] $Hÿ: entered promiscuous mode [ 40.826684][ T4058] bond_slave_0: entered promiscuous mode [ 40.832416][ T4058] bond_slave_1: entered promiscuous mode [ 40.850699][ T4050] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 40.873744][ T4062] __nla_validate_parse: 13 callbacks suppressed [ 40.873759][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 40.899064][ T3999] lo speed is unknown, defaulting to 1000 [ 40.932195][ T4050] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.014069][ T4067] loop2: detected capacity change from 0 to 512 [ 41.021117][ T4067] EXT4-fs: dax option not supported [ 41.036913][ T4050] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.126555][ T4076] netlink: 144 bytes leftover after parsing attributes in process `syz.1.158'. [ 41.165048][ T4050] infiniband syz1: set active [ 41.169830][ T4050] infiniband syz1: added syz_tun [ 41.189059][ T4050] RDS/IB: syz1: added [ 41.193374][ T4050] smc: adding ib device syz1 with port count 1 [ 41.210749][ T4050] smc: ib device syz1 port 1 has pnetid [ 41.282237][ T4081] loop1: detected capacity change from 0 to 8192 [ 41.291768][ T4083] netlink: 64 bytes leftover after parsing attributes in process `syz.4.161'. [ 41.364609][ T4085] netlink: 64 bytes leftover after parsing attributes in process `syz.4.162'. [ 41.406408][ T4087] FAULT_INJECTION: forcing a failure. [ 41.406408][ T4087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.419545][ T4087] CPU: 1 UID: 0 PID: 4087 Comm: syz.4.163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.419632][ T4087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.419645][ T4087] Call Trace: [ 41.419652][ T4087] [ 41.419660][ T4087] __dump_stack+0x1d/0x30 [ 41.419706][ T4087] dump_stack_lvl+0xe8/0x140 [ 41.419724][ T4087] dump_stack+0x15/0x1b [ 41.419764][ T4087] should_fail_ex+0x265/0x280 [ 41.419787][ T4087] should_fail+0xb/0x20 [ 41.419810][ T4087] should_fail_usercopy+0x1a/0x20 [ 41.419834][ T4087] _copy_to_user+0x20/0xa0 [ 41.419859][ T4087] copy_siginfo_to_user+0x22/0xb0 [ 41.419947][ T4087] x64_setup_rt_frame+0x2b5/0x580 [ 41.419967][ T4087] arch_do_signal_or_restart+0x27c/0x480 [ 41.420005][ T4087] exit_to_user_mode_loop+0x7a/0x100 [ 41.420024][ T4087] do_syscall_64+0x1d6/0x200 [ 41.420117][ T4087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.420141][ T4087] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.420170][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.420237][ T4087] RIP: 0033:0x7f46e58febe7 [ 41.420251][ T4087] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 41.420309][ T4087] RSP: 002b:00007f46e4367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 41.420328][ T4087] RAX: 0000000000000113 RBX: 00007f46e5b35fa0 RCX: 00007f46e58febe9 [ 41.420339][ T4087] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000006 [ 41.420350][ T4087] RBP: 00007f46e4367090 R08: 0000000000000007 R09: 0000000000000009 [ 41.420362][ T4087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.420374][ T4087] R13: 00007f46e5b36038 R14: 00007f46e5b35fa0 R15: 00007ffeb96eb648 [ 41.420391][ T4087] [ 41.642961][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 41.653545][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 41.761314][ T4104] 9pnet_fd: Insufficient options for proto=fd [ 41.778271][ T4099] lo speed is unknown, defaulting to 1000 [ 42.010445][ T4114] loop2: detected capacity change from 0 to 1024 [ 42.049362][ T4114] EXT4-fs: Ignoring removed orlov option [ 42.055142][ T4114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.089324][ T4116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4116 comm=syz.1.170 [ 42.123808][ T4114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.153636][ T4123] netlink: 'syz.4.172': attribute type 29 has an invalid length. [ 42.190416][ T4123] netlink: 'syz.4.172': attribute type 29 has an invalid length. [ 42.211431][ T4125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.173'. [ 42.222312][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 42.222325][ T29] audit: type=1326 audit(1757001517.705:1118): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.252273][ T29] audit: type=1326 audit(1757001517.705:1119): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.276107][ T29] audit: type=1326 audit(1757001517.705:1120): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.299813][ T29] audit: type=1326 audit(1757001517.705:1121): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.304377][ T4123] netlink: 500 bytes leftover after parsing attributes in process `syz.4.172'. [ 42.323546][ T29] audit: type=1326 audit(1757001517.715:1122): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.332569][ T4123] unsupported nla_type 58 [ 42.360686][ T29] audit: type=1326 audit(1757001517.715:1123): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.384413][ T29] audit: type=1326 audit(1757001517.715:1124): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.408161][ T29] audit: type=1326 audit(1757001517.715:1125): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.432017][ T29] audit: type=1326 audit(1757001517.715:1126): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.456010][ T29] audit: type=1326 audit(1757001517.715:1127): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0660cbebe9 code=0x7ffc0000 [ 42.546350][ T4135] loop0: detected capacity change from 0 to 1024 [ 42.586748][ T4135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.607613][ T4135] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.623939][ T4151] loop4: detected capacity change from 0 to 1024 [ 42.631710][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 42.643821][ T4151] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.179: Failed to acquire dquot type 0 [ 42.656916][ T4151] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.675863][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /27/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 42.679882][ T4151] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.179: corrupted inode contents [ 42.708661][ T4151] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.179: mark_inode_dirty error [ 42.720136][ T4151] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.179: corrupted inode contents [ 42.720850][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 42.753834][ T4151] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.179: mark_inode_dirty error [ 42.754305][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 42.772593][ T4151] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.179: corrupted inode contents [ 42.797155][ T4151] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 42.797233][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 42.827524][ T4151] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.179: corrupted inode contents [ 42.841252][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 42.841294][ T4151] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.179: mark_inode_dirty error [ 42.841384][ T4151] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 42.890517][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 42.913172][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.922633][ T4151] EXT4-fs (loop4): 1 truncate cleaned up [ 42.928754][ T4151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.936515][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 43.717138][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 43.738043][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 43.760864][ T4151] lo speed is unknown, defaulting to 1000 [ 43.764637][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /27/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 43.809249][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 43.941277][ T4176] lo speed is unknown, defaulting to 1000 [ 44.012909][ T3391] syz1: Port: 1 Link DOWN [ 44.189445][ T4191] loop3: detected capacity change from 0 to 512 [ 44.197633][ T41] smc: removing ib device syz1 [ 44.205367][ T4191] msdos: Bad value for 'allow_utime' [ 44.221996][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.283386][ T4195] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 44.475361][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.507692][ T4199] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 44.556818][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.605540][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.620597][ T4226] FAULT_INJECTION: forcing a failure. [ 44.620597][ T4226] name failslab, interval 1, probability 0, space 0, times 0 [ 44.633275][ T4226] CPU: 1 UID: 0 PID: 4226 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.633299][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.633310][ T4226] Call Trace: [ 44.633315][ T4226] [ 44.633322][ T4226] __dump_stack+0x1d/0x30 [ 44.633342][ T4226] dump_stack_lvl+0xe8/0x140 [ 44.633423][ T4226] dump_stack+0x15/0x1b [ 44.633438][ T4226] should_fail_ex+0x265/0x280 [ 44.633456][ T4226] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 44.633476][ T4226] should_failslab+0x8c/0xb0 [ 44.633529][ T4226] __kmalloc_cache_noprof+0x4c/0x320 [ 44.633555][ T4226] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 44.633575][ T4226] nsim_fib_event_nb+0x1a0/0xcb0 [ 44.633599][ T4226] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 44.633696][ T4226] atomic_notifier_call_chain+0x76/0x1c0 [ 44.633813][ T4226] call_fib_notifiers+0x65/0xa0 [ 44.633842][ T4226] call_fib6_notifiers+0x30/0x40 [ 44.633865][ T4226] fib6_del+0x749/0x8b0 [ 44.633894][ T4226] ? fib6_del+0x261/0x8b0 [ 44.633992][ T4226] __ip6_del_rt+0x5e/0x120 [ 44.634009][ T4226] ip6_del_rt+0x69/0x90 [ 44.634053][ T4226] __ipv6_dev_ac_dec+0x271/0x310 [ 44.634075][ T4226] ipv6_dev_ac_dec+0x7d/0x110 [ 44.634095][ T4226] __ipv6_sock_ac_close+0x161/0x220 [ 44.634115][ T4226] ipv6_sock_ac_close+0x7a/0x90 [ 44.634132][ T4226] inet6_release+0x36/0x60 [ 44.634253][ T4226] sock_close+0x6b/0x150 [ 44.634281][ T4226] ? __pfx_sock_close+0x10/0x10 [ 44.634308][ T4226] __fput+0x29b/0x650 [ 44.634337][ T4226] fput_close_sync+0x6e/0x120 [ 44.634442][ T4226] __x64_sys_close+0x56/0xf0 [ 44.634460][ T4226] x64_sys_call+0x2738/0x2ff0 [ 44.634519][ T4226] do_syscall_64+0xd2/0x200 [ 44.634544][ T4226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.634565][ T4226] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.634597][ T4226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.634638][ T4226] RIP: 0033:0x7f0660cbebe9 [ 44.634653][ T4226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.634670][ T4226] RSP: 002b:00007f065f71f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 44.634708][ T4226] RAX: ffffffffffffffda RBX: 00007f0660ef5fa0 RCX: 00007f0660cbebe9 [ 44.634722][ T4226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 44.634733][ T4226] RBP: 00007f065f71f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.634746][ T4226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.634766][ T4226] R13: 00007f0660ef6038 R14: 00007f0660ef5fa0 R15: 00007ffd702a4248 [ 44.634783][ T4226] [ 44.933925][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.002376][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.015791][ T4221] lo speed is unknown, defaulting to 1000 [ 45.044885][ T4246] netlink: 'syz.1.208': attribute type 20 has an invalid length. [ 45.052755][ T4246] netlink: 'syz.1.208': attribute type 21 has an invalid length. [ 45.097876][ T41] bridge_slave_1: left allmulticast mode [ 45.103635][ T41] bridge_slave_1: left promiscuous mode [ 45.109285][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.117720][ T41] bridge_slave_0: left allmulticast mode [ 45.124660][ T41] bridge_slave_0: left promiscuous mode [ 45.126301][ T4247] hub 2-0:1.0: USB hub found [ 45.130563][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.135237][ T4247] hub 2-0:1.0: 8 ports detected [ 45.215739][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.225879][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.236232][ T41] bond0 (unregistering): Released all slaves [ 45.265948][ T4247] bridge0: port 3(macsec1) entered blocking state [ 45.272523][ T4247] bridge0: port 3(macsec1) entered disabled state [ 45.279363][ T4247] macsec1: entered allmulticast mode [ 45.285378][ T4247] macsec1: left allmulticast mode [ 45.367229][ T4221] chnl_net:caif_netlink_parms(): no params data found [ 45.392068][ T41] hsr_slave_0: left promiscuous mode [ 45.398878][ T41] hsr_slave_1: left promiscuous mode [ 45.413428][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.420853][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.434446][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.442047][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.453814][ T41] veth1_macvtap: left promiscuous mode [ 45.465260][ T4264] loop2: detected capacity change from 0 to 128 [ 45.469562][ T41] veth0_macvtap: left promiscuous mode [ 45.479164][ T4264] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.482331][ T41] veth1_vlan: left promiscuous mode [ 45.487093][ T4264] FAT-fs (loop2): Filesystem has been set read-only [ 45.492422][ T41] veth0_vlan: left promiscuous mode [ 45.501141][ T4264] syz.2.213: attempt to access beyond end of device [ 45.501141][ T4264] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 45.519222][ T4264] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.519535][ T4268] FAULT_INJECTION: forcing a failure. [ 45.519535][ T4268] name failslab, interval 1, probability 0, space 0, times 0 [ 45.527086][ T4264] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.539683][ T4268] CPU: 1 UID: 0 PID: 4268 Comm: syz.4.214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.539707][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.539753][ T4268] Call Trace: [ 45.539822][ T4268] [ 45.539906][ T4268] __dump_stack+0x1d/0x30 [ 45.539928][ T4268] dump_stack_lvl+0xe8/0x140 [ 45.539956][ T4268] dump_stack+0x15/0x1b [ 45.540016][ T4268] should_fail_ex+0x265/0x280 [ 45.540062][ T4268] should_failslab+0x8c/0xb0 [ 45.540087][ T4268] kmem_cache_alloc_node_noprof+0x57/0x320 [ 45.540140][ T4268] ? __alloc_skb+0x101/0x320 [ 45.540160][ T4268] __alloc_skb+0x101/0x320 [ 45.540180][ T4268] netlink_alloc_large_skb+0xba/0xf0 [ 45.540215][ T4268] netlink_sendmsg+0x3cf/0x6b0 [ 45.540308][ T4268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.540332][ T4268] __sock_sendmsg+0x142/0x180 [ 45.540361][ T4268] ____sys_sendmsg+0x31e/0x4e0 [ 45.540421][ T4268] ___sys_sendmsg+0x17b/0x1d0 [ 45.540456][ T4268] __x64_sys_sendmsg+0xd4/0x160 [ 45.540479][ T4268] x64_sys_call+0x191e/0x2ff0 [ 45.540516][ T4268] do_syscall_64+0xd2/0x200 [ 45.540607][ T4268] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.540659][ T4268] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.540686][ T4268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.540734][ T4268] RIP: 0033:0x7f46e58febe9 [ 45.540749][ T4268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.540766][ T4268] RSP: 002b:00007f46e4367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.540785][ T4268] RAX: ffffffffffffffda RBX: 00007f46e5b35fa0 RCX: 00007f46e58febe9 [ 45.540798][ T4268] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007 [ 45.540810][ T4268] RBP: 00007f46e4367090 R08: 0000000000000000 R09: 0000000000000000 [ 45.540822][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.540890][ T4268] R13: 00007f46e5b36038 R14: 00007f46e5b35fa0 R15: 00007ffeb96eb648 [ 45.540908][ T4268] [ 45.748460][ T4264] syz.2.213: attempt to access beyond end of device [ 45.748460][ T4264] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.763317][ T4264] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.771167][ T4264] syz.2.213: attempt to access beyond end of device [ 45.771167][ T4264] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 45.784833][ T4264] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.785007][ T4290] syz.2.213: attempt to access beyond end of device [ 45.785007][ T4290] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 45.792815][ T4264] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.813823][ T4290] Buffer I/O error on dev loop2, logical block 2065, async page read [ 45.823644][ T4290] syz.2.213: attempt to access beyond end of device [ 45.823644][ T4290] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 45.836979][ T4290] Buffer I/O error on dev loop2, logical block 2066, async page read [ 45.852570][ T4290] syz.2.213: attempt to access beyond end of device [ 45.852570][ T4290] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 45.865920][ T4290] Buffer I/O error on dev loop2, logical block 2067, async page read [ 45.877130][ T4290] syz.2.213: attempt to access beyond end of device [ 45.877130][ T4290] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 45.890402][ T4290] Buffer I/O error on dev loop2, logical block 2068, async page read [ 45.899728][ T4290] syz.2.213: attempt to access beyond end of device [ 45.899728][ T4290] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 45.912960][ T4290] Buffer I/O error on dev loop2, logical block 2069, async page read [ 45.916694][ T4299] __nla_validate_parse: 4 callbacks suppressed [ 45.916712][ T4299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.217'. [ 45.923092][ T4290] syz.2.213: attempt to access beyond end of device [ 45.923092][ T4290] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 45.949292][ T4290] Buffer I/O error on dev loop2, logical block 2070, async page read [ 45.957759][ T41] team0 (unregistering): Port device team_slave_1 removed [ 45.957785][ T4290] syz.2.213: attempt to access beyond end of device [ 45.957785][ T4290] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 45.978070][ T4290] Buffer I/O error on dev loop2, logical block 2071, async page read [ 45.986151][ T4290] Buffer I/O error on dev loop2, logical block 2072, async page read [ 45.986313][ T41] team0 (unregistering): Port device team_slave_0 removed [ 45.994312][ T4290] Buffer I/O error on dev loop2, logical block 2065, async page read [ 46.011269][ T4290] Buffer I/O error on dev loop2, logical block 2066, async page read [ 46.036147][ T4272] tipc: Started in network mode [ 46.041111][ T4272] tipc: Node identity 7ad48b07d241, cluster identity 4711 [ 46.048311][ T4272] tipc: Enabled bearer , priority 0 [ 46.089996][ T4307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.218'. [ 46.099661][ T4265] tipc: Disabling bearer [ 46.119607][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.126869][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.194739][ T4221] bridge_slave_0: entered allmulticast mode [ 46.215036][ T4221] bridge_slave_0: entered promiscuous mode [ 46.227877][ T4312] FAULT_INJECTION: forcing a failure. [ 46.227877][ T4312] name failslab, interval 1, probability 0, space 0, times 0 [ 46.232351][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.240620][ T4312] CPU: 0 UID: 0 PID: 4312 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.240708][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.240720][ T4312] Call Trace: [ 46.240776][ T4312] [ 46.240784][ T4312] __dump_stack+0x1d/0x30 [ 46.240806][ T4312] dump_stack_lvl+0xe8/0x140 [ 46.240825][ T4312] dump_stack+0x15/0x1b [ 46.240841][ T4312] should_fail_ex+0x265/0x280 [ 46.240934][ T4312] ? allocate_file_region_entries+0xd2/0x310 [ 46.240959][ T4312] should_failslab+0x8c/0xb0 [ 46.240982][ T4312] __kmalloc_cache_noprof+0x4c/0x320 [ 46.241011][ T4312] ? __pfx_workingset_update_node+0x10/0x10 [ 46.241089][ T4312] allocate_file_region_entries+0xd2/0x310 [ 46.241120][ T4312] region_chg+0x232/0x2d0 [ 46.241141][ T4312] alloc_hugetlb_folio+0x312/0x1070 [ 46.241177][ T4312] hugetlb_fault+0xd71/0x1b50 [ 46.241273][ T4312] handle_mm_fault+0x1861/0x2c20 [ 46.241299][ T4312] ? mt_find+0x200/0x320 [ 46.241328][ T4312] ? try_grab_folio+0x75/0x170 [ 46.241415][ T4312] ? down_read+0x77/0xe0 [ 46.241568][ T4312] __get_user_pages+0x102e/0x1fa0 [ 46.241600][ T4312] __mm_populate+0x243/0x3a0 [ 46.241625][ T4312] do_mlock+0x47f/0x520 [ 46.241698][ T4312] ? __bpf_trace_sys_enter+0x10/0x30 [ 46.241719][ T4312] ? trace_sys_enter+0xd0/0xf0 [ 46.241740][ T4312] __x64_sys_mlock+0x36/0x50 [ 46.241778][ T4312] x64_sys_call+0x18f8/0x2ff0 [ 46.241799][ T4312] do_syscall_64+0xd2/0x200 [ 46.241898][ T4312] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.241922][ T4312] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.241949][ T4312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.241971][ T4312] RIP: 0033:0x7f46e58febe9 [ 46.241986][ T4312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.242041][ T4312] RSP: 002b:00007f46e4367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 46.242060][ T4312] RAX: ffffffffffffffda RBX: 00007f46e5b35fa0 RCX: 00007f46e58febe9 [ 46.242072][ T4312] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 46.242089][ T4312] RBP: 00007f46e4367090 R08: 0000000000000000 R09: 0000000000000000 [ 46.242105][ T4312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.242117][ T4312] R13: 00007f46e5b36038 R14: 00007f46e5b35fa0 R15: 00007ffeb96eb648 [ 46.242153][ T4312] [ 46.247194][ T4316] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 46.247666][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.298407][ T4317] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 46.329525][ T4221] bridge_slave_1: entered allmulticast mode [ 46.467689][ T4324] loop1: detected capacity change from 0 to 8192 [ 46.477017][ T4221] bridge_slave_1: entered promiscuous mode [ 46.528087][ T4316] team0: Port device dummy0 added [ 46.538120][ T4317] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.549971][ T4317] team0: Failed to send options change via netlink (err -105) [ 46.559050][ T4317] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.564856][ T4327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 46.568347][ T4322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 46.577824][ T4317] team0: Port device dummy0 removed [ 46.624404][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.635328][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.672054][ T4333] loop1: detected capacity change from 0 to 512 [ 46.673936][ T4221] team0: Port device team_slave_0 added [ 46.689483][ T4333] EXT4-fs: dax option not supported [ 46.689996][ T4221] team0: Port device team_slave_1 added [ 46.722854][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.729834][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.755810][ T4221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.767786][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.774800][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.800844][ T4221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.818234][ T4343] loop1: detected capacity change from 0 to 1024 [ 46.825453][ T4343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.832703][ T4343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.840563][ T4345] loop3: detected capacity change from 0 to 512 [ 46.858709][ T4336] loop2: detected capacity change from 0 to 1024 [ 46.867601][ T4221] hsr_slave_0: entered promiscuous mode [ 46.867655][ T4345] EXT4-fs: dax option not supported [ 46.874083][ T4221] hsr_slave_1: entered promiscuous mode [ 46.885695][ T4221] debugfs: 'hsr0' already exists in 'hsr' [ 46.891431][ T4221] Cannot create hsr debugfs directory [ 46.892376][ T4336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.903629][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.984593][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.986134][ T4221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.003222][ T4221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.011952][ T4221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.021279][ T4221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.039222][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.046334][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.053784][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.060906][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.091018][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.101357][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.109339][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.124924][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.134956][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.142037][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.159390][ T4366] loop1: detected capacity change from 0 to 1024 [ 47.161131][ T4221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.173749][ T4366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.176195][ T4221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.188448][ T4366] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.210413][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.217519][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.237746][ T29] kauditd_printk_skb: 884 callbacks suppressed [ 47.237761][ T29] audit: type=1400 audit(1757001522.755:2010): avc: denied { create } for pid=4365 comm="syz.1.238" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.239085][ T4366] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.238: lblock 1 mapped to illegal pblock 1 (length 7) [ 47.265738][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.286282][ T4366] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 47.298862][ T4366] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.298862][ T4366] [ 47.316084][ T4366] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 7: comm syz.1.238: lblock 7 mapped to illegal pblock 7 (length 1) [ 47.330587][ T4366] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 47.352867][ T4366] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.238: lblock 3 mapped to illegal pblock 3 (length 4) [ 47.367458][ T4366] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 4 with error 117 [ 47.379794][ T4366] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.379794][ T4366] [ 47.400527][ T29] audit: type=1326 audit(1757001522.915:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.417256][ T4221] veth0_vlan: entered promiscuous mode [ 47.433475][ T4221] veth1_vlan: entered promiscuous mode [ 47.438571][ T29] audit: type=1326 audit(1757001522.945:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.452094][ T4221] veth0_macvtap: entered promiscuous mode [ 47.461952][ T29] audit: type=1326 audit(1757001522.945:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.471789][ T4221] veth1_macvtap: entered promiscuous mode [ 47.491008][ T29] audit: type=1326 audit(1757001522.945:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.503755][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.519611][ T29] audit: type=1326 audit(1757001522.945:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.537158][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.549913][ T29] audit: type=1326 audit(1757001522.945:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.562076][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.580107][ T29] audit: type=1400 audit(1757001522.945:2017): avc: denied { write } for pid=4365 comm="+}[@" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.595709][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.611886][ T29] audit: type=1326 audit(1757001522.945:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.643717][ T29] audit: type=1326 audit(1757001522.945:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 47.676856][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.687603][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.717445][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 47.726911][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.737022][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.740230][ T4394] loop4: detected capacity change from 0 to 1024 [ 47.785504][ T4394] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.242: Failed to acquire dquot type 0 [ 47.799043][ T4404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.245'. [ 47.807480][ T4394] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.808025][ T4404] netlink: 43 bytes leftover after parsing attributes in process `syz.3.245'. [ 47.831266][ T4404] netlink: 'syz.3.245': attribute type 5 has an invalid length. [ 47.838946][ T4404] netlink: 43 bytes leftover after parsing attributes in process `syz.3.245'. [ 47.849545][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 47.861435][ T4394] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.242: corrupted inode contents [ 47.880637][ T4415] loop2: detected capacity change from 0 to 164 [ 47.889079][ T4394] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.242: mark_inode_dirty error [ 47.911239][ T4394] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.242: corrupted inode contents [ 47.926659][ T4394] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.242: mark_inode_dirty error [ 47.938649][ T4394] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.242: corrupted inode contents [ 47.951482][ T4394] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 47.960646][ T4394] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.242: corrupted inode contents [ 47.973958][ T4394] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.242: mark_inode_dirty error [ 48.000996][ T4394] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 48.014852][ T4425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.252'. [ 48.024207][ T4394] EXT4-fs (loop4): 1 truncate cleaned up [ 48.030197][ T4394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.050060][ T4430] loop5: detected capacity change from 0 to 512 [ 48.058122][ T4430] EXT4-fs: dax option not supported [ 48.129257][ T4423] Unsupported NM flag settings (8) [ 48.171101][ T4423] Unsupported NM flag settings (8) [ 48.186312][ T4443] loop3: detected capacity change from 0 to 1024 [ 48.193277][ T4443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.200079][ T4443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.210428][ T4443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.307772][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.660263][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.690954][ T4454] loop4: detected capacity change from 0 to 1024 [ 48.698269][ T4454] EXT4-fs: Ignoring removed orlov option [ 48.703972][ T4454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.717859][ T4454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.770554][ T4460] loop1: detected capacity change from 0 to 1024 [ 48.777497][ T4460] EXT4-fs: Ignoring removed orlov option [ 48.783277][ T4460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.794918][ T4460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.908407][ T4482] loop2: detected capacity change from 0 to 2048 [ 48.925486][ T4482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.943068][ T4482] EXT4-fs (loop2): shut down requested (0) [ 48.963502][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.985910][ T4498] loop2: detected capacity change from 0 to 512 [ 49.003842][ T4498] EXT4-fs error (device loop2): ext4_quota_enable:7128: inode #3: comm syz.2.274: unexpected EA_INODE flag [ 49.015796][ T4498] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.274: Bad quota inode: 3, type: 0 [ 49.027047][ T4498] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.044349][ T4498] EXT4-fs (loop2): mount failed [ 49.097760][ T4506] loop2: detected capacity change from 0 to 8192 [ 49.160164][ T4508] loop2: detected capacity change from 0 to 8192 [ 49.219412][ T4512] syzkaller0: entered promiscuous mode [ 49.223651][ T4514] loop3: detected capacity change from 0 to 1024 [ 49.225000][ T4512] syzkaller0: entered allmulticast mode [ 49.231750][ T4514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.244179][ T4514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.256569][ T4514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.288354][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.514348][ T4548] loop2: detected capacity change from 0 to 8192 [ 49.535749][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.623961][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.643625][ T4558] syzkaller0: entered promiscuous mode [ 49.649200][ T4558] syzkaller0: entered allmulticast mode [ 49.712863][ T4567] netlink: zone id is out of range [ 49.718047][ T4567] netlink: set zone limit has 4 unknown bytes [ 49.751251][ T4570] loop4: detected capacity change from 0 to 1024 [ 49.799802][ T4575] loop2: detected capacity change from 0 to 1024 [ 49.808637][ T4570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.822688][ T4575] EXT4-fs: Ignoring removed orlov option [ 49.828518][ T4575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.883098][ T4575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.897356][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.904849][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.912377][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.919841][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.927420][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.934933][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.942346][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.949764][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.957186][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.964645][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.973298][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 49.973402][ T4579] loop5: detected capacity change from 0 to 8192 [ 50.022202][ T4570] loop4: detected capacity change from 1024 to 0 [ 50.022447][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 50.038420][ C0] I/O error, dev loop4, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 50.048116][ C0] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 50.057768][ T4585] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #15: block 8: comm syz.4.299: unable to read itable block [ 50.077435][ C0] I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 50.089144][ T4570] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.299: reading directory lblock 0 [ 50.091027][ T4591] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 50.118252][ C0] I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 50.128133][ C0] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 50.137771][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 50.148444][ T3304] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 50.161712][ T3304] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 50.172704][ T3304] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 50.192874][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 50.193287][ C0] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 50.212195][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:0: unable to read itable block [ 50.226541][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.247000][ T4601] loop5: detected capacity change from 0 to 1024 [ 50.263605][ T4601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.276158][ T4601] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.289513][ T4601] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.311: lblock 1 mapped to illegal pblock 1 (length 7) [ 50.304379][ T4601] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 50.316781][ T4601] EXT4-fs (loop5): This should not happen!! Data will be lost [ 50.316781][ T4601] [ 50.327482][ T4601] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 7: comm syz.5.311: lblock 7 mapped to illegal pblock 7 (length 1) [ 50.341706][ T4601] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.311: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 50.360972][ T4601] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.311: lblock 3 mapped to illegal pblock 3 (length 4) [ 50.375346][ T4601] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 4 with error 117 [ 50.387723][ T4601] EXT4-fs (loop5): This should not happen!! Data will be lost [ 50.387723][ T4601] [ 50.415706][ T4221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.445735][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.486781][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.550046][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.595784][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.607812][ T4609] lo speed is unknown, defaulting to 1000 [ 50.643563][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.671811][ T4633] loop5: detected capacity change from 0 to 1024 [ 50.679346][ T4633] EXT4-fs: Ignoring removed nobh option [ 50.697060][ T4633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.719195][ T12] bridge_slave_1: left allmulticast mode [ 50.725131][ T12] bridge_slave_1: left promiscuous mode [ 50.730972][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.741766][ T12] bridge_slave_0: left allmulticast mode [ 50.747576][ T12] bridge_slave_0: left promiscuous mode [ 50.753259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.763327][ T4633] FAULT_INJECTION: forcing a failure. [ 50.763327][ T4633] name failslab, interval 1, probability 0, space 0, times 0 [ 50.776020][ T4633] CPU: 0 UID: 0 PID: 4633 Comm: syz.5.324 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.776051][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.776065][ T4633] Call Trace: [ 50.776072][ T4633] [ 50.776081][ T4633] __dump_stack+0x1d/0x30 [ 50.776149][ T4633] dump_stack_lvl+0xe8/0x140 [ 50.776166][ T4633] dump_stack+0x15/0x1b [ 50.776183][ T4633] should_fail_ex+0x265/0x280 [ 50.776244][ T4633] should_failslab+0x8c/0xb0 [ 50.776270][ T4633] kmem_cache_alloc_noprof+0x50/0x310 [ 50.776302][ T4633] ? __es_insert_extent+0x508/0xee0 [ 50.776375][ T4633] __es_insert_extent+0x508/0xee0 [ 50.776439][ T4633] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 50.776464][ T4633] ? ext4_find_extent+0x16b/0x7a0 [ 50.776540][ T4633] ? should_fail_ex+0xdb/0x280 [ 50.776567][ T4633] ext4_es_insert_extent+0x435/0x1c10 [ 50.776597][ T4633] ext4_ext_map_blocks+0x172b/0x38a0 [ 50.776628][ T4633] ext4_map_query_blocks+0xa8/0x480 [ 50.776734][ T4633] ext4_map_blocks+0x330/0xd00 [ 50.776761][ T4633] ? obj_cgroup_charge_account+0x122/0x1a0 [ 50.776814][ T4633] _ext4_get_block+0x10a/0x350 [ 50.776840][ T4633] ext4_get_block_unwritten+0x2a/0xb0 [ 50.776943][ T4633] ext4_block_write_begin+0x5e5/0xc00 [ 50.776976][ T4633] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 50.777004][ T4633] ? folio_mapping+0xb9/0x120 [ 50.777054][ T4633] ext4_write_begin+0x647/0xeb0 [ 50.777080][ T4633] ext4_da_write_begin+0x1fb/0x6e0 [ 50.777103][ T4633] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 50.777195][ T4633] generic_perform_write+0x181/0x490 [ 50.777224][ T4633] ext4_buffered_write_iter+0x1ee/0x3c0 [ 50.777257][ T4633] ? ext4_file_write_iter+0xfe/0xf00 [ 50.777356][ T4633] ext4_file_write_iter+0x383/0xf00 [ 50.777386][ T4633] ? 0xffffffff81000000 [ 50.777400][ T4633] ? __rcu_read_unlock+0x4f/0x70 [ 50.777423][ T4633] ? avc_policy_seqno+0x15/0x30 [ 50.777458][ T4633] ? selinux_file_permission+0x1e4/0x320 [ 50.777482][ T4633] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 50.777546][ T4633] vfs_write+0x527/0x960 [ 50.777578][ T4633] __x64_sys_pwrite64+0xfd/0x150 [ 50.777604][ T4633] x64_sys_call+0xc4d/0x2ff0 [ 50.777627][ T4633] do_syscall_64+0xd2/0x200 [ 50.777728][ T4633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.777752][ T4633] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.777781][ T4633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.777803][ T4633] RIP: 0033:0x7f3dbff0ebe9 [ 50.777815][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.777910][ T4633] RSP: 002b:00007f3dbe96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 50.777930][ T4633] RAX: ffffffffffffffda RBX: 00007f3dc0145fa0 RCX: 00007f3dbff0ebe9 [ 50.777943][ T4633] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000006 [ 50.777975][ T4633] RBP: 00007f3dbe96f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.777986][ T4633] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 50.777996][ T4633] R13: 00007f3dc0146038 R14: 00007f3dc0145fa0 R15: 00007ffcd8e16148 [ 50.778011][ T4633] [ 51.102482][ T4644] loop2: detected capacity change from 0 to 8192 [ 51.130804][ T4221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.159701][ T4650] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.254680][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.264091][ T12] bond_slave_0: left promiscuous mode [ 51.270639][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.279823][ T12] bond_slave_1: left promiscuous mode [ 51.285975][ T12] $Hÿ (unregistering): Released all slaves [ 51.326750][ T4672] __nla_validate_parse: 13 callbacks suppressed [ 51.326763][ T4672] netlink: 64 bytes leftover after parsing attributes in process `syz.3.337'. [ 51.395271][ T4677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.456407][ T4681] FAULT_INJECTION: forcing a failure. [ 51.456407][ T4681] name failslab, interval 1, probability 0, space 0, times 0 [ 51.469120][ T4681] CPU: 0 UID: 0 PID: 4681 Comm: syz.5.341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.469145][ T4681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.469156][ T4681] Call Trace: [ 51.469163][ T4681] [ 51.469171][ T4681] __dump_stack+0x1d/0x30 [ 51.469193][ T4681] dump_stack_lvl+0xe8/0x140 [ 51.469250][ T4681] dump_stack+0x15/0x1b [ 51.469264][ T4681] should_fail_ex+0x265/0x280 [ 51.469283][ T4681] ? audit_log_d_path+0x8d/0x150 [ 51.469328][ T4681] should_failslab+0x8c/0xb0 [ 51.469361][ T4681] __kmalloc_cache_noprof+0x4c/0x320 [ 51.469403][ T4681] audit_log_d_path+0x8d/0x150 [ 51.469431][ T4681] audit_log_d_path_exe+0x42/0x70 [ 51.469487][ T4681] audit_log_task+0x1e9/0x250 [ 51.469513][ T4681] audit_seccomp+0x61/0x100 [ 51.469539][ T4681] ? __seccomp_filter+0x68c/0x10d0 [ 51.469618][ T4681] __seccomp_filter+0x69d/0x10d0 [ 51.469641][ T4681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.469705][ T4681] ? vfs_write+0x7e8/0x960 [ 51.469727][ T4681] ? __rcu_read_unlock+0x4f/0x70 [ 51.469750][ T4681] ? __fget_files+0x184/0x1c0 [ 51.469778][ T4681] __secure_computing+0x82/0x150 [ 51.469886][ T4681] syscall_trace_enter+0xcf/0x1e0 [ 51.469912][ T4681] do_syscall_64+0xac/0x200 [ 51.469970][ T4681] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.469991][ T4681] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.470017][ T4681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.470054][ T4681] RIP: 0033:0x7f3dbff0ebe9 [ 51.470070][ T4681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.470085][ T4681] RSP: 002b:00007f3dbe96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 51.470101][ T4681] RAX: ffffffffffffffda RBX: 00007f3dc0145fa0 RCX: 00007f3dbff0ebe9 [ 51.470112][ T4681] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000006 [ 51.470122][ T4681] RBP: 00007f3dbe96f090 R08: 0000200000000140 R09: 0000000000000000 [ 51.470133][ T4681] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 51.470173][ T4681] R13: 00007f3dc0146038 R14: 00007f3dc0145fa0 R15: 00007ffcd8e16148 [ 51.470192][ T4681] [ 51.471765][ T4609] chnl_net:caif_netlink_parms(): no params data found [ 51.596009][ T4679] loop3: detected capacity change from 0 to 8192 [ 51.710944][ T12] hsr_slave_0: left promiscuous mode [ 51.716825][ T12] hsr_slave_1: left promiscuous mode [ 51.722570][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.729967][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.739606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.747025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.767189][ T12] veth1_macvtap: left promiscuous mode [ 51.772820][ T12] veth0_macvtap: left promiscuous mode [ 51.778480][ T12] veth1_vlan: left promiscuous mode [ 51.784006][ T12] veth0_vlan: left promiscuous mode [ 51.809918][ T4688] loop5: detected capacity change from 0 to 256 [ 51.820507][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 51.848297][ T4690] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 51.858230][ T4690] FAT-fs (loop7): unable to read boot sector [ 51.949286][ T12] team0 (unregistering): Port device team_slave_1 removed [ 51.977101][ T12] team0 (unregistering): Port device team_slave_0 removed [ 52.012509][ T12] team0 (unregistering): Port device dummy0 removed [ 52.046527][ T4677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.156396][ T4706] netlink: 64 bytes leftover after parsing attributes in process `syz.3.350'. [ 52.216881][ T4677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.302527][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 52.302555][ T29] audit: type=1400 audit(1757001527.815:2614): avc: denied { read write } for pid=4711 comm="syz.2.347" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.332122][ T29] audit: type=1400 audit(1757001527.815:2615): avc: denied { open } for pid=4711 comm="syz.2.347" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.378725][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.385977][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.428307][ T4609] bridge_slave_0: entered allmulticast mode [ 52.443022][ T4609] bridge_slave_0: entered promiscuous mode [ 52.454028][ T4677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.468367][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.475524][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.483896][ T4609] bridge_slave_1: entered allmulticast mode [ 52.490481][ T4609] bridge_slave_1: entered promiscuous mode [ 52.527105][ T3315] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.538882][ T3315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.548554][ T4609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.559051][ T4609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.575405][ T3315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.589775][ T4609] team0: Port device team_slave_0 added [ 52.595723][ T3315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.604925][ T4609] team0: Port device team_slave_1 added [ 52.628975][ T4609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.636052][ T4609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.662195][ T4609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.674145][ T4609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.681194][ T4609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.707111][ T4609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.752268][ T4609] hsr_slave_0: entered promiscuous mode [ 52.758468][ T4609] hsr_slave_1: entered promiscuous mode [ 52.764706][ T4609] debugfs: 'hsr0' already exists in 'hsr' [ 52.770449][ T4609] Cannot create hsr debugfs directory [ 52.833431][ T4733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.359'. [ 52.854950][ T4609] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.868659][ T4609] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.877934][ T4609] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.888535][ T4609] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.897262][ T4735] tipc: Enabled bearer , priority 0 [ 52.908205][ T4735] tipc: Resetting bearer [ 52.915978][ T4734] tipc: Disabling bearer [ 52.946886][ T4609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.958925][ T4609] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.974328][ T4743] netlink: 64 bytes leftover after parsing attributes in process `syz.5.361'. [ 52.986067][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.993216][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.004321][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.011479][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.094257][ T4609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.104501][ T29] audit: type=1400 audit(1757001528.625:2616): avc: denied { listen } for pid=4756 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 53.165363][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.367'. [ 53.254469][ T4609] veth0_vlan: entered promiscuous mode [ 53.271114][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.368'. [ 53.289933][ T4609] veth1_vlan: entered promiscuous mode [ 53.308046][ T4609] veth0_macvtap: entered promiscuous mode [ 53.328245][ T4609] veth1_macvtap: entered promiscuous mode [ 53.365989][ T4609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.385727][ T4790] tipc: Started in network mode [ 53.390674][ T4790] tipc: Node identity 5e02cfff66f6, cluster identity 4711 [ 53.397839][ T4790] tipc: Enabled bearer , priority 0 [ 53.410047][ T4609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.418274][ T4792] FAULT_INJECTION: forcing a failure. [ 53.418274][ T4792] name failslab, interval 1, probability 0, space 0, times 0 [ 53.422844][ T269] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.430982][ T4792] CPU: 1 UID: 0 PID: 4792 Comm: syz.3.373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.431010][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.431022][ T4792] Call Trace: [ 53.431080][ T4792] [ 53.431089][ T4792] __dump_stack+0x1d/0x30 [ 53.431118][ T4792] dump_stack_lvl+0xe8/0x140 [ 53.431136][ T4792] dump_stack+0x15/0x1b [ 53.431152][ T4792] should_fail_ex+0x265/0x280 [ 53.431174][ T4792] ? process_preds+0x9e9/0x2bb0 [ 53.431192][ T4792] should_failslab+0x8c/0xb0 [ 53.431259][ T4792] __kmalloc_cache_noprof+0x4c/0x320 [ 53.431337][ T4792] process_preds+0x9e9/0x2bb0 [ 53.431359][ T4792] ? avc_has_perm_noaudit+0x1b1/0x200 [ 53.431390][ T4792] ftrace_profile_set_filter+0xff/0x1b0 [ 53.431409][ T4792] perf_ioctl+0x7b3/0x12e0 [ 53.431440][ T4792] ? ioctl_has_perm+0x289/0x2a0 [ 53.431462][ T4792] ? do_vfs_ioctl+0x866/0xe10 [ 53.431480][ T4792] ? selinux_file_ioctl+0x308/0x3a0 [ 53.431498][ T4792] ? __fget_files+0x184/0x1c0 [ 53.431551][ T4792] ? __pfx_perf_ioctl+0x10/0x10 [ 53.431665][ T4792] __se_sys_ioctl+0xce/0x140 [ 53.431683][ T4792] __x64_sys_ioctl+0x43/0x50 [ 53.431700][ T4792] x64_sys_call+0x1816/0x2ff0 [ 53.431722][ T4792] do_syscall_64+0xd2/0x200 [ 53.431754][ T4792] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.431777][ T4792] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.431803][ T4792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.431825][ T4792] RIP: 0033:0x7f5c1650ebe9 [ 53.431841][ T4792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.431931][ T4792] RSP: 002b:00007f5c14f6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.431950][ T4792] RAX: ffffffffffffffda RBX: 00007f5c16745fa0 RCX: 00007f5c1650ebe9 [ 53.431962][ T4792] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000003 [ 53.431974][ T4792] RBP: 00007f5c14f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.431986][ T4792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.431999][ T4792] R13: 00007f5c16746038 R14: 00007f5c16745fa0 R15: 00007fff1781aca8 [ 53.432079][ T4792] [ 53.468175][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.374'. [ 53.474480][ T4790] tipc: Resetting bearer [ 53.646202][ T4796] netlink: 60 bytes leftover after parsing attributes in process `syz.5.374'. [ 53.680584][ T4789] tipc: Disabling bearer [ 53.705029][ T29] audit: type=1326 audit(1757001529.225:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 53.728722][ T29] audit: type=1326 audit(1757001529.225:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 53.752481][ T29] audit: type=1326 audit(1757001529.225:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 53.776002][ T29] audit: type=1326 audit(1757001529.225:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 53.799490][ T29] audit: type=1326 audit(1757001529.225:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1225e1d550 code=0x7ffc0000 [ 53.823064][ T29] audit: type=1400 audit(1757001529.225:2622): avc: denied { write } for pid=4800 comm="syz.1.376" name="event2" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.846598][ T29] audit: type=1326 audit(1757001529.225:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4800 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1225e1ebe9 code=0x7ffc0000 [ 53.871806][ T269] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.885164][ T269] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.914350][ T269] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.933577][ T4810] loop1: detected capacity change from 0 to 1024 [ 53.942421][ T4810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.949883][ T4807] loop2: detected capacity change from 0 to 8192 [ 53.957230][ T4810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.969247][ T4810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.045904][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.059091][ T4820] macvtap0: refused to change device tx_queue_len [ 54.091477][ T4828] loop1: detected capacity change from 0 to 128 [ 54.110533][ T4828] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.115053][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.387'. [ 54.123468][ T4828] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.147718][ T4828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4828 comm=syz.1.385 [ 54.160183][ T4828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4828 comm=syz.1.385 [ 54.220390][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.264670][ T4846] FAULT_INJECTION: forcing a failure. [ 54.264670][ T4846] name failslab, interval 1, probability 0, space 0, times 0 [ 54.277401][ T4846] CPU: 0 UID: 0 PID: 4846 Comm: syz.6.391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.277430][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.277443][ T4846] Call Trace: [ 54.277448][ T4846] [ 54.277456][ T4846] __dump_stack+0x1d/0x30 [ 54.277478][ T4846] dump_stack_lvl+0xe8/0x140 [ 54.277556][ T4846] dump_stack+0x15/0x1b [ 54.277574][ T4846] should_fail_ex+0x265/0x280 [ 54.277596][ T4846] should_failslab+0x8c/0xb0 [ 54.277678][ T4846] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.277708][ T4846] ? __alloc_skb+0x101/0x320 [ 54.277795][ T4846] ? __account_obj_stock+0x211/0x350 [ 54.277817][ T4846] __alloc_skb+0x101/0x320 [ 54.277836][ T4846] _sctp_make_chunk+0x59/0x210 [ 54.277900][ T4846] sctp_make_abort_user+0x4c/0x3a0 [ 54.277928][ T4846] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 54.278032][ T4846] sctp_sendmsg+0x10bb/0x18d0 [ 54.278068][ T4846] ? __pfx_sctp_sendmsg+0x10/0x10 [ 54.278097][ T4846] inet_sendmsg+0xc2/0xd0 [ 54.278202][ T4846] __sock_sendmsg+0x102/0x180 [ 54.278228][ T4846] ____sys_sendmsg+0x31e/0x4e0 [ 54.278251][ T4846] ___sys_sendmsg+0x17b/0x1d0 [ 54.278284][ T4846] __x64_sys_sendmsg+0xd4/0x160 [ 54.278391][ T4846] x64_sys_call+0x191e/0x2ff0 [ 54.278413][ T4846] do_syscall_64+0xd2/0x200 [ 54.278438][ T4846] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.278490][ T4846] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.278520][ T4846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.278617][ T4846] RIP: 0033:0x7fa717a1ebe9 [ 54.278671][ T4846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.278741][ T4846] RSP: 002b:00007fa71645e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.278758][ T4846] RAX: ffffffffffffffda RBX: 00007fa717c56090 RCX: 00007fa717a1ebe9 [ 54.278773][ T4846] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 54.278784][ T4846] RBP: 00007fa71645e090 R08: 0000000000000000 R09: 0000000000000000 [ 54.278798][ T4846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.278890][ T4846] R13: 00007fa717c56128 R14: 00007fa717c56090 R15: 00007ffdeff3e0a8 [ 54.278907][ T4846] [ 54.750152][ T36] hid-generic 0000:0000:0000.0002: item fetching failed at offset 8/43 [ 54.758855][ T36] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 54.916901][ T4883] capability: warning: `syz.5.408' uses 32-bit capabilities (legacy support in use) [ 54.939623][ T4890] loop2: detected capacity change from 0 to 2048 [ 54.976514][ T4889] loop1: detected capacity change from 0 to 8192 [ 55.049458][ T4897] loop1: detected capacity change from 0 to 1024 [ 55.057042][ T4897] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.068167][ T4897] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.078978][ T4897] JBD2: no valid journal superblock found [ 55.084873][ T4897] EXT4-fs (loop1): Could not load journal inode [ 55.102208][ T4895] hub 2-0:1.0: USB hub found [ 55.103071][ T4901] loop6: detected capacity change from 0 to 512 [ 55.110432][ T4895] hub 2-0:1.0: 8 ports detected [ 55.116609][ T4901] EXT4-fs: dax option not supported [ 55.132973][ T4895] bridge0: port 3(macsec1) entered blocking state [ 55.139463][ T4895] bridge0: port 3(macsec1) entered disabled state [ 55.146287][ T4895] macsec1: entered allmulticast mode [ 55.152344][ T4895] macsec1: left allmulticast mode [ 55.231229][ T4907] netlink: '+}[@': attribute type 10 has an invalid length. [ 55.260998][ T4916] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.326598][ T4918] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.395158][ T4925] loop5: detected capacity change from 0 to 1024 [ 55.401903][ T4925] EXT4-fs: Ignoring removed orlov option [ 55.409456][ T4925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.453480][ T4927] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.464634][ T4927] bridge_slave_1 (unregistering): left allmulticast mode [ 55.471700][ T4927] bridge_slave_1 (unregistering): left promiscuous mode [ 55.478732][ T4927] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.517080][ T4930] ================================================================== [ 55.525240][ T4930] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 55.533237][ T4930] [ 55.535552][ T4930] write to 0xffff888119053a18 of 4 bytes by task 4925 on cpu 1: [ 55.543188][ T4930] writeback_single_inode+0x14a/0x3e0 [ 55.548672][ T4930] sync_inode_metadata+0x5b/0x90 [ 55.553622][ T4930] generic_buffers_fsync_noflush+0xd9/0x120 [ 55.559523][ T4930] ext4_sync_file+0x1ab/0x690 [ 55.564205][ T4930] vfs_fsync_range+0x10a/0x130 [ 55.568977][ T4930] ext4_buffered_write_iter+0x34f/0x3c0 [ 55.574554][ T4930] ext4_file_write_iter+0x383/0xf00 [ 55.579769][ T4930] iter_file_splice_write+0x666/0xa60 [ 55.585146][ T4930] direct_splice_actor+0x156/0x2a0 [ 55.590266][ T4930] splice_direct_to_actor+0x312/0x680 [ 55.595641][ T4930] do_splice_direct+0xda/0x150 [ 55.600399][ T4930] do_sendfile+0x380/0x650 [ 55.604812][ T4930] __x64_sys_sendfile64+0x105/0x150 [ 55.610011][ T4930] x64_sys_call+0x2bb0/0x2ff0 [ 55.614686][ T4930] do_syscall_64+0xd2/0x200 [ 55.619187][ T4930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.625074][ T4930] [ 55.627391][ T4930] read to 0xffff888119053a18 of 4 bytes by task 4930 on cpu 0: [ 55.634919][ T4930] vfs_fsync_range+0x9b/0x130 [ 55.639629][ T4930] ext4_buffered_write_iter+0x34f/0x3c0 [ 55.645179][ T4930] ext4_file_write_iter+0x383/0xf00 [ 55.650386][ T4930] iter_file_splice_write+0x666/0xa60 [ 55.655755][ T4930] direct_splice_actor+0x156/0x2a0 [ 55.660858][ T4930] splice_direct_to_actor+0x312/0x680 [ 55.666223][ T4930] do_splice_direct+0xda/0x150 [ 55.670981][ T4930] do_sendfile+0x380/0x650 [ 55.675394][ T4930] __x64_sys_sendfile64+0x105/0x150 [ 55.680588][ T4930] x64_sys_call+0x2bb0/0x2ff0 [ 55.685256][ T4930] do_syscall_64+0xd2/0x200 [ 55.689757][ T4930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.695641][ T4930] [ 55.697949][ T4930] value changed: 0x00000038 -> 0x00000002 [ 55.703657][ T4930] [ 55.705968][ T4930] Reported by Kernel Concurrency Sanitizer on: [ 55.712112][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.5.425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.721738][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.731795][ T4930] ================================================================== [ 55.814204][ T4221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.