last executing test programs: 37.670621462s ago: executing program 2 (id=795): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0xfffffffe, 0xded6b11ebaf9e58d}, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x884) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='xprtrdma_marshal_failed\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) 37.638263623s ago: executing program 2 (id=797): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x2000000, 0x0, 0x40480d0}, 0x40) 37.562290264s ago: executing program 2 (id=799): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000002380)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) shmdt(0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000580)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$eJzs3V1v08gawPHHpYUoR6qODkcIVQWGco5UpBKcBIIirnycSTqQ2JHtoPaKU9EUVaRwRDnSthfLcsPuSrsfgtv9EPuN0N7vXrCynfQtb6zSNgj9f1E7E3vsecaNZurWHgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdh23pK68Vpraji3EviNw7fdrfsWyO1jyYh6Raz4SzIZuZouuvrPw9VX4m9L//02fbcomTjJyP7frvz94eXZmd72IwI+F7t7+y82Op3262kHcnZ+/3Rp+Mqa9kzom4ZT08qEviqXSvbd1Wqoqqauw/Uw0g3lBtqJ/EAtu7dVvlwuKp1b91tereLUdW/hgzsF2y6pR7mmdoLQ9+4+yoXuqqnXjVdLysSr4zIP4g/iYxOpSDsNpba2O+3iuBbEhfKfU6gwrlDBLhTy+UIhX7pfvv/Atmf7FtgnSF+J6X9oMV2n2HsDk5npjv9SFyOetGRN1MCXKxUJxJfGkPVdvfH/33f1yHqPjv+L6aLFq4erF+JvS3I9fXd92Pg/JJbze+3KnuzLC9mQjnSkLa+nHtH5vmqixRMjofhipCFOskR1lygpS0lKYstTWZWqhKKkKkbqoiWUdQklEp18olwJRIsjkfgSiJJlceW2KMlLWcpSFCVacrIuvrTEk5pUxEn2siXbyXEvirKGxXhQKD+0Gdne564thRGtZfzH5E61/wYm8ak3/gMAAAAAgK+Wlfz1PT7/n5NrSa5q6tqedlgAAAAAAOAUJf/5X4yTuTh3TSzO/wEAAAAA+NpYyT12lohk5Uaa2xIruV1q0B8BLkwhRAAAAAAAMKHk///X4ySZA+WGWAfTpXARAAAAAAAAX4kfDmbfHTbHbti8ZP36mwTBnPWuufYvayeZm9fZ6V4K0HdFQFRdsOa7O0mSUprMzrp60cqkhQ4mwfzYTbbkbTeOdId9cVhBMPfHp9RBAN8NDyAjJwO4PCs/yc20zM3NNN3srUlryVZNXedcv/4wL44zPxPptej/L7e/kaT5P3qNeSsj25127tmrzmZyMN7Fe3m3051AsW8exWEH4/KsvEnmW0juuRh45OeSGzG69WYt2drutO2kTidt/0y6+czxGt/Oj6jzvSylpZa6M95mj7c/E9eZzw1rfTeK/IQtfy+30jK3lm+lyYAoCuOiKByNYvCxmDyK4rgoihNGAQDTsjVmFLKODPxDxp1eZkQvtzXutwyrr5a/+utF0qMvp2WWF5KOdXZhQI9uj+vR7QlHt1/6noE0bIyN6/35xKj6Id7gw9B6w3rBig/hhTc7/5Mru3v7d7Z3Np63n7dfFgrFkn3Ptu8XZC5pRjdh7AEADDD+GTtjS1j3xpxV/+PgkoKcPJNX0pFNWUnuNkiuOBi41+yRyxBWxpy1ZpNhMn3Cy8qIs7qLyV0Ovf0WRpY9HkPx7H8QAACco6Ux4/DnjP8rY867j4/lo8+Os0ee1gYAAM6GDj5a2eh7KwhM82m+XM470apWge8+VoGp1LQyXqQDd9Xxalo1Az/yXb8eZ56Yig5V2Go2/SBSVT9QTT80a8n0gar76PdQNxwvMm7YrGsn1Mr1vchxI1Uxoauarf/UTbiqg2TjsKldUzWuExnfU6HfClydUyrU+khBU9FeZKomznqqGZiGE2TUE7/eamhV0aEbmGbkpzvs1WW8qh80kt3mpn2wAQD4Quzu7b/Y6HTar88qc3HaLQQAACcdDtfTjgQAAAAAAAAAAAAAAAAAAAAAAAxz5vf/ncx0HwAgE+9Qzi9mMqMP+Mxp/UzJfDmZsV3H2zPtmACcuT8DAAD///GvUk8=") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) 37.105553213s ago: executing program 2 (id=803): unshare(0x8000400) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1, 0x100000]}}, 0x5c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xe3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfff}}, [0x1, 0x7f, 0x9, 0x9, 0x6, 0x7, 0x1, 0x10, 0xbe, 0x8, 0x6, 0xd89a, 0x6cfd, 0xfffffffffffffff8, 0xffffffffec312644]}, &(0x7f0000000240)=0xfc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa0028000}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r6, 0x32d7, 0x0, 0x46, 0x0, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) unshare(0x8000400) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1, 0x100000]}}, 0x5c) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xe3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfff}}, [0x1, 0x7f, 0x9, 0x9, 0x6, 0x7, 0x1, 0x10, 0xbe, 0x8, 0x6, 0xd89a, 0x6cfd, 0xfffffffffffffff8, 0xffffffffec312644]}, &(0x7f0000000240)=0xfc) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) epoll_create1(0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa0028000}) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (async) io_uring_enter(r6, 0x32d7, 0x0, 0x46, 0x0, 0x0) (async) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) (async) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) (async) 36.881042457s ago: executing program 2 (id=812): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x7ffffffe, 0x4000}}, 0x20) 36.637230872s ago: executing program 2 (id=816): bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/78, 0x4e}}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (rerun: 64) ioctl$int_in(r1, 0x5452, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a350000085000000060000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffff, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0xffffffffffffffdc, 0x2, "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"}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) (async) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 36.636915742s ago: executing program 32 (id=816): bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/78, 0x4e}}, 0x10) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (rerun: 64) ioctl$int_in(r1, 0x5452, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a350000085000000060000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffff, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0xffffffffffffffdc, 0x2, "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"}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) (async) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.06880308s ago: executing program 0 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.031152061s ago: executing program 0 (id=1461): syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000001100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) unshare(0x2040400) syz_usb_connect$uac1(0x0, 0xe1, &(0x7f0000000880)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902cf00030107902f0904000000010100000a24010900080201020924060502010400030924030102030d068d05240401080924050308d25febf90624050407580724080308001009040100000102000009040101010102000009240202ffff81000c0f24020203000100068e52ef3792c30905010970020c0504072501000401fe0904020000010200000904020101010200000d24020181048103bc9e3b60bd072401050302000724010afd040010240202ff07540009a114a71e1cb69509058209400008fc0407250102840a000574"], &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x30, 0x0, 0x40, 0xf7}, 0x4f, &(0x7f0000000800)=ANY=[@ANYBLOB="050f4f00037d87f9613c92cec459b1398b703aa72c82dd417e2b100a80dd8ef72b6391fbc380a84e322b09d823dd35087551b09dcd602a5cc1fa22d64a77b11ca29f9e8b0b1001085000037f0010116e3fce83e231bd00918b648e436466b3107bddb1c938d5a4b1a07673f28d6d"], 0x1, [{0x5d, &(0x7f0000000380)=ANY=[@ANYBLOB="5d032defe5745c4b4eadd095e2f842de4b0f5f85f16eb5b36ed3d42c3617adc0f8e44118a2f6862647b0ec6e4e78ecaa73a65b64fff817dc847e72f06becd56e5533a95d30d0b1cb5be39c395dbe281100d2312cb0b950f6768d3c759f"]}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r5, 0x0}, 0x20) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x340108a0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x44, @loopback, 0x8}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000041000000000000f8fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000de080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.921260403s ago: executing program 4 (id=1463): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x231}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.814869475s ago: executing program 4 (id=1466): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8947, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xe02, 0x1c0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @enum={0xf, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0xd, 0x4}, {0xe, 0x4}, {0x7, 0xffffffff}, {0xd, 0x45dbf5de}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000003c0), 0x73, 0x0, 0x1, 0x7f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.391376853s ago: executing program 0 (id=1473): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fc, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1b68, 0x10000, 0x33f8, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x723, 0x10000, 0x4, 0x1, 0xa, 0x60005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000093c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf252b00000008000200", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 1.259796076s ago: executing program 0 (id=1477): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240)=0x4, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r8, 0x5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 1.094322449s ago: executing program 5 (id=1483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 1.093636339s ago: executing program 5 (id=1485): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket$inet(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r4) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x11, 0x0, @opaque="c4e349a5c7407bebfb"}}}}}}, 0x0) 1.04823109s ago: executing program 1 (id=1486): socket$kcm(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) eventfd2(0x8, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)={{r2, r3/1000+10000}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20) unshare(0x2c020400) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x1, 0xa, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x20000009, 0x0, 0x4, 0x400, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.04716219s ago: executing program 5 (id=1487): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fc, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1b68, 0x10000, 0x33f8, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x723, 0x10000, 0x4, 0x1, 0xa, 0x60005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000093c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf252b00000008000200", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 965.338802ms ago: executing program 1 (id=1489): mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='neigh_update\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b0987017a4705d1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6421051a2d708f37ac8da1a297e0099c5ac0000c509000000000000006536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b001500d20047c631ebf7192367244434ed889e49a6560641263da4de1df3", 0x90, 0x80c0, 0x0, 0x0) 965.185162ms ago: executing program 1 (id=1490): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f0000000000000000000001"], 0x0, 0x53}, 0x28) r1 = socket$pptp(0x18, 0x1, 0x2) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 938.247782ms ago: executing program 4 (id=1492): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r1 = syz_io_uring_setup(0x27bc, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000), 0x66) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="000202"], 0x18) 929.941542ms ago: executing program 5 (id=1493): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 893.235883ms ago: executing program 3 (id=1494): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xe, r4, 0xfffffffe}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xff) r10 = socket(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 892.865363ms ago: executing program 4 (id=1495): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r9, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r9}}, 0x18) 777.153855ms ago: executing program 4 (id=1496): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @void}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x12}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xff, &(0x7f0000000100)=""/255, 0x40f00, 0x20, '\x00', r2, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x10, 0x3ff, 0x90}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r1, r3, r1, r1, r1], &(0x7f0000000300)=[{0x4, 0x3, 0x9, 0x8}, {0x5, 0x3, 0x7, 0x4}, {0x5, 0x2, 0x1, 0xc}, {0x1, 0x1, 0xb, 0x9}], 0x10, 0x7}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) pivot_root(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xe, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r9, 0x3, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x90) (async, rerun: 64) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000c00)={0x7f, {0x18, 0xb538, 0x7, 0x1, 0x3}}) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r9, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xc}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x90) openat$uhid(0xffffffffffffff9c, &(0x7f0000000d40), 0x802, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000d80)=0x306e, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r9, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1fc000, 0x15}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000f00)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x80000) (async, rerun: 64) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) readahead(r11, 0xa5, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r12, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 681.149487ms ago: executing program 4 (id=1497): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffc5d, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/121, 0x79}, {&(0x7f00000006c0)=""/183, 0x1b}], 0x2}, 0x2983}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)=']\x00[@ \xb1\x15\x7f\x9d\xb6\x1c\xef\xa8\xdfQ?\xd8Z5\xf5Y\x9a\xf5\x14(d\x1d\xebF\x8d\xb5\xfed\xa8\xf5\xa3\xc6\xda,\xc2\xff*i\xb1\x1c!\x1a\x9e\x02\r\x83}\xab\xcd\xbf\x13\xd9\x88\xa0[\x03!\xd3\xa3G\xb6\xc6W\x8d%d\x8b\xf9]\xcbJ\xaa\xe1\xb6l\xc8\x86j\xe39\x06I\xaa\xb0\xf1\xb5\xd7\x86I\xd0\xdc\xbc\xa0\xf3\xcdS\xad@a\x10\x12a\xc50\xc0\xc1\x15J4\xbc1\x88\xe8\xa9\x9c+Uj]M\xd2\x15\xd7:\x16E$\xaaC\xe3\xb0\xcf\x142\xe7\xb1\xef,\x81t\xb1|\x88s\x01t\x9f6\tS\v\xe4\t\xe1\xb1Gh>\r+g\x82\xb9\x1f\xfe\x01\x98T\xc9w2\xf5\n4Y}#\x0e\xda2\xbc\xd36?}\x93\x90I\xfap\xcf\xcfC\xe7\xf3%\xa7x\xfe\x11\xf1\n\f\x8b\x7fG@Og1\xec\xbf\x8b\xa6\xe0F\xb1&\xcf,\x8fr_\xd3\b\xc3T\x1a\xb7\xeb\xa1\x99\x8b\xa3S\xb8w\xf7\xd8\xd6_t\xe1\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f0000000000000000000001"], 0x0, 0x53}, 0x28) r1 = socket$pptp(0x18, 0x1, 0x2) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 416.709422ms ago: executing program 3 (id=1500): r0 = memfd_create(0x0, 0x4) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000b, 0x11, r0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) close(r6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='svc_stats_latency\x00', r9, 0x0, 0x1000000000000}, 0x18) umount2(&(0x7f0000000580)='./file0\x00', 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) 404.662542ms ago: executing program 0 (id=1501): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) 313.132924ms ago: executing program 0 (id=1502): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8947, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xe02, 0x1c0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @enum={0xf, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0xd, 0x4}, {0xe, 0x4}, {0x5, 0x314}, {0xd, 0x45dbf5de}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000003c0), 0x73, 0x0, 0x1, 0x7f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 189.247746ms ago: executing program 3 (id=1503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fc, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1b68, 0x10000, 0x33f8, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x723, 0x10000, 0x4, 0x1, 0xa, 0x60005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000093c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf252b00000008000200", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 137.313218ms ago: executing program 1 (id=1504): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141604089f034d2f87e5440c05ab845013f2325f1a39018603038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 121.140858ms ago: executing program 1 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], "e4ff00"}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x5}, 0x28) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 107.511608ms ago: executing program 3 (id=1506): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r9, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r9}}, 0x18) 71.189139ms ago: executing program 5 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='mm_page_alloc\x00', r1, 0x0, 0x7}, 0xd) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 38.5089ms ago: executing program 5 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="e666629c6c019c0f6b390a1608a569e68f7174312f69c90afd84312f890978a040c7fd735d38257b13c27e2073af4c00f3d0080782189949cfad283205c2f87723dcecd22d5d9d01e77ec4ac378007e56d487ce19757c576b1ed3013ce7dc944e6d648c8dcbff8ed7b019d1306a044cf4c473e2de2b7f8ae1d56d31be1c32a98e62d7b603e1cd16497d820f6a03076f99a6369a13f0c23975b370fc006766d2654c5377aa5f4e30882d554e809cde790c266e7b673c72bfb6041f0e893e9b0abb327fde6257d0278fa3b18ba9460474a3d5e2c0a88a7d026ca6115d99b3b5a079420"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x5, 0x448, {0x2, 0x8, 0x5, 0x401}, 0x0, 0x0}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpriority(0x0, 0xffffffffffffffff) 0s ago: executing program 3 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r0, 0x4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xffa1, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x108000) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .083967][ T5915] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.084028][ T5915] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.084067][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.084163][ T5915] RIP: 0033:0x7f74d387eba9 [ 80.084178][ T5915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.084198][ T5915] RSP: 002b:00007f74d22df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 80.084270][ T5915] RAX: ffffffffffffffda RBX: 00007f74d3ac5fa0 RCX: 00007f74d387eba9 [ 80.084282][ T5915] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00002000000006c0 [ 80.084294][ T5915] RBP: 00007f74d22df090 R08: 0000000000000003 R09: 0000000000000000 [ 80.084306][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.084335][ T5915] R13: 00007f74d3ac6038 R14: 00007f74d3ac5fa0 R15: 00007ffe178adc28 [ 80.084359][ T5915] [ 80.316235][ T5910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.327186][ T5910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.450544][ T5931] syz.0.785 (5931): attempted to duplicate a private mapping with mremap. This is not supported. [ 80.558536][ T4725] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.566840][ T4725] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.576831][ T4725] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.585025][ T4725] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.609288][ T4725] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.617762][ T4725] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.643669][ T4725] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.652038][ T4725] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.716964][ T5952] FAULT_INJECTION: forcing a failure. [ 80.716964][ T5952] name failslab, interval 1, probability 0, space 0, times 0 [ 80.729839][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.3.792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.729872][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.729884][ T5952] Call Trace: [ 80.729890][ T5952] [ 80.729896][ T5952] __dump_stack+0x1d/0x30 [ 80.729939][ T5952] dump_stack_lvl+0xe8/0x140 [ 80.729960][ T5952] dump_stack+0x15/0x1b [ 80.729981][ T5952] should_fail_ex+0x265/0x280 [ 80.730012][ T5952] should_failslab+0x8c/0xb0 [ 80.730044][ T5952] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 80.730125][ T5952] ? vfs_parse_fs_string+0x72/0xe0 [ 80.730154][ T5952] kmemdup_nul+0x36/0xc0 [ 80.730187][ T5952] vfs_parse_fs_string+0x72/0xe0 [ 80.730224][ T5952] do_new_mount+0x188/0x5e0 [ 80.730245][ T5952] ? security_capable+0x83/0x90 [ 80.730305][ T5952] path_mount+0x4a4/0xb20 [ 80.730384][ T5952] ? user_path_at+0x109/0x130 [ 80.730418][ T5952] __se_sys_mount+0x28f/0x2e0 [ 80.730440][ T5952] ? fput+0x8f/0xc0 [ 80.730478][ T5952] __x64_sys_mount+0x67/0x80 [ 80.730577][ T5952] x64_sys_call+0x2b4d/0x2ff0 [ 80.730605][ T5952] do_syscall_64+0xd2/0x200 [ 80.730646][ T5952] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.730672][ T5952] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.730772][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.730800][ T5952] RIP: 0033:0x7fa9f867eba9 [ 80.730820][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.730843][ T5952] RSP: 002b:00007fa9f70e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.730862][ T5952] RAX: ffffffffffffffda RBX: 00007fa9f88c5fa0 RCX: 00007fa9f867eba9 [ 80.730879][ T5952] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 80.730892][ T5952] RBP: 00007fa9f70e7090 R08: 0000200000000300 R09: 0000000000000000 [ 80.730907][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.730923][ T5952] R13: 00007fa9f88c6038 R14: 00007fa9f88c5fa0 R15: 00007ffe6668e7e8 [ 80.730946][ T5952] [ 80.963637][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 80.963664][ T29] audit: type=1400 audit(80.945:5734): avc: denied { nlmsg_read } for pid=5960 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.005499][ T5969] loop1: detected capacity change from 0 to 128 [ 81.012543][ T5969] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.024735][ T5969] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.027639][ T5971] loop2: detected capacity change from 0 to 164 [ 81.042622][ T5969] FAULT_INJECTION: forcing a failure. [ 81.042622][ T5969] name failslab, interval 1, probability 0, space 0, times 0 [ 81.043005][ T5968] loop4: detected capacity change from 0 to 4096 [ 81.056130][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.1.793 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.056172][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.056191][ T5969] Call Trace: [ 81.056200][ T5969] [ 81.056247][ T5969] __dump_stack+0x1d/0x30 [ 81.056281][ T5969] dump_stack_lvl+0xe8/0x140 [ 81.056306][ T5969] dump_stack+0x15/0x1b [ 81.056330][ T5969] should_fail_ex+0x265/0x280 [ 81.056365][ T5969] should_failslab+0x8c/0xb0 [ 81.056402][ T5969] kmem_cache_alloc_noprof+0x50/0x310 [ 81.056479][ T5969] ? fat_parse_long+0x5d/0x430 [ 81.056527][ T5969] fat_parse_long+0x5d/0x430 [ 81.056571][ T5969] fat_search_long+0x1cc/0x9c0 [ 81.056611][ T5969] ? obj_cgroup_charge_account+0x122/0x1a0 [ 81.056720][ T5969] ? __tsan_unaligned_write8+0x14d/0x190 [ 81.056811][ T5969] vfat_lookup+0xd5/0x2d0 [ 81.056854][ T5969] lookup_one_qstr_excl+0xc8/0x250 [ 81.056978][ T5969] filename_create+0x149/0x230 [ 81.057009][ T5969] do_mkdirat+0x52/0x3f0 [ 81.057039][ T5969] __x64_sys_mkdirat+0x4c/0x60 [ 81.057068][ T5969] x64_sys_call+0x2b7/0x2ff0 [ 81.057110][ T5969] do_syscall_64+0xd2/0x200 [ 81.057170][ T5969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.057264][ T5969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.057316][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.057346][ T5969] RIP: 0033:0x7f149526eba9 [ 81.057369][ T5969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.057431][ T5969] RSP: 002b:00007f1493cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 81.057458][ T5969] RAX: ffffffffffffffda RBX: 00007f14954b5fa0 RCX: 00007f149526eba9 [ 81.057476][ T5969] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 81.057493][ T5969] RBP: 00007f1493cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.057510][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.057527][ T5969] R13: 00007f14954b6038 R14: 00007f14954b5fa0 R15: 00007fffa804e4d8 [ 81.057553][ T5969] [ 81.166817][ T5968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.175102][ T5971] ISOFS: unable to read i-node block [ 81.194137][ T29] audit: type=1400 audit(81.175:5735): avc: denied { read } for pid=5967 comm="syz.4.798" path="socket:[11901]" dev="sockfs" ino=11901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.197679][ T5971] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 81.328146][ T29] audit: type=1326 audit(81.185:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.350961][ T29] audit: type=1326 audit(81.195:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.374282][ T29] audit: type=1326 audit(81.195:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.398394][ T29] audit: type=1326 audit(81.195:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.424012][ T29] audit: type=1326 audit(81.195:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.447501][ T29] audit: type=1326 audit(81.195:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.470355][ T29] audit: type=1326 audit(81.195:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.493407][ T29] audit: type=1326 audit(81.195:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 81.540204][ T5986] loop2: detected capacity change from 0 to 512 [ 81.550336][ T5986] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.597624][ T5985] syzkaller0: entered promiscuous mode [ 81.603161][ T5985] syzkaller0: entered allmulticast mode [ 81.674009][ T5986] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.803: Failed to acquire dquot type 0 [ 81.688054][ T5986] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 81.743894][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /144/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 81.744370][ T6004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.789408][ T6004] vlan2: entered allmulticast mode [ 81.794642][ T6004] bond2: entered allmulticast mode [ 81.841761][ T6009] loop1: detected capacity change from 0 to 512 [ 81.848792][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.848835][ T6009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.870309][ T6009] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 81.904558][ T6013] usb usb1: usbfs: process 6013 (syz.0.814) did not claim interface 4 before use [ 81.914041][ T6011] loop4: detected capacity change from 0 to 2048 [ 81.944844][ T4659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.966648][ T6011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 82.029282][ T4659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.065375][ T6029] lo speed is unknown, defaulting to 1000 [ 82.099912][ T4659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.125269][ T6025] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.145829][ T6025] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1598 with error 28 [ 82.158455][ T6025] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.158455][ T6025] [ 82.168198][ T6025] EXT4-fs (loop4): Total free blocks count 0 [ 82.174471][ T6025] EXT4-fs (loop4): Free/Dirty block details [ 82.180513][ T6025] EXT4-fs (loop4): free_blocks=2415919104 [ 82.186292][ T6025] EXT4-fs (loop4): dirty_blocks=1600 [ 82.191696][ T6025] EXT4-fs (loop4): Block reservation details [ 82.197735][ T6025] EXT4-fs (loop4): i_reserved_data_blocks=100 [ 82.214675][ T6023] lo speed is unknown, defaulting to 1000 [ 82.214742][ T6029] lo speed is unknown, defaulting to 1000 [ 82.249565][ T4659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.270633][ T6023] lo speed is unknown, defaulting to 1000 [ 82.313368][ T1684] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 82.342813][ T4659] bridge_slave_1: left allmulticast mode [ 82.348884][ T4659] bridge_slave_1: left promiscuous mode [ 82.354821][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.365270][ T4659] bridge_slave_0: left allmulticast mode [ 82.372778][ T4659] bridge_slave_0: left promiscuous mode [ 82.379128][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.461165][ T6054] loop1: detected capacity change from 0 to 512 [ 82.468146][ T6054] ext4: Unknown parameter 'obj_role' [ 82.488733][ T4659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.508039][ T4659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.529061][ T4659] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 82.549057][ T4659] bond0 (unregistering): Released all slaves [ 82.667814][ T6068] geneve2: entered promiscuous mode [ 82.673358][ T6068] geneve2: entered allmulticast mode [ 82.680241][ T6076] FAULT_INJECTION: forcing a failure. [ 82.680241][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 82.693909][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.693998][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.694014][ T6076] Call Trace: [ 82.694026][ T6076] [ 82.694035][ T6076] __dump_stack+0x1d/0x30 [ 82.694142][ T6076] dump_stack_lvl+0xe8/0x140 [ 82.694166][ T6076] dump_stack+0x15/0x1b [ 82.694190][ T6076] should_fail_ex+0x265/0x280 [ 82.694238][ T6076] should_failslab+0x8c/0xb0 [ 82.694273][ T6076] __kmalloc_noprof+0xa5/0x3e0 [ 82.694309][ T6076] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 82.694489][ T6076] ? splice_from_pipe_next+0x321/0x380 [ 82.694544][ T6076] kernfs_fop_write_iter+0xe1/0x2d0 [ 82.694584][ T6076] ? iov_iter_bvec+0xa4/0xd0 [ 82.694650][ T6076] iter_file_splice_write+0x663/0xa60 [ 82.694730][ T6076] ? __pfx_iter_file_splice_write+0x10/0x10 [ 82.694758][ T6076] do_splice+0x977/0x10b0 [ 82.694788][ T6076] ? __rcu_read_unlock+0x4f/0x70 [ 82.694817][ T6076] ? __fget_files+0x184/0x1c0 [ 82.694849][ T6076] __se_sys_splice+0x26c/0x3a0 [ 82.694951][ T6076] __x64_sys_splice+0x78/0x90 [ 82.694981][ T6076] x64_sys_call+0x28a3/0x2ff0 [ 82.695010][ T6076] do_syscall_64+0xd2/0x200 [ 82.695088][ T6076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.695189][ T6076] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.695230][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.695257][ T6076] RIP: 0033:0x7f149526eba9 [ 82.695279][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.695384][ T6076] RSP: 002b:00007f1493cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 82.695410][ T6076] RAX: ffffffffffffffda RBX: 00007f14954b5fa0 RCX: 00007f149526eba9 [ 82.695427][ T6076] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 82.695442][ T6076] RBP: 00007f1493cd7090 R08: 0000000000000047 R09: 0000000000000000 [ 82.695459][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.695474][ T6076] R13: 00007f14954b6038 R14: 00007f14954b5fa0 R15: 00007fffa804e4d8 [ 82.695500][ T6076] [ 82.917799][ T4725] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.929283][ T4659] hsr_slave_0: left promiscuous mode [ 82.935036][ T4659] hsr_slave_1: left promiscuous mode [ 82.945177][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.952750][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.966003][ T6078] loop1: detected capacity change from 0 to 1024 [ 82.988223][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.995731][ T4659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.008379][ T6078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.020863][ T4659] veth1_macvtap: left promiscuous mode [ 83.026641][ T4659] veth0_macvtap: left promiscuous mode [ 83.032287][ T4659] veth1_vlan: left promiscuous mode [ 83.041355][ T4659] veth0_vlan: left promiscuous mode [ 83.045423][ T6078] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 83.079034][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.186142][ T6057] loop4: detected capacity change from 0 to 8192 [ 83.269457][ T4659] team0 (unregistering): Port device team_slave_1 removed [ 83.279930][ T4659] team0 (unregistering): Port device team_slave_0 removed [ 83.306004][ T6097] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 83.314223][ T6097] __nla_validate_parse: 26 callbacks suppressed [ 83.314238][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.837'. [ 83.331605][ T4725] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.349412][ T6097] team0: Port device geneve1 added [ 83.357170][ T4725] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.369326][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 83.382693][ T4725] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.421106][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.428317][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.435678][ T6023] bridge_slave_0: entered allmulticast mode [ 83.442362][ T6023] bridge_slave_0: entered promiscuous mode [ 83.449516][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.456713][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.464107][ T6023] bridge_slave_1: entered allmulticast mode [ 83.470960][ T6023] bridge_slave_1: entered promiscuous mode [ 83.484639][ T6108] random: crng reseeded on system resumption [ 83.504701][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.517139][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.544095][ T6023] team0: Port device team_slave_0 added [ 83.551650][ T6023] team0: Port device team_slave_1 added [ 83.574510][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.581666][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.608143][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.619706][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.626878][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.652933][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.700083][ T6023] hsr_slave_0: entered promiscuous mode [ 83.706605][ T6023] hsr_slave_1: entered promiscuous mode [ 83.750717][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 83.769064][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 83.824348][ T6023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.833216][ T6023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.842097][ T6023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.850896][ T6023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.919506][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.934845][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.959362][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.966648][ T4648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.980033][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.987361][ T4648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.182453][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.388148][ T6023] veth0_vlan: entered promiscuous mode [ 84.391209][ T6023] veth1_vlan: entered promiscuous mode [ 84.432413][ T6023] veth0_macvtap: entered promiscuous mode [ 84.442258][ T6023] veth1_macvtap: entered promiscuous mode [ 84.456552][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.468807][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.475918][ T4659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.504430][ T4659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.504515][ T4648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.504630][ T4648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.555737][ T6165] loop4: detected capacity change from 0 to 512 [ 84.575112][ T6165] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 84.579030][ T6165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.660144][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.851'. [ 84.670301][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.695286][ T6178] loop4: detected capacity change from 0 to 1024 [ 84.712340][ T6178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.751828][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.853'. [ 84.761597][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.761676][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.762743][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.770221][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.793871][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.818263][ T6186] loop5: detected capacity change from 0 to 128 [ 85.006726][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 85.018961][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 85.215706][ T6207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.223932][ T6207] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.261899][ T6212] loop1: detected capacity change from 0 to 1024 [ 85.271175][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 85.283353][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.328901][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.389072][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 85.435718][ T6217] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.444263][ T6217] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.485609][ T6231] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 85.493547][ T6231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.870'. [ 85.735654][ T6242] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.744314][ T6242] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.830607][ T6259] loop3: detected capacity change from 0 to 512 [ 85.838613][ T6259] ext4: Unknown parameter 'nouser_xattr' [ 85.931159][ T6265] syzkaller0: entered promiscuous mode [ 85.936782][ T6265] syzkaller0: entered allmulticast mode [ 85.972745][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 85.972763][ T29] audit: type=1400 audit(85.955:6320): avc: denied { ioctl } for pid=6269 comm="syz.3.883" path="socket:[13609]" dev="sockfs" ino=13609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.028578][ T29] audit: type=1326 audit(86.015:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.053338][ T29] audit: type=1326 audit(86.015:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.055788][ T6273] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 86.077089][ T29] audit: type=1326 audit(86.015:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.107724][ T29] audit: type=1326 audit(86.015:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.130507][ T29] audit: type=1326 audit(86.015:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.153208][ T29] audit: type=1326 audit(86.015:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.176305][ T29] audit: type=1326 audit(86.015:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.199370][ T29] audit: type=1326 audit(86.015:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.223543][ T29] audit: type=1326 audit(86.015:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc054b9eba9 code=0x7ffc0000 [ 86.261201][ T6280] loop3: detected capacity change from 0 to 512 [ 86.280649][ T6280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.374731][ T6280] xt_l2tp: missing protocol rule (udp|l2tpip) [ 86.393623][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.496751][ T6286] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 86.498875][ T6289] ipvlan3: entered promiscuous mode [ 86.505147][ T6286] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 86.511884][ T6289] bridge0: port 3(ipvlan3) entered blocking state [ 86.524748][ T6289] bridge0: port 3(ipvlan3) entered disabled state [ 86.531732][ T6289] ipvlan3: entered allmulticast mode [ 86.537106][ T6289] bridge0: entered allmulticast mode [ 86.542904][ T6289] ipvlan3: left allmulticast mode [ 86.548101][ T6289] bridge0: left allmulticast mode [ 86.645068][ T6293] loop1: detected capacity change from 0 to 1024 [ 86.652431][ T6293] EXT4-fs: Ignoring removed orlov option [ 86.658365][ T6293] EXT4-fs: Ignoring removed nobh option [ 86.663960][ T6293] EXT4-fs: Ignoring removed bh option [ 86.678438][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.698278][ T6293] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.891: Allocating blocks 481-513 which overlap fs metadata [ 86.800691][ T6302] lo speed is unknown, defaulting to 1000 [ 86.865708][ T6302] lo speed is unknown, defaulting to 1000 [ 87.016545][ T6293] EXT4-fs (loop1): pa ffff8881076ad930: logic 352, phys. 465, len 3 [ 87.026095][ T6293] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 87.202443][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.261374][ T6306] syzkaller0: entered promiscuous mode [ 87.267034][ T6306] syzkaller0: entered allmulticast mode [ 87.419618][ T6319] infiniband syz!: set active [ 87.424367][ T6319] infiniband syz!: added team_slave_0 [ 87.462879][ T6319] RDS/IB: syz!: added [ 87.494954][ T6319] smc: adding ib device syz! with port count 1 [ 87.562268][ T6332] loop4: detected capacity change from 0 to 1024 [ 87.572523][ T6319] smc: ib device syz! port 1 has pnetid [ 87.620475][ T6332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.664950][ T6332] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 87.730537][ T6341] syzkaller0: entered promiscuous mode [ 87.736466][ T6341] syzkaller0: entered allmulticast mode [ 87.783385][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.828895][ T6351] loop4: detected capacity change from 0 to 128 [ 87.866534][ T6351] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.975920][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.016403][ T6359] loop4: detected capacity change from 0 to 256 [ 88.023510][ T6359] msdos: Unknown parameter ':’¡¿CYaSåfmask' [ 88.080530][ T6361] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.909' sets config #0 [ 88.179498][ T6372] loop5: detected capacity change from 0 to 128 [ 88.194731][ T6365] syzkaller0: entered promiscuous mode [ 88.200423][ T6365] syzkaller0: entered allmulticast mode [ 88.233562][ T6372] lo speed is unknown, defaulting to 1000 [ 88.330424][ T6372] lo speed is unknown, defaulting to 1000 [ 88.511078][ T6393] syzkaller0: entered promiscuous mode [ 88.516937][ T6393] syzkaller0: entered allmulticast mode [ 88.519594][ T6395] __nla_validate_parse: 4 callbacks suppressed [ 88.519614][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 88.593883][ T6399] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 88.601886][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.923'. [ 88.631522][ T6399] dummy0: entered promiscuous mode [ 88.644089][ T6399] bridge0: port 3(dummy0) entered blocking state [ 88.650742][ T6399] bridge0: port 3(dummy0) entered disabled state [ 88.663142][ T6399] dummy0: entered allmulticast mode [ 88.681383][ T6399] bridge0: port 3(dummy0) entered blocking state [ 88.687920][ T6399] bridge0: port 3(dummy0) entered forwarding state [ 88.741736][ T6409] syzkaller0: entered promiscuous mode [ 88.748305][ T6409] syzkaller0: entered allmulticast mode [ 88.784330][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 88.914944][ T6426] loop4: detected capacity change from 0 to 4096 [ 88.935050][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 88.954186][ T6426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.971984][ T6426] netlink: 80 bytes leftover after parsing attributes in process `syz.4.933'. [ 88.994508][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.040899][ T6440] nfs4: Unknown parameter '' [ 89.067503][ T6444] syzkaller0: entered promiscuous mode [ 89.073206][ T6444] syzkaller0: entered allmulticast mode [ 89.096041][ T6449] lo speed is unknown, defaulting to 1000 [ 89.102428][ T6449] lo speed is unknown, defaulting to 1000 [ 89.108726][ T6449] lo speed is unknown, defaulting to 1000 [ 89.116143][ T6449] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.127000][ T6449] lo speed is unknown, defaulting to 1000 [ 89.133356][ T6449] lo speed is unknown, defaulting to 1000 [ 89.139661][ T6449] lo speed is unknown, defaulting to 1000 [ 89.146093][ T6449] lo speed is unknown, defaulting to 1000 [ 89.152366][ T6449] lo speed is unknown, defaulting to 1000 [ 89.166369][ T6449] loop3: detected capacity change from 0 to 1024 [ 89.173567][ T6449] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.186403][ T6449] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.941: Invalid block bitmap block 0 in block_group 0 [ 89.202061][ T6449] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.941: Failed to acquire dquot type 0 [ 89.225786][ T6449] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.941: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.246641][ T6449] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.941: Invalid inode bitmap blk 0 in block_group 0 [ 89.261023][ T6449] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 89.269781][ T4725] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:67: Failed to release dquot type 0 [ 89.282153][ T6449] EXT4-fs (loop3): 1 orphan inode deleted [ 89.288712][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.458498][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.511163][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 89.520290][ T6469] bridge_slave_1: left allmulticast mode [ 89.526047][ T6469] bridge_slave_1: left promiscuous mode [ 89.531974][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.541282][ T6469] bridge_slave_0: left allmulticast mode [ 89.547067][ T6469] bridge_slave_0: left promiscuous mode [ 89.552988][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.562380][ T6481] netlink: 'syz.3.946': attribute type 13 has an invalid length. [ 89.570296][ T6481] netlink: 'syz.3.946': attribute type 17 has an invalid length. [ 89.641306][ T6481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.659573][ T23] lo speed is unknown, defaulting to 1000 [ 89.694776][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 89.705636][ T6461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6461 comm=syz.0.944 [ 89.746160][ T6496] loop3: detected capacity change from 0 to 2048 [ 89.759676][ T6496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.790034][ T6500] syzkaller0: entered promiscuous mode [ 89.795823][ T6500] syzkaller0: entered allmulticast mode [ 89.921865][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 90.048737][ T6514] syzkaller0: entered promiscuous mode [ 90.054403][ T6514] syzkaller0: entered allmulticast mode [ 90.058357][ T3361] kernel write not supported for file /sysvipc/msg (pid: 3361 comm: kworker/1:2) [ 90.101379][ T6516] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 90.109701][ T6516] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 90.119807][ T6528] netlink: 'syz.4.961': attribute type 13 has an invalid length. [ 90.127722][ T6528] netlink: 'syz.4.961': attribute type 17 has an invalid length. [ 90.227537][ T6528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.275654][ T6533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 90.291333][ T6533] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 90.320909][ T6540] syzkaller0: entered promiscuous mode [ 90.326623][ T6540] syzkaller0: entered allmulticast mode [ 90.424626][ T6549] SELinux: policydb string does not match my string SE Linux [ 90.436136][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 90.445726][ T6549] SELinux: failed to load policy [ 90.504022][ T6549] FAULT_INJECTION: forcing a failure. [ 90.504022][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.517742][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.517771][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.517784][ T6549] Call Trace: [ 90.517789][ T6549] [ 90.517797][ T6549] __dump_stack+0x1d/0x30 [ 90.517818][ T6549] dump_stack_lvl+0xe8/0x140 [ 90.517894][ T6549] dump_stack+0x15/0x1b [ 90.517959][ T6549] should_fail_ex+0x265/0x280 [ 90.517989][ T6549] should_fail+0xb/0x20 [ 90.518010][ T6549] should_fail_usercopy+0x1a/0x20 [ 90.518093][ T6549] _copy_from_iter+0xd2/0xe80 [ 90.518125][ T6549] ? __build_skb_around+0x1a0/0x200 [ 90.518156][ T6549] ? __alloc_skb+0x223/0x320 [ 90.518200][ T6549] netlink_sendmsg+0x471/0x6b0 [ 90.518258][ T6549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.518288][ T6549] __sock_sendmsg+0x145/0x180 [ 90.518403][ T6549] ____sys_sendmsg+0x31e/0x4e0 [ 90.518511][ T6549] ___sys_sendmsg+0x17b/0x1d0 [ 90.518560][ T6549] __x64_sys_sendmsg+0xd4/0x160 [ 90.518596][ T6549] x64_sys_call+0x191e/0x2ff0 [ 90.518694][ T6549] do_syscall_64+0xd2/0x200 [ 90.518726][ T6549] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.518768][ T6549] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.518825][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.518854][ T6549] RIP: 0033:0x7fc054b9eba9 [ 90.518873][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.518896][ T6549] RSP: 002b:00007fc053607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.518919][ T6549] RAX: ffffffffffffffda RBX: 00007fc054de5fa0 RCX: 00007fc054b9eba9 [ 90.519080][ T6549] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 90.519093][ T6549] RBP: 00007fc053607090 R08: 0000000000000000 R09: 0000000000000000 [ 90.519104][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.519116][ T6549] R13: 00007fc054de6038 R14: 00007fc054de5fa0 R15: 00007ffcfbb5cbf8 [ 90.519135][ T6549] [ 90.877012][ T6557] syzkaller0: entered promiscuous mode [ 90.882549][ T6557] syzkaller0: entered allmulticast mode [ 90.979665][ T29] kauditd_printk_skb: 1209 callbacks suppressed [ 90.979698][ T29] audit: type=1326 audit(90.965:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc7b525b67 code=0x7ffc0000 [ 91.012840][ T6573] netlink: 'syz.3.978': attribute type 13 has an invalid length. [ 91.020992][ T6573] netlink: 'syz.3.978': attribute type 17 has an invalid length. [ 91.089295][ T6572] syzkaller0: entered promiscuous mode [ 91.094834][ T6572] syzkaller0: entered allmulticast mode [ 91.109604][ T6581] loop5: detected capacity change from 0 to 512 [ 91.128407][ T6581] EXT4-fs: Ignoring removed oldalloc option [ 91.136400][ T6575] loop4: detected capacity change from 0 to 512 [ 91.145966][ T6575] EXT4-fs: Ignoring removed nobh option [ 91.159163][ T6581] EXT4-fs (loop5): 1 truncate cleaned up [ 91.189114][ T6575] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.981: corrupted inode contents [ 91.203680][ T6575] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.981: mark_inode_dirty error [ 91.216887][ T6573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.229234][ T6575] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.981: corrupted inode contents [ 91.254111][ T6575] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.981: mark_inode_dirty error [ 91.269177][ T6575] Quota error (device loop4): write_blk: dquota write failed [ 91.278357][ T6575] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.294925][ T6575] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.981: Failed to acquire dquot type 0 [ 91.330469][ T6588] loop5: detected capacity change from 0 to 1024 [ 91.337509][ T6575] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.981: corrupted inode contents [ 91.354253][ T6592] atomic_op ffff88811acbcd28 conn xmit_atomic 0000000000000000 [ 91.362691][ T6575] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.981: mark_inode_dirty error [ 91.397410][ T6575] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.981: corrupted inode contents [ 91.422020][ T6597] netlink: 9004 bytes leftover after parsing attributes in process `syz.0.987'. [ 91.433777][ T6588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 91.514393][ T6575] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.981: mark_inode_dirty error [ 91.529598][ T6575] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.981: corrupted inode contents [ 91.553413][ T29] audit: type=1326 audit(91.435:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.576295][ T29] audit: type=1326 audit(91.435:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.577895][ T6575] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 91.599385][ T29] audit: type=1326 audit(91.435:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.599515][ T29] audit: type=1326 audit(91.435:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.599551][ T29] audit: type=1326 audit(91.435:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.599582][ T29] audit: type=1326 audit(91.435:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.599637][ T29] audit: type=1326 audit(91.435:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f867eba9 code=0x7ffc0000 [ 91.759893][ T6575] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.981: corrupted inode contents [ 91.795058][ T6575] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.981: mark_inode_dirty error [ 91.812816][ T6575] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 91.831375][ T6575] EXT4-fs (loop4): 1 truncate cleaned up [ 91.952423][ T6628] syzkaller0: entered promiscuous mode [ 91.958104][ T6628] syzkaller0: entered allmulticast mode [ 92.078309][ T6636] loop4: detected capacity change from 0 to 2048 [ 92.165792][ T6634] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 92.173908][ T6634] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 92.229264][ T6647] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.247052][ T6647] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1564 with error 28 [ 92.259945][ T6647] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.259945][ T6647] [ 92.269950][ T6647] EXT4-fs (loop4): Total free blocks count 0 [ 92.275988][ T6647] EXT4-fs (loop4): Free/Dirty block details [ 92.281959][ T6647] EXT4-fs (loop4): free_blocks=2415919104 [ 92.287740][ T6647] EXT4-fs (loop4): dirty_blocks=1568 [ 92.288702][ T6654] loop5: detected capacity change from 0 to 512 [ 92.293298][ T6647] EXT4-fs (loop4): Block reservation details [ 92.305679][ T6647] EXT4-fs (loop4): i_reserved_data_blocks=98 [ 92.320666][ T6654] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 92.408180][ T4665] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 92.421145][ T4665] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.421145][ T4665] [ 92.623426][ T6682] loop4: detected capacity change from 0 to 512 [ 92.663974][ T6683] team_slave_0: entered promiscuous mode [ 92.670224][ T6683] team_slave_1: entered promiscuous mode [ 92.681871][ T6683] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 92.703539][ T6687] loop1: detected capacity change from 0 to 512 [ 92.752369][ T6683] team0: Device macvtap1 is already an upper device of the team interface [ 92.772869][ T6683] team_slave_0: left promiscuous mode [ 92.778340][ T6683] team_slave_1: left promiscuous mode [ 92.786760][ T6687] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 92.983633][ T6709] netlink: 'syz.5.1024': attribute type 13 has an invalid length. [ 93.003092][ T6705] syzkaller0: entered promiscuous mode [ 93.008732][ T6705] syzkaller0: entered allmulticast mode [ 93.021524][ T6709] gretap0: refused to change device tx_queue_len [ 93.030266][ T6709] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.198648][ T6721] loop3: detected capacity change from 0 to 512 [ 93.304932][ T6725] loop3: detected capacity change from 0 to 512 [ 93.346418][ T6725] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.354711][ T6725] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.387472][ T6725] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1028: corrupted inode contents [ 93.406908][ T6725] EXT4-fs (loop3): Remounting filesystem read-only [ 93.416313][ T6725] EXT4-fs (loop3): 1 truncate cleaned up [ 93.423131][ T4665] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.434188][ T4665] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.453097][ T4665] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.565665][ T6733] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 93.574401][ T6733] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.148334][ T6748] syzkaller0: entered promiscuous mode [ 94.153881][ T6748] syzkaller0: entered allmulticast mode [ 94.262460][ T6750] syzkaller0: entered promiscuous mode [ 94.268015][ T6750] syzkaller0: entered allmulticast mode [ 94.419537][ T6757] syzkaller0: entered promiscuous mode [ 94.425273][ T6757] syzkaller0: entered allmulticast mode [ 94.525136][ T6769] loop3: detected capacity change from 0 to 1024 [ 94.682590][ T6781] syzkaller0: entered promiscuous mode [ 94.688193][ T6781] syzkaller0: entered allmulticast mode [ 94.697324][ T6786] __nla_validate_parse: 7 callbacks suppressed [ 94.697340][ T6786] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1052'. [ 94.900750][ T6803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6803 comm=syz.3.1058 [ 94.931556][ T6803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=6803 comm=syz.3.1058 [ 95.074317][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1062'. [ 95.154035][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 95.467148][ T6837] syzkaller0: entered promiscuous mode [ 95.472694][ T6837] syzkaller0: entered allmulticast mode [ 95.502381][ T6886] lo speed is unknown, defaulting to 1000 [ 95.583024][ T6886] lo speed is unknown, defaulting to 1000 [ 95.628701][ T6886] lo speed is unknown, defaulting to 1000 [ 95.677995][ T6901] loop4: detected capacity change from 0 to 512 [ 95.702652][ T6901] EXT4-fs: Ignoring removed oldalloc option [ 95.717826][ T6899] loop5: detected capacity change from 0 to 4096 [ 95.735400][ T6899] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 95.745597][ T6901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.759726][ T6901] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.768060][ T6901] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 95.782995][ T6901] EXT4-fs (loop4): 1 truncate cleaned up [ 95.784113][ T6905] netlink: 'syz.0.1076': attribute type 5 has an invalid length. [ 95.874224][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 95.884433][ T3380] lo speed is unknown, defaulting to 1000 [ 95.958841][ T6919] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1082'. [ 95.995489][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 96.001857][ T29] kauditd_printk_skb: 1336 callbacks suppressed [ 96.001921][ T29] audit: type=1326 audit(95.985:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.064687][ T6919] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1082'. [ 96.073894][ T29] audit: type=1326 audit(96.025:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.096745][ T29] audit: type=1326 audit(96.025:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.119668][ T29] audit: type=1326 audit(96.025:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.142786][ T29] audit: type=1326 audit(96.025:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.165764][ T29] audit: type=1326 audit(96.035:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.188770][ T29] audit: type=1326 audit(96.035:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.212469][ T29] audit: type=1326 audit(96.035:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.235975][ T29] audit: type=1326 audit(96.035:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.258928][ T29] audit: type=1326 audit(96.035:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.5.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 96.370812][ T6940] syzkaller0: entered promiscuous mode [ 96.376548][ T6940] syzkaller0: entered allmulticast mode [ 96.386901][ T6942] tipc: Started in network mode [ 96.391832][ T6942] tipc: Node identity 2d57e396000000000000000000000013, cluster identity 4711 [ 96.400911][ T6942] tipc: Enabling of bearer rejected, failed to enable media [ 96.483262][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 96.653435][ T6967] loop3: detected capacity change from 0 to 8192 [ 96.702159][ T6969] SELinux: Context @ is not valid (left unmapped). [ 96.709354][ T6967] loop3: p1 p2 p3 p4 [ 96.713543][ T6967] loop3: p1 start 51379968 is beyond EOD, truncated [ 96.720236][ T6967] loop3: p2 start 4293394690 is beyond EOD, truncated [ 96.727318][ T6967] loop3: p3 size 100663552 extends beyond EOD, truncated [ 96.734859][ T6967] loop3: p4 size 50331648 extends beyond EOD, truncated [ 96.745483][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 96.786913][ T6967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6967 comm=syz.3.1101 [ 96.984347][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 97.116435][ T7002] loop5: detected capacity change from 0 to 2048 [ 97.248456][ T7007] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.264060][ T7007] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1632 with error 28 [ 97.276717][ T7007] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.276717][ T7007] [ 97.286493][ T7007] EXT4-fs (loop5): Total free blocks count 0 [ 97.292548][ T7007] EXT4-fs (loop5): Free/Dirty block details [ 97.298577][ T7007] EXT4-fs (loop5): free_blocks=2415919104 [ 97.304379][ T7007] EXT4-fs (loop5): dirty_blocks=1648 [ 97.309980][ T7007] EXT4-fs (loop5): Block reservation details [ 97.316742][ T7007] EXT4-fs (loop5): i_reserved_data_blocks=103 [ 97.501604][ T7017] loop4: detected capacity change from 0 to 1024 [ 97.508363][ T4695] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 97.521936][ T4695] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.521936][ T4695] [ 97.570190][ T7017] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.703511][ T7030] dummy0: left allmulticast mode [ 97.771521][ T7030] dummy0: left promiscuous mode [ 97.776686][ T7030] bridge0: port 3(dummy0) entered disabled state [ 97.803967][ T7030] bridge_slave_0: left allmulticast mode [ 97.810284][ T7030] bridge_slave_0: left promiscuous mode [ 97.816227][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.857447][ T7030] bridge_slave_1: left allmulticast mode [ 97.863180][ T7030] bridge_slave_1: left promiscuous mode [ 97.869086][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.885225][ T7046] loop5: detected capacity change from 0 to 2048 [ 97.898097][ T7030] bond0: (slave bond_slave_0): Releasing backup interface [ 97.910623][ T7030] bond0: (slave bond_slave_1): Releasing backup interface [ 97.930797][ T7030] team0: Port device team_slave_0 removed [ 97.941864][ T7053] loop1: detected capacity change from 0 to 512 [ 97.954530][ T7030] team0: Port device team_slave_1 removed [ 97.963371][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.971135][ T7030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.010788][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.018307][ T7030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.044469][ T7054] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.065943][ T7054] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 706 with error 28 [ 98.078582][ T7054] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.078582][ T7054] [ 98.088318][ T7054] EXT4-fs (loop5): Total free blocks count 0 [ 98.094405][ T7054] EXT4-fs (loop5): Free/Dirty block details [ 98.100378][ T7054] EXT4-fs (loop5): free_blocks=2415919104 [ 98.106236][ T7054] EXT4-fs (loop5): dirty_blocks=720 [ 98.111509][ T7054] EXT4-fs (loop5): Block reservation details [ 98.117640][ T7054] EXT4-fs (loop5): i_reserved_data_blocks=45 [ 98.206587][ T7064] netlink: zone id is out of range [ 98.242176][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 98.255149][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.255149][ T37] [ 98.581208][ T7081] FAULT_INJECTION: forcing a failure. [ 98.581208][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 98.594181][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.4.1134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.594213][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.594292][ T7081] Call Trace: [ 98.594300][ T7081] [ 98.594309][ T7081] __dump_stack+0x1d/0x30 [ 98.594333][ T7081] dump_stack_lvl+0xe8/0x140 [ 98.594355][ T7081] dump_stack+0x15/0x1b [ 98.594373][ T7081] should_fail_ex+0x265/0x280 [ 98.594400][ T7081] should_failslab+0x8c/0xb0 [ 98.594499][ T7081] kmem_cache_alloc_noprof+0x50/0x310 [ 98.594530][ T7081] ? create_new_namespaces+0x3c/0x3d0 [ 98.594704][ T7081] ? __rcu_read_unlock+0x4f/0x70 [ 98.594734][ T7081] create_new_namespaces+0x3c/0x3d0 [ 98.594792][ T7081] __se_sys_setns+0x1b8/0xf20 [ 98.594831][ T7081] ? do_sys_openat2+0xd9/0x110 [ 98.594930][ T7081] __x64_sys_setns+0x31/0x40 [ 98.595051][ T7081] x64_sys_call+0x2b16/0x2ff0 [ 98.595075][ T7081] do_syscall_64+0xd2/0x200 [ 98.595109][ T7081] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.595136][ T7081] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.595168][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.595246][ T7081] RIP: 0033:0x7fe49ac703d7 [ 98.595264][ T7081] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.595284][ T7081] RSP: 002b:00007fe4996d6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 98.595306][ T7081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe49ac703d7 [ 98.595320][ T7081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 98.595395][ T7081] RBP: 00007fe4996d7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.595409][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.595422][ T7081] R13: 00007fe49aeb6038 R14: 00007fe49aeb5fa0 R15: 00007ffc989ac188 [ 98.595443][ T7081] [ 98.866358][ T7088] loop4: detected capacity change from 0 to 1024 [ 98.905059][ T7088] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 98.967416][ T7095] FAULT_INJECTION: forcing a failure. [ 98.967416][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 98.980367][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.4.1139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.980400][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.980416][ T7095] Call Trace: [ 98.980423][ T7095] [ 98.980431][ T7095] __dump_stack+0x1d/0x30 [ 98.980518][ T7095] dump_stack_lvl+0xe8/0x140 [ 98.980543][ T7095] dump_stack+0x15/0x1b [ 98.980564][ T7095] should_fail_ex+0x265/0x280 [ 98.980651][ T7095] should_failslab+0x8c/0xb0 [ 98.980724][ T7095] __kmalloc_noprof+0xa5/0x3e0 [ 98.980757][ T7095] ? fib6_info_alloc+0x2e/0x90 [ 98.980795][ T7095] fib6_info_alloc+0x2e/0x90 [ 98.980910][ T7095] ip6_route_info_create+0xe7/0x390 [ 98.980936][ T7095] inet6_rtm_newroute+0x35e/0x1020 [ 98.981103][ T7095] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 98.981205][ T7095] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 98.981244][ T7095] netlink_rcv_skb+0x123/0x220 [ 98.981367][ T7095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.981498][ T7095] rtnetlink_rcv+0x1c/0x30 [ 98.981531][ T7095] netlink_unicast+0x5bd/0x690 [ 98.981560][ T7095] netlink_sendmsg+0x58b/0x6b0 [ 98.981593][ T7095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.981695][ T7095] __sock_sendmsg+0x145/0x180 [ 98.981734][ T7095] ____sys_sendmsg+0x31e/0x4e0 [ 98.981783][ T7095] ___sys_sendmsg+0x17b/0x1d0 [ 98.981829][ T7095] __x64_sys_sendmsg+0xd4/0x160 [ 98.981862][ T7095] x64_sys_call+0x191e/0x2ff0 [ 98.981911][ T7095] do_syscall_64+0xd2/0x200 [ 98.981958][ T7095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.981987][ T7095] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.982020][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.982046][ T7095] RIP: 0033:0x7fe49ac6eba9 [ 98.982098][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.982174][ T7095] RSP: 002b:00007fe4996d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.982195][ T7095] RAX: ffffffffffffffda RBX: 00007fe49aeb5fa0 RCX: 00007fe49ac6eba9 [ 98.982209][ T7095] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 98.982223][ T7095] RBP: 00007fe4996d7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.982235][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.982248][ T7095] R13: 00007fe49aeb6038 R14: 00007fe49aeb5fa0 R15: 00007ffc989ac188 [ 98.982270][ T7095] [ 99.254894][ T7097] loop1: detected capacity change from 0 to 2048 [ 99.301875][ T7099] netlink: zone id is out of range [ 99.436000][ T7108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.487723][ T7116] loop5: detected capacity change from 0 to 512 [ 99.494409][ T7116] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.495483][ T7108] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 896 with error 28 [ 99.513386][ T7108] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.513386][ T7108] [ 99.513548][ T7116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.523127][ T7108] EXT4-fs (loop1): Total free blocks count 0 [ 99.532714][ T7116] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 99.537616][ T7108] EXT4-fs (loop1): Free/Dirty block details [ 99.553587][ T7108] EXT4-fs (loop1): free_blocks=2415919104 [ 99.559407][ T7108] EXT4-fs (loop1): dirty_blocks=912 [ 99.564687][ T7108] EXT4-fs (loop1): Block reservation details [ 99.570864][ T7108] EXT4-fs (loop1): i_reserved_data_blocks=57 [ 99.584606][ T7116] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 99.602055][ T7116] EXT4-fs (loop5): orphan cleanup on readonly fs [ 99.633735][ T7116] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1146: Invalid block bitmap block 0 in block_group 0 [ 99.688483][ T4698] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 99.700879][ T4698] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.700879][ T4698] [ 99.721445][ T7116] EXT4-fs (loop5): Remounting filesystem read-only [ 99.739401][ T7116] EXT4-fs (loop5): 1 orphan inode deleted [ 99.782607][ T7131] tipc: Enabled bearer , priority 0 [ 99.795201][ T7133] binfmt_misc: register: failed to install interpreter file ./file2 [ 99.850949][ T7138] __nla_validate_parse: 4 callbacks suppressed [ 99.850968][ T7138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1154'. [ 99.874221][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 99.875282][ T7138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1154'. [ 99.893097][ T7131] loop4: detected capacity change from 0 to 764 [ 99.902762][ T7116] SELinux: failed to load policy [ 99.911289][ T7129] tipc: Disabling bearer [ 99.992220][ T7148] netlink: zone id is out of range [ 100.006584][ T7150] loop5: detected capacity change from 0 to 512 [ 100.041098][ T7150] veth0: entered promiscuous mode [ 100.047696][ T7152] loop3: detected capacity change from 0 to 2048 [ 100.066266][ T7149] veth0: left promiscuous mode [ 100.114545][ T7155] loop5: detected capacity change from 0 to 1024 [ 100.242149][ T7162] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.259462][ T7162] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1124 with error 28 [ 100.272052][ T7162] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.272052][ T7162] [ 100.283206][ T7162] EXT4-fs (loop3): Total free blocks count 0 [ 100.290302][ T7162] EXT4-fs (loop3): Free/Dirty block details [ 100.296862][ T7162] EXT4-fs (loop3): free_blocks=2415919104 [ 100.302687][ T7162] EXT4-fs (loop3): dirty_blocks=1136 [ 100.308177][ T7162] EXT4-fs (loop3): Block reservation details [ 100.314454][ T7162] EXT4-fs (loop3): i_reserved_data_blocks=71 [ 100.335722][ T7171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.366395][ T7173] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1167'. [ 100.380401][ T7173] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1167'. [ 100.410876][ T4662] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 100.424319][ T4662] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.424319][ T4662] [ 100.439502][ T7171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.499652][ T7171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.528538][ T7184] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1170'. [ 100.540620][ T7184] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 100.551840][ T7171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.596586][ T7194] loop3: detected capacity change from 0 to 164 [ 100.605471][ T7194] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 100.631437][ T4662] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.648051][ T4662] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.665181][ T4662] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.674220][ T4662] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.759182][ T7206] loop5: detected capacity change from 0 to 256 [ 100.776475][ T7206] FAT-fs (loop5): Directory bread(block 64) failed [ 100.783261][ T7206] FAT-fs (loop5): Directory bread(block 65) failed [ 100.801133][ T7209] netlink: 'syz.0.1177': attribute type 13 has an invalid length. [ 100.809086][ T7209] netlink: 'syz.0.1177': attribute type 17 has an invalid length. [ 100.811893][ T7206] FAT-fs (loop5): Directory bread(block 66) failed [ 100.825754][ T7211] netdevsim netdevsim1: Direct firmware load for 0.€ failed with error -2 [ 100.835769][ T7206] FAT-fs (loop5): Directory bread(block 67) failed [ 100.842443][ T7206] FAT-fs (loop5): Directory bread(block 68) failed [ 100.850461][ T7206] FAT-fs (loop5): Directory bread(block 69) failed [ 100.858704][ T7206] FAT-fs (loop5): Directory bread(block 70) failed [ 100.861162][ T7209] 0ªX¹¦D: left allmulticast mode [ 100.875241][ T7206] FAT-fs (loop5): Directory bread(block 71) failed [ 100.885029][ T7206] FAT-fs (loop5): Directory bread(block 72) failed [ 100.892958][ T7206] FAT-fs (loop5): Directory bread(block 73) failed [ 100.919291][ T7209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.984429][ T7215] loop1: detected capacity change from 0 to 8192 [ 101.005668][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 101.005687][ T29] audit: type=1326 audit(100.995:9569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.075572][ T29] audit: type=1326 audit(100.995:9570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.099877][ T29] audit: type=1326 audit(100.995:9571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.123485][ T29] audit: type=1326 audit(100.995:9572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.146521][ T29] audit: type=1326 audit(100.995:9573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.169686][ T29] audit: type=1326 audit(100.995:9574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.193403][ T29] audit: type=1326 audit(100.995:9575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.216668][ T29] audit: type=1326 audit(100.995:9576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.239791][ T29] audit: type=1326 audit(100.995:9577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.263346][ T29] audit: type=1326 audit(100.995:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc7b52eba9 code=0x7ffc0000 [ 101.431138][ T7226] loop3: detected capacity change from 0 to 128 [ 101.486635][ T7226] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.498119][ T7230] loop1: detected capacity change from 0 to 512 [ 101.506935][ T7230] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1186: bg 0: block 131: padding at end of block bitmap is not set [ 101.571514][ T7226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1184'. [ 101.608847][ T7230] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.618733][ T7230] EXT4-fs (loop1): 1 truncate cleaned up [ 101.625035][ T7230] EXT4-fs mount: 37 callbacks suppressed [ 101.625056][ T7230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.625120][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.625120][ T4698] loop5: rw=1, sector=1192, nr_sectors = 32 limit=256 [ 101.625189][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.625189][ T4698] loop5: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 101.661617][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac1ac00: rx timeout, send abort [ 101.675567][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ac1ac00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 101.718355][ T7237] loop4: detected capacity change from 0 to 512 [ 101.750908][ T7237] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 101.766432][ T7237] System zones: 0-2, 18-18, 34-34 [ 101.769247][ T7244] loop3: detected capacity change from 0 to 1024 [ 101.778571][ T7237] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.786885][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.786885][ T4698] loop5: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 101.800841][ T7237] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1190: bad orphan inode 13 [ 101.811558][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.811558][ T4698] loop5: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 101.831612][ T7244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.862668][ T7237] ext4_test_bit(bit=12, block=18) = 1 [ 101.868146][ T7237] is_bad_inode(inode)=0 [ 101.874682][ T7237] NEXT_ORPHAN(inode)=2130706432 [ 101.879630][ T7237] max_ino=32 [ 101.882858][ T7237] i_nlink=1 [ 101.890401][ T7237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.903332][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.903332][ T4698] loop5: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 101.922017][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.922017][ T4698] loop5: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 101.984200][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.990694][ T4698] kworker/u8:62: attempt to access beyond end of device [ 101.990694][ T4698] loop5: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 102.008220][ T4698] kworker/u8:62: attempt to access beyond end of device [ 102.008220][ T4698] loop5: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 102.024248][ T4698] kworker/u8:62: attempt to access beyond end of device [ 102.024248][ T4698] loop5: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 102.039362][ T4698] kworker/u8:62: attempt to access beyond end of device [ 102.039362][ T4698] loop5: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 102.062718][ T7253] team0: Port device geneve1 removed [ 102.080644][ T7237] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1190: deleted inode referenced: 12 [ 102.139795][ T7237] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1190: deleted inode referenced: 12 [ 102.169823][ T7268] loop5: detected capacity change from 0 to 164 [ 102.192404][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 102.225352][ T7237] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 102.245274][ T7237] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 102.260456][ T7275] loop5: detected capacity change from 0 to 1024 [ 102.267173][ T7237] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.281497][ T7278] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1203'. [ 102.291327][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.304087][ T7278] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1203'. [ 102.315458][ T7275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.370392][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.387287][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.391677][ T7286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7286 comm=syz.0.1206 [ 102.432853][ T7291] netlink: 'syz.5.1208': attribute type 30 has an invalid length. [ 102.502872][ T7297] FAULT_INJECTION: forcing a failure. [ 102.502872][ T7297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.516888][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.1.1209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.516919][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.516935][ T7297] Call Trace: [ 102.517000][ T7297] [ 102.517010][ T7297] __dump_stack+0x1d/0x30 [ 102.517036][ T7297] dump_stack_lvl+0xe8/0x140 [ 102.517058][ T7297] dump_stack+0x15/0x1b [ 102.517079][ T7297] should_fail_ex+0x265/0x280 [ 102.517128][ T7297] should_fail+0xb/0x20 [ 102.517166][ T7297] should_fail_usercopy+0x1a/0x20 [ 102.517197][ T7297] _copy_to_user+0x20/0xa0 [ 102.517233][ T7297] simple_read_from_buffer+0xb5/0x130 [ 102.517257][ T7297] proc_fail_nth_read+0x10e/0x150 [ 102.517360][ T7297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.517460][ T7297] vfs_read+0x1a8/0x770 [ 102.517492][ T7297] ? __rcu_read_unlock+0x4f/0x70 [ 102.517515][ T7297] ? __fget_files+0x184/0x1c0 [ 102.517584][ T7297] ksys_read+0xda/0x1a0 [ 102.517652][ T7297] __x64_sys_read+0x40/0x50 [ 102.517699][ T7297] x64_sys_call+0x27bc/0x2ff0 [ 102.517724][ T7297] do_syscall_64+0xd2/0x200 [ 102.517824][ T7297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.517855][ T7297] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.517922][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.517950][ T7297] RIP: 0033:0x7f149526d5bc [ 102.517969][ T7297] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.518002][ T7297] RSP: 002b:00007f1493cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.518026][ T7297] RAX: ffffffffffffffda RBX: 00007f14954b5fa0 RCX: 00007f149526d5bc [ 102.518042][ T7297] RDX: 000000000000000f RSI: 00007f1493cd70a0 RDI: 0000000000000006 [ 102.518058][ T7297] RBP: 00007f1493cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.518073][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.518086][ T7297] R13: 00007f14954b6038 R14: 00007f14954b5fa0 R15: 00007fffa804e4d8 [ 102.518106][ T7297] [ 102.757792][ T7301] FAULT_INJECTION: forcing a failure. [ 102.757792][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 102.771472][ T7301] CPU: 1 UID: 0 PID: 7301 Comm: syz.1.1212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.771509][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.771524][ T7301] Call Trace: [ 102.771534][ T7301] [ 102.771544][ T7301] __dump_stack+0x1d/0x30 [ 102.771632][ T7301] dump_stack_lvl+0xe8/0x140 [ 102.771657][ T7301] dump_stack+0x15/0x1b [ 102.771679][ T7301] should_fail_ex+0x265/0x280 [ 102.771710][ T7301] should_failslab+0x8c/0xb0 [ 102.771743][ T7301] kmem_cache_alloc_node_noprof+0x57/0x320 [ 102.771849][ T7301] ? __alloc_skb+0x101/0x320 [ 102.771879][ T7301] __alloc_skb+0x101/0x320 [ 102.771908][ T7301] netlink_alloc_large_skb+0xba/0xf0 [ 102.771937][ T7301] netlink_sendmsg+0x3cf/0x6b0 [ 102.772040][ T7301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.772069][ T7301] __sock_sendmsg+0x145/0x180 [ 102.772155][ T7301] ____sys_sendmsg+0x31e/0x4e0 [ 102.772184][ T7301] ___sys_sendmsg+0x17b/0x1d0 [ 102.772263][ T7301] __x64_sys_sendmsg+0xd4/0x160 [ 102.772295][ T7301] x64_sys_call+0x191e/0x2ff0 [ 102.772483][ T7301] do_syscall_64+0xd2/0x200 [ 102.772574][ T7301] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.772606][ T7301] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.772645][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.772682][ T7301] RIP: 0033:0x7f149526eba9 [ 102.772700][ T7301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.772718][ T7301] RSP: 002b:00007f1493cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.772743][ T7301] RAX: ffffffffffffffda RBX: 00007f14954b5fa0 RCX: 00007f149526eba9 [ 102.772755][ T7301] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 102.772841][ T7301] RBP: 00007f1493cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.772856][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.772871][ T7301] R13: 00007f14954b6038 R14: 00007f14954b5fa0 R15: 00007fffa804e4d8 [ 102.772897][ T7301] [ 103.114246][ T7313] loop3: detected capacity change from 0 to 1024 [ 103.132536][ T7313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.224865][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.271243][ T7332] netlink: 'syz.4.1220': attribute type 13 has an invalid length. [ 103.279625][ T7332] netlink: 'syz.4.1220': attribute type 17 has an invalid length. [ 103.304628][ T7332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.541610][ T7338] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 103.555182][ T7336] loop3: detected capacity change from 0 to 1024 [ 103.629720][ T7336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.879767][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.320714][ T7357] loop1: detected capacity change from 0 to 512 [ 104.338846][ T7357] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.350043][ T7357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.643131][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.714794][ T7377] netlink: 'syz.4.1235': attribute type 13 has an invalid length. [ 104.723370][ T7377] netlink: 'syz.4.1235': attribute type 17 has an invalid length. [ 104.738932][ T7376] lo speed is unknown, defaulting to 1000 [ 104.777127][ T7377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.870402][ T7376] lo speed is unknown, defaulting to 1000 [ 104.896020][ T7394] __nla_validate_parse: 12 callbacks suppressed [ 104.896041][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 104.926233][ T7391] loop4: detected capacity change from 0 to 2048 [ 104.936363][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.962735][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.972451][ T7391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 105.012751][ T7376] lo speed is unknown, defaulting to 1000 [ 105.089417][ T7407] loop5: detected capacity change from 0 to 512 [ 105.117306][ T7408] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.143235][ T7407] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 105.147123][ T7408] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 716 with error 28 [ 105.156512][ T7407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.164033][ T7408] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.164033][ T7408] [ 105.164107][ T7408] EXT4-fs (loop4): Total free blocks count 0 [ 105.164124][ T7408] EXT4-fs (loop4): Free/Dirty block details [ 105.164138][ T7408] EXT4-fs (loop4): free_blocks=2415919104 [ 105.164155][ T7408] EXT4-fs (loop4): dirty_blocks=720 [ 105.164170][ T7408] EXT4-fs (loop4): Block reservation details [ 105.217129][ T7408] EXT4-fs (loop4): i_reserved_data_blocks=45 [ 105.268971][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 105.348948][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.366940][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 105.417301][ T7423] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1250'. [ 105.431025][ T7420] loop4: detected capacity change from 0 to 512 [ 105.464607][ T7420] msdos: Unknown parameter 'dos1xfÄlžL@loppy' [ 105.539155][ T7431] netlink: 'syz.5.1253': attribute type 13 has an invalid length. [ 105.547271][ T7431] netlink: 'syz.5.1253': attribute type 17 has an invalid length. [ 105.605168][ T7431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.961870][ T7451] loop5: detected capacity change from 0 to 512 [ 105.977281][ T7451] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 105.987730][ T7451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.063359][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.212212][ T7463] loop5: detected capacity change from 0 to 512 [ 106.232346][ T7463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.259373][ T7463] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a803c018, mo2=0002] [ 106.268465][ T7463] System zones: 0-2, 18-18, 34-34 [ 106.275494][ T7463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.305148][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.397305][ T7471] netlink: 'syz.5.1265': attribute type 13 has an invalid length. [ 106.405288][ T7471] netlink: 'syz.5.1265': attribute type 17 has an invalid length. [ 106.423894][ T7471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.830467][ T7494] netlink: zone id is out of range [ 106.885206][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 106.885225][ T29] audit: type=1400 audit(106.865:10248): avc: denied { connect } for pid=7480 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.887858][ T7499] 9p: Unknown access argument ¿: -22 [ 106.951840][ T29] audit: type=1400 audit(106.935:10249): avc: denied { prog_load } for pid=7498 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.981558][ T29] audit: type=1400 audit(106.935:10250): avc: denied { bpf } for pid=7498 comm="syz.1.1275" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.986368][ T7499] loop1: detected capacity change from 0 to 128 [ 107.002554][ T29] audit: type=1400 audit(106.935:10251): avc: denied { perfmon } for pid=7498 comm="syz.1.1275" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.009768][ T7499] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.029893][ T29] audit: type=1400 audit(106.945:10252): avc: denied { map_create } for pid=7498 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.050366][ T7502] loop5: detected capacity change from 0 to 128 [ 107.060716][ T29] audit: type=1400 audit(106.945:10253): avc: denied { map_read map_write } for pid=7498 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.068592][ T7499] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.087406][ T29] audit: type=1400 audit(106.945:10254): avc: denied { prog_run } for pid=7498 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.096169][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e5c600: rx timeout, send abort [ 107.101186][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 107.115339][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e5c600: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 107.147194][ T29] audit: type=1400 audit(106.955:10255): avc: denied { read write } for pid=6023 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.172429][ T29] audit: type=1400 audit(106.955:10256): avc: denied { open } for pid=6023 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.196853][ T29] audit: type=1400 audit(106.955:10257): avc: denied { ioctl } for pid=6023 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.252944][ T4695] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.297861][ T7510] loop1: detected capacity change from 0 to 1024 [ 107.327292][ T7510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.361270][ T7511] lo speed is unknown, defaulting to 1000 [ 107.402522][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 107.409300][ T7511] lo speed is unknown, defaulting to 1000 [ 107.418323][ T7510] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 107.449861][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.471576][ T7526] lo speed is unknown, defaulting to 1000 [ 107.509052][ T7527] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1282'. [ 107.517024][ T7511] lo speed is unknown, defaulting to 1000 [ 107.543224][ T7527] FAULT_INJECTION: forcing a failure. [ 107.543224][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 107.556569][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.5.1282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.556601][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.556631][ T7527] Call Trace: [ 107.556640][ T7527] [ 107.556650][ T7527] __dump_stack+0x1d/0x30 [ 107.556744][ T7527] dump_stack_lvl+0xe8/0x140 [ 107.556768][ T7527] dump_stack+0x15/0x1b [ 107.556797][ T7527] should_fail_ex+0x265/0x280 [ 107.556829][ T7527] should_failslab+0x8c/0xb0 [ 107.556884][ T7527] kmem_cache_alloc_noprof+0x50/0x310 [ 107.556921][ T7527] ? skb_clone+0x151/0x1f0 [ 107.557036][ T7527] skb_clone+0x151/0x1f0 [ 107.557067][ T7527] __netlink_deliver_tap+0x2c9/0x500 [ 107.557099][ T7527] ? netlink_attachskb+0x2d0/0x610 [ 107.557122][ T7527] netlink_sendskb+0x126/0x150 [ 107.557146][ T7527] netlink_unicast+0x2a2/0x690 [ 107.557215][ T7527] netlink_ack+0x4c8/0x500 [ 107.557325][ T7527] netlink_rcv_skb+0x192/0x220 [ 107.557355][ T7527] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.557403][ T7527] rtnetlink_rcv+0x1c/0x30 [ 107.557492][ T7527] netlink_unicast+0x5bd/0x690 [ 107.557524][ T7527] netlink_sendmsg+0x58b/0x6b0 [ 107.557560][ T7527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.557629][ T7527] __sock_sendmsg+0x145/0x180 [ 107.557659][ T7527] ____sys_sendmsg+0x31e/0x4e0 [ 107.557715][ T7527] ___sys_sendmsg+0x17b/0x1d0 [ 107.557752][ T7527] __x64_sys_sendmsg+0xd4/0x160 [ 107.557816][ T7527] x64_sys_call+0x191e/0x2ff0 [ 107.557835][ T7527] do_syscall_64+0xd2/0x200 [ 107.557865][ T7527] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.557888][ T7527] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.557987][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.558006][ T7527] RIP: 0033:0x7fbc7b52eba9 [ 107.558020][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.558038][ T7527] RSP: 002b:00007fbc79f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.558071][ T7527] RAX: ffffffffffffffda RBX: 00007fbc7b776090 RCX: 00007fbc7b52eba9 [ 107.558081][ T7527] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000008 [ 107.558092][ T7527] RBP: 00007fbc79f76090 R08: 0000000000000000 R09: 0000000000000000 [ 107.558171][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.558182][ T7527] R13: 00007fbc7b776128 R14: 00007fbc7b776090 R15: 00007ffcc3f8d8c8 [ 107.558199][ T7527] [ 107.574351][ T7532] loop1: detected capacity change from 0 to 512 [ 107.622356][ T7526] lo speed is unknown, defaulting to 1000 [ 107.647565][ T7532] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.652386][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 107.655400][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.659848][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 107.721664][ T7526] lo speed is unknown, defaulting to 1000 [ 107.950900][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.974836][ T7544] syzkaller0: entered promiscuous mode [ 107.980603][ T7544] syzkaller0: entered allmulticast mode [ 108.070301][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1291'. [ 108.132194][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 108.242278][ T7562] FAULT_INJECTION: forcing a failure. [ 108.242278][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 108.256470][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.5.1293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.256498][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.256510][ T7562] Call Trace: [ 108.256546][ T7562] [ 108.256554][ T7562] __dump_stack+0x1d/0x30 [ 108.256575][ T7562] dump_stack_lvl+0xe8/0x140 [ 108.256621][ T7562] dump_stack+0x15/0x1b [ 108.256643][ T7562] should_fail_ex+0x265/0x280 [ 108.256684][ T7562] should_failslab+0x8c/0xb0 [ 108.256710][ T7562] kmem_cache_alloc_noprof+0x50/0x310 [ 108.256739][ T7562] ? skb_clone+0x151/0x1f0 [ 108.256782][ T7562] skb_clone+0x151/0x1f0 [ 108.256828][ T7562] __netlink_deliver_tap+0x2c9/0x500 [ 108.256864][ T7562] netlink_unicast+0x66b/0x690 [ 108.256888][ T7562] netlink_sendmsg+0x58b/0x6b0 [ 108.256926][ T7562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.256978][ T7562] __sock_sendmsg+0x145/0x180 [ 108.257105][ T7562] ____sys_sendmsg+0x31e/0x4e0 [ 108.257138][ T7562] ___sys_sendmsg+0x17b/0x1d0 [ 108.257242][ T7562] __x64_sys_sendmsg+0xd4/0x160 [ 108.257281][ T7562] x64_sys_call+0x191e/0x2ff0 [ 108.257306][ T7562] do_syscall_64+0xd2/0x200 [ 108.257387][ T7562] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.257489][ T7562] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.257562][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.257590][ T7562] RIP: 0033:0x7fbc7b52eba9 [ 108.257609][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.257627][ T7562] RSP: 002b:00007fbc79f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.257688][ T7562] RAX: ffffffffffffffda RBX: 00007fbc7b775fa0 RCX: 00007fbc7b52eba9 [ 108.257708][ T7562] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 108.257725][ T7562] RBP: 00007fbc79f97090 R08: 0000000000000000 R09: 0000000000000000 [ 108.257741][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.257756][ T7562] R13: 00007fbc7b776038 R14: 00007fbc7b775fa0 R15: 00007ffcc3f8d8c8 [ 108.257845][ T7562] [ 108.259504][ T7562] IPv6: Can't replace route, no match found [ 108.347193][ T7559] tipc: Started in network mode [ 108.485294][ T7559] tipc: Node identity 224f24a126ab, cluster identity 4711 [ 108.492766][ T7559] tipc: Enabled bearer , priority 0 [ 108.502578][ T7558] tipc: Resetting bearer [ 108.529320][ T7558] tipc: Disabling bearer [ 108.655927][ T7574] loop5: detected capacity change from 0 to 1024 [ 108.667878][ T7574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.694673][ T7574] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 108.745191][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.759518][ T7579] FAULT_INJECTION: forcing a failure. [ 108.759518][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 108.773143][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.3.1299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.773179][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.773196][ T7579] Call Trace: [ 108.773204][ T7579] [ 108.773214][ T7579] __dump_stack+0x1d/0x30 [ 108.773245][ T7579] dump_stack_lvl+0xe8/0x140 [ 108.773270][ T7579] dump_stack+0x15/0x1b [ 108.773290][ T7579] should_fail_ex+0x265/0x280 [ 108.773323][ T7579] should_failslab+0x8c/0xb0 [ 108.773358][ T7579] kmem_cache_alloc_noprof+0x50/0x310 [ 108.773390][ T7579] ? vm_area_alloc+0x2c/0xb0 [ 108.773423][ T7579] vm_area_alloc+0x2c/0xb0 [ 108.773459][ T7579] mmap_region+0xaa2/0x1630 [ 108.773526][ T7579] do_mmap+0x9b3/0xbe0 [ 108.773568][ T7579] vm_mmap_pgoff+0x17a/0x2e0 [ 108.773607][ T7579] ksys_mmap_pgoff+0x2d0/0x310 [ 108.773633][ T7579] x64_sys_call+0x14a3/0x2ff0 [ 108.773663][ T7579] do_syscall_64+0xd2/0x200 [ 108.773706][ T7579] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.773739][ T7579] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.773778][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.773805][ T7579] RIP: 0033:0x7fa9f867eba9 [ 108.773826][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.773849][ T7579] RSP: 002b:00007fa9f70e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 108.773874][ T7579] RAX: ffffffffffffffda RBX: 00007fa9f88c5fa0 RCX: 00007fa9f867eba9 [ 108.774010][ T7579] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 108.774027][ T7579] RBP: 00007fa9f70e7090 R08: ffffffffffffffff R09: 0000000000000000 [ 108.774044][ T7579] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002 [ 108.774060][ T7579] R13: 00007fa9f88c6038 R14: 00007fa9f88c5fa0 R15: 00007ffe6668e7e8 [ 108.774090][ T7579] [ 109.031708][ T7581] loop5: detected capacity change from 0 to 512 [ 109.048420][ T7581] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 109.071301][ T7581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.085923][ T7585] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.096808][ T7585] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.203483][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.238832][ T7605] loop3: detected capacity change from 0 to 512 [ 109.251644][ T7605] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 109.359063][ T7618] syzkaller0: entered promiscuous mode [ 109.364774][ T7618] syzkaller0: entered allmulticast mode [ 109.381447][ T7620] dummy0: entered allmulticast mode [ 109.387447][ T7620] dummy0: left allmulticast mode [ 109.695598][ T7631] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.704460][ T7631] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.737942][ T7634] netem: change failed [ 109.769390][ T7636] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 110.316210][ T7663] netlink: zone id is out of range [ 110.367633][ T7661] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.385888][ T7661] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 111.048042][ T7691] __nla_validate_parse: 8 callbacks suppressed [ 111.048059][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 111.296374][ T7695] openvswitch: netlink: Message has 6 unknown bytes. [ 111.410095][ T7700] syzkaller0: entered promiscuous mode [ 111.415882][ T7700] syzkaller0: entered allmulticast mode [ 111.445206][ T7708] loop5: detected capacity change from 0 to 512 [ 111.466362][ T7708] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 111.474976][ T7708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.514737][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad13400: rx timeout, send abort [ 111.523113][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad13400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 111.645827][ T7716] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 111.654039][ T7716] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 111.675955][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.722621][ T7730] loop4: detected capacity change from 0 to 1024 [ 111.730912][ T7731] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 111.732424][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1352'. [ 111.771485][ T7730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.804168][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.952845][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 111.952862][ T29] audit: type=1326 audit(111.935:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 111.983385][ T29] audit: type=1326 audit(111.935:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.007457][ T29] audit: type=1326 audit(111.935:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.031051][ T29] audit: type=1326 audit(111.935:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.054894][ T29] audit: type=1326 audit(111.935:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.079429][ T29] audit: type=1326 audit(111.935:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.106306][ T29] audit: type=1326 audit(111.935:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.130655][ T29] audit: type=1326 audit(111.935:11123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.154864][ T29] audit: type=1326 audit(111.935:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.179024][ T29] audit: type=1326 audit(111.935:11125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.1.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149526eba9 code=0x7ffc0000 [ 112.211002][ T7754] loop5: detected capacity change from 0 to 2048 [ 112.227536][ T7754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 112.371227][ T7754] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.397468][ T7754] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 124 with max blocks 124 with error 28 [ 112.410520][ T7754] EXT4-fs (loop5): This should not happen!! Data will be lost [ 112.410520][ T7754] [ 112.420542][ T7754] EXT4-fs (loop5): Total free blocks count 0 [ 112.426839][ T7754] EXT4-fs (loop5): Free/Dirty block details [ 112.432912][ T7754] EXT4-fs (loop5): free_blocks=2415919104 [ 112.439006][ T7754] EXT4-fs (loop5): dirty_blocks=1392 [ 112.444900][ T7754] EXT4-fs (loop5): Block reservation details [ 112.451128][ T7754] EXT4-fs (loop5): i_reserved_data_blocks=87 [ 112.543640][ T4662] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 112.654256][ T7767] loop1: detected capacity change from 0 to 512 [ 112.667716][ T7767] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.679320][ T7767] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.697113][ T7767] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 112.704450][ T7767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm gtp: bg 0: block 248: padding at end of block bitmap is not set [ 112.719433][ T7767] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 112.729338][ T7767] EXT4-fs (loop1): 1 orphan inode deleted [ 112.739072][ T7767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.868323][ T7773] can0: slcan on ttyS3. [ 113.100959][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ad13800: rx timeout, send abort [ 113.109392][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad13800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 113.109509][ T7773] loop4: detected capacity change from 0 to 32768 [ 113.225450][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.266010][ T7775] can0 (unregistered): slcan off ttyS3. [ 113.381288][ T7790] loop4: detected capacity change from 0 to 512 [ 113.390400][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 113.408527][ T7790] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 113.420435][ T7790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.461054][ T7793] loop1: detected capacity change from 0 to 2048 [ 113.568312][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.614194][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 113.693092][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 113.702465][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 113.762694][ T7818] loop4: detected capacity change from 0 to 1024 [ 113.798405][ T7818] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 113.820033][ T7826] loop1: detected capacity change from 0 to 512 [ 113.830975][ T7826] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.854847][ T7818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.872655][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1382'. [ 113.912721][ T7826] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1384: Failed to acquire dquot type 0 [ 113.935120][ T7826] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 113.978667][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.017904][ T3304] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 114.056263][ T7840] loop1: detected capacity change from 0 to 512 [ 114.080103][ T7840] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.093010][ T7840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.249166][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.299923][ T7873] loop3: detected capacity change from 0 to 512 [ 114.309094][ T7873] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1398: bad orphan inode 15 [ 114.319825][ T7873] ext4_test_bit(bit=14, block=5) = 0 [ 114.326637][ T7873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.365759][ T7877] loop1: detected capacity change from 0 to 2048 [ 114.368016][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.389315][ T7877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.666591][ T7911] loop4: detected capacity change from 0 to 1024 [ 114.689317][ T7911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.713915][ T7915] loop5: detected capacity change from 0 to 512 [ 114.725022][ T7915] EXT4-fs (loop5): failed to initialize system zone (-117) [ 114.733358][ T7915] EXT4-fs (loop5): mount failed [ 114.739749][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.768146][ T7918] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1412'. [ 114.886079][ T7936] FAULT_INJECTION: forcing a failure. [ 114.886079][ T7936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.899887][ T7936] CPU: 1 UID: 0 PID: 7936 Comm: syz.3.1413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.899922][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.899935][ T7936] Call Trace: [ 114.899943][ T7936] [ 114.899951][ T7936] __dump_stack+0x1d/0x30 [ 114.899974][ T7936] dump_stack_lvl+0xe8/0x140 [ 114.899996][ T7936] dump_stack+0x15/0x1b [ 114.900027][ T7936] should_fail_ex+0x265/0x280 [ 114.900059][ T7936] should_fail+0xb/0x20 [ 114.900084][ T7936] should_fail_usercopy+0x1a/0x20 [ 114.900134][ T7936] _copy_from_user+0x1c/0xb0 [ 114.900239][ T7936] sctp_setsockopt+0x154/0xe30 [ 114.900261][ T7936] sock_common_setsockopt+0x69/0x80 [ 114.900324][ T7936] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 114.900370][ T7936] __sys_setsockopt+0x184/0x200 [ 114.900416][ T7936] __x64_sys_setsockopt+0x64/0x80 [ 114.900477][ T7936] x64_sys_call+0x20ec/0x2ff0 [ 114.900506][ T7936] do_syscall_64+0xd2/0x200 [ 114.900548][ T7936] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.900669][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.900698][ T7936] RIP: 0033:0x7fa9f867eba9 [ 114.900713][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.900797][ T7936] RSP: 002b:00007fa9f70c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.900821][ T7936] RAX: ffffffffffffffda RBX: 00007fa9f88c6090 RCX: 00007fa9f867eba9 [ 114.900837][ T7936] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 114.900852][ T7936] RBP: 00007fa9f70c6090 R08: 000000000000009c R09: 0000000000000000 [ 114.900877][ T7936] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 114.900889][ T7936] R13: 00007fa9f88c6128 R14: 00007fa9f88c6090 R15: 00007ffe6668e7e8 [ 114.900913][ T7936] [ 115.115744][ T7941] geneve0: entered allmulticast mode [ 115.141887][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.178649][ T7946] loop5: detected capacity change from 0 to 512 [ 115.189160][ T7946] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1422: bg 0: block 131: padding at end of block bitmap is not set [ 115.209517][ T7946] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 115.220238][ T7946] EXT4-fs (loop5): 1 truncate cleaned up [ 115.227873][ T7946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.262584][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.308285][ T7962] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1425'. [ 115.371850][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 115.438978][ T7977] loop5: detected capacity change from 0 to 2048 [ 115.458333][ T7977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.478867][ T7972] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1429: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 115.502002][ T7972] EXT4-fs (loop5): Remounting filesystem read-only [ 115.583190][ T6023] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.691156][ T7994] loop3: detected capacity change from 0 to 1024 [ 115.698866][ T7994] EXT4-fs: Ignoring removed orlov option [ 115.705886][ T7994] EXT4-fs: Ignoring removed nobh option [ 115.711715][ T7994] EXT4-fs: Ignoring removed bh option [ 115.751961][ T7994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.773204][ T7994] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1437: Allocating blocks 481-513 which overlap fs metadata [ 115.862023][ T8002] syzkaller0: entered promiscuous mode [ 115.867965][ T8002] syzkaller0: entered allmulticast mode [ 115.895315][ T7994] EXT4-fs (loop3): pa ffff8881076ad930: logic 352, phys. 465, len 3 [ 115.904049][ T7994] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 115.995881][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.040543][ T8020] netlink: zone id is out of range [ 116.055945][ T8016] loop5: detected capacity change from 0 to 128 [ 116.099174][ T8016] netlink: 'syz.5.1443': attribute type 4 has an invalid length. [ 116.110432][ T8024] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 116.160773][ T8026] netlink: zone id is out of range [ 116.175414][ T8030] SELinux: security_context_str_to_sid (ÛO*) failed with errno=-22 [ 116.263571][ T8030] geneve2: entered promiscuous mode [ 116.268911][ T8030] geneve2: entered allmulticast mode [ 116.338493][ T8040] syzkaller0: entered promiscuous mode [ 116.344431][ T8040] syzkaller0: entered allmulticast mode [ 116.403527][ T8042] lo speed is unknown, defaulting to 1000 [ 116.441942][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 116.450897][ T8042] lo speed is unknown, defaulting to 1000 [ 116.484353][ T8042] lo speed is unknown, defaulting to 1000 [ 116.511365][ T8050] loop3: detected capacity change from 0 to 512 [ 116.525873][ T8050] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.552005][ T8050] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1457: bad orphan inode 13 [ 116.599343][ T8050] ext4_test_bit(bit=12, block=18) = 1 [ 116.608126][ T8050] is_bad_inode(inode)=0 [ 116.612437][ T8050] NEXT_ORPHAN(inode)=2130706432 [ 116.617359][ T8050] max_ino=32 [ 116.620582][ T8050] i_nlink=1 [ 116.625404][ T8050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.659482][ T8050] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 116.684657][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.693556][ T8050] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 116.704189][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.775641][ T8069] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 116.784491][ T8069] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 116.939295][ T8093] loop5: detected capacity change from 0 to 128 [ 116.947890][ T8093] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.960680][ T29] kauditd_printk_skb: 843 callbacks suppressed [ 116.960706][ T29] audit: type=1326 audit(116.945:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe49ac65b67 code=0x7ffc0000 [ 116.990745][ T29] audit: type=1326 audit(116.945:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe49ac0ada9 code=0x7ffc0000 [ 117.014426][ T29] audit: type=1326 audit(116.945:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe49ac6eba9 code=0x7ffc0000 [ 117.046181][ T29] audit: type=1326 audit(116.955:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe49ac65b67 code=0x7ffc0000 [ 117.069999][ T29] audit: type=1326 audit(116.955:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe49ac0ada9 code=0x7ffc0000 [ 117.093634][ T29] audit: type=1326 audit(116.955:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe49ac6eba9 code=0x7ffc0000 [ 117.117631][ T29] audit: type=1400 audit(116.955:11972): avc: denied { create } for pid=8092 comm="syz.5.1472" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 117.138166][ T29] audit: type=1400 audit(116.955:11973): avc: denied { setattr } for pid=8092 comm="syz.5.1472" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 117.160817][ T29] audit: type=1326 audit(116.955:11974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe49ac65b67 code=0x7ffc0000 [ 117.184541][ T29] audit: type=1326 audit(116.955:11975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe49ac0ada9 code=0x7ffc0000 [ 117.248992][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.286951][ T6023] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.406638][ T8105] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 117.415025][ T8105] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 117.572595][ T8131] loop5: detected capacity change from 0 to 1024 [ 117.593064][ T8133] netlink: zone id is out of range [ 117.599978][ T8131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.654391][ T8139] loop1: detected capacity change from 0 to 2048 [ 117.669103][ T8139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 117.740160][ T8149] loop3: detected capacity change from 0 to 1024 [ 117.750772][ T8149] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.758552][ T8149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.828075][ T8152] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.843626][ T8152] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1656 with error 28 [ 117.856463][ T8152] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.856463][ T8152] [ 117.866491][ T8152] EXT4-fs (loop1): Total free blocks count 0 [ 117.873260][ T8152] EXT4-fs (loop1): Free/Dirty block details [ 117.879415][ T8152] EXT4-fs (loop1): free_blocks=2415919104 [ 117.885443][ T8152] EXT4-fs (loop1): dirty_blocks=1664 [ 117.890843][ T8152] EXT4-fs (loop1): Block reservation details [ 117.897326][ T8152] EXT4-fs (loop1): i_reserved_data_blocks=104 [ 117.982326][ T8165] loop3: detected capacity change from 0 to 512 [ 117.996973][ T8165] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.016999][ T8165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.066824][ T8165] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.1498: corrupted xattr entries [ 118.079751][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1497'. [ 118.093068][ T8165] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.108406][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 118.122030][ T8165] EXT4-fs (loop3): 1 orphan inode deleted [ 118.159014][ T8165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.191001][ T8171] loop1: detected capacity change from 0 to 2048 [ 118.229428][ T8177] netlink: zone id is out of range [ 118.328620][ T8178] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.346560][ T8178] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 832 with error 28 [ 118.359613][ T8178] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.359613][ T8178] [ 118.369322][ T8178] EXT4-fs (loop1): Total free blocks count 0 [ 118.375335][ T8178] EXT4-fs (loop1): Free/Dirty block details [ 118.381305][ T8178] EXT4-fs (loop1): free_blocks=2415919104 [ 118.387213][ T8178] EXT4-fs (loop1): dirty_blocks=848 [ 118.392545][ T8178] EXT4-fs (loop1): Block reservation details [ 118.398764][ T8178] EXT4-fs (loop1): i_reserved_data_blocks=53 [ 118.441845][ T4662] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 118.454941][ T4662] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.454941][ T4662] [ 118.455176][ T8185] loop3: detected capacity change from 0 to 1024 [ 118.553264][ T8191] lo speed is unknown, defaulting to 1000 [ 118.603638][ T8191] lo speed is unknown, defaulting to 1000 [ 118.634655][ T8201] bridge0: entered promiscuous mode [ 118.640300][ T8201] macvtap0: entered allmulticast mode [ 118.645775][ T8201] bridge0: entered allmulticast mode [ 118.653911][ T2979] ================================================================== [ 118.655731][ T8201] bridge0: port 3(macvtap0) entered blocking state [ 118.662036][ T2979] BUG: KCSAN: data-race in evdev_pass_values / evdev_read [ 118.668667][ T8201] bridge0: port 3(macvtap0) entered disabled state [ 118.675665][ T2979] [ 118.675693][ T2979] write to 0xffff888104301808 of 4 bytes by task 8202 on cpu 0: [ 118.675714][ T2979] evdev_pass_values+0x3d4/0x510 [ 118.675740][ T2979] evdev_events+0x8e/0xd0 [ 118.675760][ T2979] input_pass_values+0x123/0x390 [ 118.675781][ T2979] input_event_dispose+0x248/0x320 [ 118.711836][ T2979] input_handle_event+0x9e8/0xa20 [ 118.717775][ T2979] input_inject_event+0xbc/0x120 [ 118.723229][ T2979] evdev_write+0x1fa/0x290 [ 118.727703][ T2979] vfs_write+0x269/0x960 [ 118.731989][ T2979] ksys_write+0xda/0x1a0 [ 118.736281][ T2979] __x64_sys_write+0x40/0x50 [ 118.740941][ T2979] x64_sys_call+0x27fe/0x2ff0 [ 118.745635][ T2979] do_syscall_64+0xd2/0x200 [ 118.750154][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.756063][ T2979] [ 118.758397][ T2979] read to 0xffff888104301808 of 4 bytes by task 2979 on cpu 1: [ 118.765947][ T2979] evdev_read+0x158/0x5e0 [ 118.770293][ T2979] vfs_read+0x1a8/0x770 [ 118.774469][ T2979] ksys_read+0xda/0x1a0 [ 118.778643][ T2979] __x64_sys_read+0x40/0x50 [ 118.783165][ T2979] x64_sys_call+0x27bc/0x2ff0 [ 118.787858][ T2979] do_syscall_64+0xd2/0x200 [ 118.792399][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.798483][ T2979] [ 118.801006][ T2979] value changed: 0x00000003 -> 0x00000005 [ 118.806816][ T2979] [ 118.809259][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 118.815426][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: acpid Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.824817][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.835043][ T2979] ================================================================== [ 118.858981][ T8201] bridge0: left allmulticast mode [ 118.864156][ T8201] bridge0: left promiscuous mode [ 118.883836][ T8191] lo speed is unknown, defaulting to 1000