last executing test programs: 2m48.071926753s ago: executing program 4 (id=278): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) io_uring_setup(0x66d0, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 2m47.856320106s ago: executing program 4 (id=282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/253, 0x1b6, 0xfd, 0x0, 0xfffffffe, 0x10000, @value=r2}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112b9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@getchain={0x2c, 0x66, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff8}, {0xfff1, 0xe}, {0xe, 0xa}}, [{0x8, 0xb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000040) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 2m47.692506529s ago: executing program 4 (id=287): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @local, 0x1}}, 0x7, 0xf4d7}, &(0x7f0000000100)=0x90) sendmsg(r0, &(0x7f0000001380)={&(0x7f0000000140)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="457f26e5de8d4c14e4b8e5775dbbe25d2fa1d628194c", 0x16}, {&(0x7f0000001200)="700044de492aa30ecba1cbc4b6651bcb49d016c3b3e370ef064c667ee9261c7a426acd0bc86ed0e5b8e1b92459cc4fa8c6478b364f71c77c29915a87af716bedeffdca04465718a17fc0f034aceefc2f60778c22bdea184c4dd22df8b21aaf1b346a119d95fe0c09c9ea1083c8eb421717cfbd1c72d674fda4b064d08697570d35e0e9ee387837", 0x87}, {&(0x7f00000012c0)="a2619cccccc473b61130855f2f4a401f19b69535127847ba7ce04bef81676bf824aad05f8778c5846f0a8725b5427cda485466185c3cbb6e72d8519126e41a149768b3ea3dbb201ad2623c7b1135", 0x4e}], 0x4}, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001400)={0x2, [0x0, 0x0]}, &(0x7f0000001440)=0xc) ftruncate(r0, 0x7) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001480)={'erspan0\x00', @broadcast}) syz_open_pts(r0, 0x400) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000014c0)={r1, 0xd7, "270b3952238f6ebbc43f25e3f7574e4ec22b9ab0868cc8944daf532f4fe21b648cd86054906fa28e8a35e758d2f1b8a80932d98d283c51e0f2178b3d9427e6b08bc3b52c5ea4b375053f1f36c10abc5edfa6eeba6bf850e3896c84b6e5f8185271c7f58decbdae7f4552ba320266bbdb0179daba4298495d8a042a9fc147e4f0b190dab29b0e8d42405ab956c6f638d26285ec861bfd5aa73bce34c80863bb21c698dca4b61a2ee165c05b580e38a1521dae489eec579cce680a12757ad045b024926efe45bcbc42a0b77a8a260f83d490d9e957699181"}, &(0x7f00000015c0)=0xdf) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001600)={0x7, 0xb, 0x18305, 0x401, 0x7d7, 0xb6cf, 0x8, 0x420b, r2}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001640)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0xb541, 0x5d, 0xfffffde0, 0x9, 0x2}, &(0x7f0000001700)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001740)={r3, 0x3ff, 0x9, 0x1ff}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002d40)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000002e40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r0, {r4, 0xee01}}, './file0\x00'}) connect$inet6(r5, &(0x7f0000002ec0)={0xa, 0x4e24, 0x7, @mcast1, 0x4bc7}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000031c0)={'sit0\x00', &(0x7f0000003140)={@empty, 0x0, 0x0, 0x40, 0x0, [{@empty}, {@loopback}, {@private}, {@multicast1}]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003240), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003280)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000032c0)={0x0, @private, @local}, &(0x7f0000003300)=0xc) read$msr(r0, &(0x7f00000036c0)=""/101, 0x65) 2m47.55217216s ago: executing program 4 (id=290): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x55d, &(0x7f0000000500)="$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") socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400a801}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m45.36576079s ago: executing program 4 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x20000d, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0xf6eb224b10cf6d25) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r12}, 0x18) write$tun(r11, &(0x7f0000000400)={@val={0x2000, 0x88a2}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, {0x600, 0x0, 0x28, 0x0, @gue={{0x1, 0x1, 0x0, 0xbc, 0x100, @void}, "dc4af54d683031622a519e0f7ec781c37954a9950463128538142832"}}}}}}}, 0x4e) getxattr(0x0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 2m45.025059514s ago: executing program 4 (id=326): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 2m45.012757735s ago: executing program 32 (id=326): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 53.799438881s ago: executing program 0 (id=2749): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r5}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 53.694944982s ago: executing program 0 (id=2752): r0 = syz_io_uring_setup(0x4333, &(0x7f0000000380)={0x0, 0x58d, 0x0, 0x2, 0x3c7}, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 53.657100783s ago: executing program 0 (id=2754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037"], 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x20000d, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_open_dev$vcsa(0x0, 0x8, 0xf6eb224b10cf6d25) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r12}, 0x18) write$tun(r11, &(0x7f0000000400)={@val={0x2000, 0x88a2}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, {0x600, 0x0, 0x28, 0x0, @gue={{0x1, 0x1, 0x0, 0xbc, 0x100, @void}, "dc4af54d683031622a519e0f7ec781c37954a9950463128538142832"}}}}}}}, 0x4e) getxattr(0x0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 53.495413595s ago: executing program 0 (id=2757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = geteuid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x1210088, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYRES32=r0], 0x6, 0x2c2, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x42164000, 0x0, 0x6c, 0x0, 0x0, 0x0) 53.206364159s ago: executing program 0 (id=2760): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00'}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 52.986938712s ago: executing program 0 (id=2766): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c8317", 0x9b}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0xf5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='netfs_failure\x00', r8, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000380)) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r10, r10, 0x0, 0xa) 52.986466462s ago: executing program 33 (id=2766): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c8317", 0x9b}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0xf5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='netfs_failure\x00', r8, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000380)) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r10, r10, 0x0, 0xa) 3.193842091s ago: executing program 3 (id=3617): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3.143775422s ago: executing program 3 (id=3618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) getpgrp(0x0) 3.056091703s ago: executing program 3 (id=3619): r0 = syz_io_uring_setup(0x4333, &(0x7f0000000380)={0x0, 0x58d, 0x0, 0x2, 0x3c7}, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) r1 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) close_range(r1, r3, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0781b48181698edab65235ff0507da48343d4974364d8864ce4"}, 0x34) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x20000000000001ee, &(0x7f0000000400)=[{0x7, 0x9, 0x5, 0x80000000}, {0x3, 0x0, 0x7, 0x1000}, {0x7, 0x8, 0xc, 0x4}, {0x0, 0x5, 0x8, 0x51}, {0x4c0d, 0x5, 0x7, 0x6020ec22}, {0x284e, 0x9, 0x1, 0x8000}, {0x9, 0x7, 0xff, 0x8}]}) ustat(0xb, 0x0) r11 = getpid() tkill(r11, 0x17) write$UHID_INPUT(r6, &(0x7f0000002340)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 2.882867485s ago: executing program 3 (id=3621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYBLOB="4f7450427fd91f1524ccc5fd5a3c10b6e451ca217667619c2cadacb616445caf96a904e7d24a8559e341376f52d2e0e756869d66eeaefd765b598b578edaf63150f3de82d98b402267e4c6bebbc0335d05f8910f1dfc21ddeccdaa0a5d0e6ba640163b964bc17c9b1177255cdeae0fb90f4ca4f6ec52bf34cc91e7a9fc467a4ed46e8a90cf1ab02c77aa99d3525504d25ad1f9a02aa2042b2113cc07043a0b78387c1a144011894944ec042d7301d4fbea64a7b4f266ddd033cfc282341589b0a07199f1c99e7cfa4369866349ed9c700df20ea37734"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xe3b9}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000001100)=ANY=[@ANYBLOB="880000000314040026bd7000fedbdf250900020073797a300000000008004100736977001400330076657468315f766c616e0000000000000900020073797a30000000000800410072786500140033006970766c616e30000000000000c9d5f5cd8c0000000900020073797a310000000008004100727865001400330062617461647630000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r9, &(0x7f0000000d40)="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", 0x14f, 0x20048050, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) write(r9, &(0x7f0000000200)="c4faad8f1d2ef555fd13", 0xa) 2.549275789s ago: executing program 3 (id=3624): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2.527478039s ago: executing program 3 (id=3625): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x40400d1}}], 0x1, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x400000, 0x100000000000000) 2.4730555s ago: executing program 6 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.4597861s ago: executing program 6 (id=3627): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0), 0x0, 0x60, 0xffffffff00000021}}], 0x48, 0x8004}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 2.235484173s ago: executing program 2 (id=3631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0xe6, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) 2.206661433s ago: executing program 2 (id=3632): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000008000000000000000000000000000000000000000000000000000000000000000000000feffffff00f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 1.487509542s ago: executing program 6 (id=3640): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000180)="f102", 0x2}, {&(0x7f0000002640)}], 0x2}}], 0x1, 0x0) 1.456772742s ago: executing program 5 (id=3641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 1.427139773s ago: executing program 5 (id=3642): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r4, 0x0, 0x1000}, 0x18) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) write$selinux_user(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x9}, &(0x7f00000003c0)=0x8) r8 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x21081e, &(0x7f0000000580)={[{@grpquota}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x68c}}, {@jqfmt_vfsold}, {@nombcache}]}, 0x1, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r10 = socket(0x2, 0x80805, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff011a841ccd963181cebe4ccac5eab2d21b49f320a339cf031f8507ed8fcd2adc"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xd321d923f66dce37, r8, 0x8ae86000) sendmmsg$inet(r10, &(0x7f0000000a80)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000600)="9f0d8533245282b4f6d66e17200b980c75b9fd0ef8a6221d6be42a831b7839804a1cca1c83c281db8e18efb49d06c3d8464a6716a1cff9872f0c1ef2442f934e76beeac0c7da70c623f8e4a5680dd29b039035ac53aa46de8bb6791c261ecb1c5aa686a9f5a625862d840682cc2d177186e9f4062a40c0e3271e1aa5fa53492a0df0baa7fa87b9a6128c257aa84beff37900ce9f39fa172665d35e0a8005080075563b3eb553c7b9a826b64e889db8c678", 0xb1}, {&(0x7f0000000900)="1947c93e39f23d1e50f66b8391278f121c6adb91330dcac0ffd24708aedf40667186bf4a59a0279aae805a545bf622252ea4afa999d8e580f17b04f521afd3d995404b077d3857626242551a40ec1b9658928d55d4d435f1795d99f8c11589c6bbed3fe49669c315c8741979a4fa46f9f43bfe6119e76ea354fb4290e83adc0dfe60cb22e174e956233308aa577decbe82368e2ff986ec876b98d94070762ae87fa0b552b616b73dc5cfdbc043ae951b58081c100b4c23ea2f258fc330d323466e7cec70d79974aa605f7b24d2ebea8bb97dac6e88f1f018", 0xd8}, {&(0x7f00000006c0)="be2ae053aaab0773399c28553ef829e6229d6ff649d9c5ae188a035ee9227273845541e34e535cde1c3d2625e7153d60c771d839b75a39e85604e14f4cf392f27eeca9dea96fe1530765872b020d2f09756572aee4dbd932303b64e343248c0e3178afc1eb16da5b6acf3850ed4fdfffc21bee1e9612c3055190ca418a5e5dc3dd7bcc8576818973cdda428143502b11c4abf2311cef033b2e5c357126cde6019a09d26487d912917e25383352588bb1702d1ae613d404f08556", 0xba}], 0x3, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x50}}], 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000080), &(0x7f0000000100)=r9}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r13, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r13, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r14}], 0x2c, 0xffffffffffbffff8) 1.343916804s ago: executing program 2 (id=3643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007a6936b5a7855a5b79be311ef5070511cf1cf01db2443394015b7c9f9f93cb8ffd1769c80dc4b2f57a15d87e7f95d0eee38693e2fb1b151dc22e1005c9463d86fb5f01e7c39dfdb28479a3368a59fe82fcd0a133cb83b900000000", @ANYRES16=0x0, @ANYBLOB="010025bd7080000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB='\b\x00:\x00\b\x00\x00\x00'], 0x2c}}, 0x20004804) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', r2, 0x1, 0x80, 0xffff, 0xc00000, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x7, 0x3a, [@empty]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000003b00000076000000000000002700e800030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sock_rcvqueue_full\x00', r1, 0x0, 0x80}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ustat(0xd, &(0x7f0000000680)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c8}, 0x20004804) fallocate(r1, 0x41, 0x6, 0x6) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001c) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r6 = io_uring_setup(0x291c, &(0x7f0000000080)={0x0, 0x5271, 0x80, 0x9, 0x1c7}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) pause() close_range(r6, 0xffffffffffffffff, 0x0) 1.151255276s ago: executing program 1 (id=3645): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 1.136513776s ago: executing program 1 (id=3646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0xe6, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) 1.113416256s ago: executing program 1 (id=3647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x30c000, 0x800, 0x0, 0x4}, 0x20) 1.087890277s ago: executing program 1 (id=3648): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) 564.216653ms ago: executing program 6 (id=3649): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r3, 0x12) 530.463694ms ago: executing program 6 (id=3650): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYBLOB="4f7450427fd91f1524ccc5fd5a3c10b6e451ca217667619c2cadacb616445caf96a904e7d24a8559e341376f52d2e0e756869d66eeaefd765b598b578edaf63150f3de82d98b402267e4c6bebbc0335d05f8910f1dfc21ddeccdaa0a5d0e6ba640163b964bc17c9b1177255cdeae0fb90f4ca4f6ec52bf34cc91e7a9fc467a4ed46e8a90cf1ab02c77aa99d3525504d25ad1f9a02aa2042b2113cc07043a0b78387c1a144011894944ec042d7301d4fbea64a7b4f266ddd033cfc282341589b0a07199f1c99e7cfa4369866349ed9c700df20ea37734"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xe3b9}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000001100)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001900)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0xd0, 0x1b0, 0xd0, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x0, 0xff, 0xffffff00], '\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r9, &(0x7f0000000d40)="5d15e9cb600862ef3ff3bf961c094476504a62e1b6a520d913ba1212d7c24455522a835783ac3b5d9d511ef812d418f0d08eb9714488cca069762db0c9a9276de6ee5c5e3c501cab59814a4dc02916ee833e97145c22550b5165f818039c1c8f0271391970b57dc10fd4109791d07ef0447d19ea3791dd87096427d0a779fa54591204b9fe55b25c5d192cc7071e657ee192cf144b4dfdb0d43b3c02e369ea7102f69023ba8f8a9889b33577dd9c09649c6e2b56f4837082e4a465c91d17b082268ed75c34579b32c87a4f664bff4dddd5365a4b87039a3649413ffe2867e1ce39014074c7ff0d182a3f0247b16eded72da7f5ba181aa8a83559080a76190b2405d6edc3ba9d8e55db03209bdbd4111c30688a439e6a15142e02ef276a1a617f6022f7924b73819bca4fe227c144990ed447941b9551783213397b4d4ea733ec13a36e9a090247adb40b9a2db400c9", 0x14f, 0x20048050, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) write(r9, &(0x7f0000000200)="c4faad8f1d2ef555fd13", 0xa) 511.945234ms ago: executing program 5 (id=3651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 489.332874ms ago: executing program 2 (id=3652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 458.855754ms ago: executing program 2 (id=3653): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='g\x00\x00\x02\x98wuM2A\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="20000000170a0102"], 0x20}}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2, 0x8}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x200, @loopback, 0x7}}, 0x7f, 0x8, 0x8001, 0x0, 0xffffff44}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000001000000009ef4000000058cd13afd6158477991137b81aa7ef86956a31ef7eae5362a19bed5e34f67e6280cc1507785abe1f46b18e7324749e73d57402a748d55eec79ca5ed47753a349e91a44c86861cd816a88353418b4294f723c7e2a43d4596f35865"], 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0xfffffffe, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000280)) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 439.852675ms ago: executing program 5 (id=3654): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0), 0x0, 0x60, 0xffffffff00000021}}], 0x48, 0x8004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 379.004425ms ago: executing program 2 (id=3655): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r0, 0x0, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @multicast2}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x28, {0x2, 0x4e20, @multicast1}, 'wg2\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000080)={0xc, 0x5, 0xfa00, {0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa24}, 0x18) 343.441886ms ago: executing program 5 (id=3656): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 316.843876ms ago: executing program 5 (id=3657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 215.268798ms ago: executing program 1 (id=3658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) 131.477989ms ago: executing program 6 (id=3659): socket$inet6(0xa, 0x3, 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ec7b5af805"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='workqueue_activate_work\x00', r5, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000) r7 = socket(0x10, 0x3, 0xffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000180)) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESDEC=r4, @ANYRES32=r7, @ANYRES64=r6, @ANYRES32=r2, @ANYBLOB="9b12f3c4433abe25052a47adf313f0333d118e692e18ab0713a9bc81499828be9049f2bacd52e57f854247b89fca0be0954218c7ac3937174c5e8ade8f52101f6654b42c1315f6774da95c0edaa34728c7882cbf10d6a7ab6f2a4f218fd39856ff3a8ef57002c138886ea2fe146abbb6a429aa3f42b68f2b3934f4043400bee51c9a46458a143420bc10ed6de2e09d5f4230640b049aff15395e4fad1370dfe9e38517d35c208739a8a4630565a6b1091bfaddcb53db4b86639793c3136adb2d5684795eef74ab6a311bdbcc7787"], &(0x7f0000000240)='GPL\x00', 0xe4d6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f00000001c0)=0x8) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000b4bffc)=0x7f, 0x4) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) write(r7, &(0x7f0000000980)="a9", 0x1) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r1, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a94000000030a010100000000000000000700000620000480080002407a1899591400030076657468305f746f5f687372000000000900030073797a31000000000c000240000000000000000508000a4000000005340004800800014000000004080002405e4a605d08000140000000050800014000000002080001400000000108000140000000010c0002400000000000000002140000001100010000000000000000000500000a"], 0xbc}, 0x1, 0x0, 0x0, 0x240088c4}, 0x20000010) r10 = socket(0x10, 0x803, 0x0) sendto$isdn(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="01800000768a1c05000000"], 0x8, 0x4040, &(0x7f00000004c0)={0x22, 0x9, 0x4, 0x40, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r0, r11) 0s ago: executing program 1 (id=3660): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000008000000000000000000000000000000000000000000000000000000000000000000000feffffff00f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000"]}, 0x106) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2a081, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "f817000000e4f60000006b00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCFLSH(r5, 0x541b, 0xffefff1f00000000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x7, 0x9) read(r7, &(0x7f0000032440)=""/102364, 0x18fdc) kernel console output (not intermixed with test programs): dv_slave_1 (retrying later): interface not active [ 166.343907][T11346] loop3: detected capacity change from 0 to 2048 [ 166.354333][T11346] EXT4-fs: Ignoring removed oldalloc option [ 166.375769][T11346] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 166.401939][T11250] hsr_slave_0: entered promiscuous mode [ 166.410003][T11250] hsr_slave_1: entered promiscuous mode [ 166.419173][T11250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.430964][T11250] Cannot create hsr debugfs directory [ 166.666668][T11250] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.691696][T11250] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.700319][T11250] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.727655][T11250] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.862163][T11250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.912443][T11250] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.935066][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.942208][T10725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.975550][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.982659][T10696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.144784][T11250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.355020][T11424] netlink: 'syz.5.2796': attribute type 13 has an invalid length. [ 167.523270][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2798'. [ 167.557359][T11250] veth0_vlan: entered promiscuous mode [ 167.584449][T11446] FAULT_INJECTION: forcing a failure. [ 167.584449][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 167.590269][T11250] veth1_vlan: entered promiscuous mode [ 167.597106][T11446] CPU: 1 UID: 0 PID: 11446 Comm: syz.5.2797 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 167.597135][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 167.597146][T11446] Call Trace: [ 167.597152][T11446] [ 167.597159][T11446] __dump_stack+0x1d/0x30 [ 167.597180][T11446] dump_stack_lvl+0xe8/0x140 [ 167.597199][T11446] dump_stack+0x15/0x1b [ 167.597281][T11446] should_fail_ex+0x265/0x280 [ 167.597311][T11446] should_failslab+0x8c/0xb0 [ 167.597337][T11446] kmem_cache_alloc_node_noprof+0x57/0x320 [ 167.597368][T11446] ? __alloc_skb+0x101/0x320 [ 167.597452][T11446] __alloc_skb+0x101/0x320 [ 167.597479][T11446] netlink_alloc_large_skb+0xba/0xf0 [ 167.597507][T11446] netlink_sendmsg+0x3cf/0x6b0 [ 167.597570][T11446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.597599][T11446] __sock_sendmsg+0x142/0x180 [ 167.597672][T11446] ____sys_sendmsg+0x31e/0x4e0 [ 167.597693][T11446] ___sys_sendmsg+0x17b/0x1d0 [ 167.597721][T11446] __x64_sys_sendmsg+0xd4/0x160 [ 167.597799][T11446] x64_sys_call+0x2999/0x2fb0 [ 167.597818][T11446] do_syscall_64+0xd0/0x1a0 [ 167.597839][T11446] ? clear_bhb_loop+0x25/0x80 [ 167.597937][T11446] ? clear_bhb_loop+0x25/0x80 [ 167.597958][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.598046][T11446] RIP: 0033:0x7fca5a8ae969 [ 167.598062][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.598079][T11446] RSP: 002b:00007fca58f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.598098][T11446] RAX: ffffffffffffffda RBX: 00007fca5aad5fa0 RCX: 00007fca5a8ae969 [ 167.598111][T11446] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 167.598227][T11446] RBP: 00007fca58f17090 R08: 0000000000000000 R09: 0000000000000000 [ 167.598239][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.598251][T11446] R13: 0000000000000000 R14: 00007fca5aad5fa0 R15: 00007ffe8ee2ea48 [ 167.598268][T11446] [ 167.609890][T11452] 9pnet_fd: Insufficient options for proto=fd [ 167.690301][T11250] veth0_macvtap: entered promiscuous mode [ 167.824370][T11250] veth1_macvtap: entered promiscuous mode [ 167.956465][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.967050][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.997898][T11250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.021586][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.032149][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.042026][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.052619][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.089001][T11250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.169387][T11250] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.178362][T11250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.187602][T11250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.196380][T11250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.312569][T11486] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 168.325634][T11486] SELinux: failed to load policy [ 168.393244][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2767'. [ 168.404403][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2767'. [ 168.466636][T11494] loop6: detected capacity change from 0 to 512 [ 168.521424][T11494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.583969][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.886505][T11533] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 168.886505][T11533] program syz.6.2813 not setting count and/or reply_len properly [ 169.014355][T11550] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 169.014355][T11550] program syz.2.2819 not setting count and/or reply_len properly [ 169.147347][T11562] loop2: detected capacity change from 0 to 512 [ 169.162086][T11562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.178336][T11562] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.2824: corrupted inode contents [ 169.190532][T11562] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.2824: mark_inode_dirty error [ 169.203882][T11562] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.2824: corrupted inode contents [ 169.219142][T11562] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2824: mark_inode_dirty error [ 169.245563][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.263216][T11567] FAULT_INJECTION: forcing a failure. [ 169.263216][T11567] name failslab, interval 1, probability 0, space 0, times 0 [ 169.275906][T11567] CPU: 1 UID: 0 PID: 11567 Comm: syz.2.2825 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 169.276011][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.276022][T11567] Call Trace: [ 169.276029][T11567] [ 169.276035][T11567] __dump_stack+0x1d/0x30 [ 169.276055][T11567] dump_stack_lvl+0xe8/0x140 [ 169.276073][T11567] dump_stack+0x15/0x1b [ 169.276092][T11567] should_fail_ex+0x265/0x280 [ 169.276125][T11567] should_failslab+0x8c/0xb0 [ 169.276226][T11567] __kmalloc_noprof+0xa5/0x3e0 [ 169.276247][T11567] ? security_sk_alloc+0x52/0x120 [ 169.276269][T11567] security_sk_alloc+0x52/0x120 [ 169.276351][T11567] sk_prot_alloc+0xc2/0x190 [ 169.276398][T11567] sk_alloc+0x34/0x360 [ 169.276432][T11567] unix_create1+0xa5/0x410 [ 169.276449][T11567] ? inode_init_always_gfp+0x4cd/0x500 [ 169.276567][T11567] unix_create+0xff/0x130 [ 169.276587][T11567] __sock_create+0x2e9/0x5b0 [ 169.276669][T11567] __sys_socketpair+0x1bc/0x430 [ 169.276738][T11567] __x64_sys_socketpair+0x52/0x60 [ 169.276833][T11567] x64_sys_call+0x23f2/0x2fb0 [ 169.276928][T11567] do_syscall_64+0xd0/0x1a0 [ 169.276995][T11567] ? clear_bhb_loop+0x25/0x80 [ 169.277014][T11567] ? clear_bhb_loop+0x25/0x80 [ 169.277032][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.277053][T11567] RIP: 0033:0x7f987dfd08ba [ 169.277070][T11567] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.277138][T11567] RSP: 002b:00007f987c636f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 169.277156][T11567] RAX: ffffffffffffffda RBX: 00007f987e1f5f00 RCX: 00007f987dfd08ba [ 169.277168][T11567] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 169.277179][T11567] RBP: 00007f987c637090 R08: 0000000000000000 R09: 0000000000000000 [ 169.277191][T11567] R10: 00007f987c636f98 R11: 0000000000000246 R12: 0000000000000004 [ 169.277246][T11567] R13: 0000000000000001 R14: 00007f987e1f5fa0 R15: 00007fff8ab398b8 [ 169.277267][T11567] [ 169.620213][T11579] loop1: detected capacity change from 0 to 2048 [ 169.643259][T11579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.721099][T11585] loop3: detected capacity change from 0 to 2048 [ 169.731701][T11585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.979339][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 169.979362][ T29] audit: type=1326 audit(169.939:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.039632][ T29] audit: type=1326 audit(169.979:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.062652][ T29] audit: type=1326 audit(169.979:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.085668][ T29] audit: type=1326 audit(169.979:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.108627][ T29] audit: type=1326 audit(169.979:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.131566][ T29] audit: type=1326 audit(169.979:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.154536][ T29] audit: type=1326 audit(169.979:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.177447][ T29] audit: type=1326 audit(169.989:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.200496][ T29] audit: type=1326 audit(169.989:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.223424][ T29] audit: type=1326 audit(169.989:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.5.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 170.256425][T11596] loop2: detected capacity change from 0 to 1024 [ 170.272002][T11596] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.283029][T11596] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.330674][T11596] JBD2: no valid journal superblock found [ 170.336469][T11596] EXT4-fs (loop2): Could not load journal inode [ 170.438939][T11607] loop2: detected capacity change from 0 to 256 [ 170.476792][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.586523][T10696] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 170.593462][T11616] loop1: detected capacity change from 0 to 256 [ 170.618214][T10696] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 170.630770][T10696] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.630770][T10696] [ 170.640536][T10696] EXT4-fs (loop3): Total free blocks count 0 [ 170.646533][T10696] EXT4-fs (loop3): Free/Dirty block details [ 170.652595][T10696] EXT4-fs (loop3): free_blocks=2415919504 [ 170.658381][T10696] EXT4-fs (loop3): dirty_blocks=12944 [ 170.663824][T10696] EXT4-fs (loop3): Block reservation details [ 170.669932][T10696] EXT4-fs (loop3): i_reserved_data_blocks=809 [ 170.759508][T10696] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 170.814221][T10695] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.893800][T10695] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.953842][T11617] chnl_net:caif_netlink_parms(): no params data found [ 170.963764][T10695] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.997327][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.004516][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.012091][T11617] bridge_slave_0: entered allmulticast mode [ 171.018631][T11617] bridge_slave_0: entered promiscuous mode [ 171.026656][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.033763][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.041022][T11617] bridge_slave_1: entered allmulticast mode [ 171.047540][T11617] bridge_slave_1: entered promiscuous mode [ 171.062334][T10695] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.082855][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.094288][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.114434][T11655] loop1: detected capacity change from 0 to 1024 [ 171.123248][T11655] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.134337][T11655] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 171.146802][T11655] JBD2: no valid journal superblock found [ 171.152697][T11655] EXT4-fs (loop1): Could not load journal inode [ 171.160844][T11617] team0: Port device team_slave_0 added [ 171.167342][T11617] team0: Port device team_slave_1 added [ 171.198608][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.205658][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.231632][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.246799][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.253838][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.279872][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.386339][T10695] team0: Port device geneve1 removed [ 171.395191][T10695] bond0 (unregistering): Released all slaves [ 171.409241][T11617] hsr_slave_0: entered promiscuous mode [ 171.416018][T11617] hsr_slave_1: entered promiscuous mode [ 171.422489][T11617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.430785][T11617] Cannot create hsr debugfs directory [ 171.462610][T10695] tipc: Left network mode [ 171.505621][T11679] xt_hashlimit: max too large, truncated to 1048576 [ 171.520580][T11677] netlink: 'syz.6.2856': attribute type 13 has an invalid length. [ 171.528742][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2856'. [ 171.571646][T10695] hsr_slave_0: left promiscuous mode [ 171.577347][T10695] hsr_slave_1: left promiscuous mode [ 171.585110][T10695] veth1_macvtap: left promiscuous mode [ 171.590785][T10695] veth0_macvtap: left promiscuous mode [ 171.687428][T11692] loop6: detected capacity change from 0 to 512 [ 171.734300][T11692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.750914][T11692] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 171.763905][T11692] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 171.777067][T11692] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 171.800400][T11692] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 171.808007][T11706] loop3: detected capacity change from 0 to 2048 [ 171.834427][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.851686][T11706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.911793][T10981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.223940][T11617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.243243][T11617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.260439][T11617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.279050][T11617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.428854][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.474772][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.525317][T10695] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.532464][T10695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.559215][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.566355][T10695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.586909][T11617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.597372][T11617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.666312][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.751990][T11617] veth0_vlan: entered promiscuous mode [ 172.759145][T11760] netlink: 'syz.6.2871': attribute type 13 has an invalid length. [ 172.767216][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2871'. [ 172.767433][T11617] veth1_vlan: entered promiscuous mode [ 172.797646][T11617] veth0_macvtap: entered promiscuous mode [ 172.810289][T11617] veth1_macvtap: entered promiscuous mode [ 172.837261][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.847842][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.857733][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.868260][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.895609][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.905447][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.916060][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.926011][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.936478][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.946371][T11617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.956847][T11617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.988180][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.998471][T11766] loop6: detected capacity change from 0 to 256 [ 173.030675][T11617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.039457][T11617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.048191][T11617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.056939][T11617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.148763][T11773] xt_hashlimit: max too large, truncated to 1048576 [ 173.183587][T11775] xt_hashlimit: max too large, truncated to 1048576 [ 174.163193][T11837] xt_hashlimit: max too large, truncated to 1048576 [ 174.207234][T11842] loop5: detected capacity change from 0 to 512 [ 174.221962][T11842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.242970][T11842] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 174.261706][T11842] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 174.274291][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2902'. [ 174.283401][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 174.293127][T11842] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 174.335062][T11842] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 174.357262][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'. [ 174.366424][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 174.409657][ T4455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.509775][T11855] loop5: detected capacity change from 0 to 512 [ 174.531183][T11855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.575428][T11855] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 174.611227][T11862] Invalid ELF header magic: != ELF [ 174.617287][T11855] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 174.628881][T11855] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 174.641569][T11855] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 174.697083][ T4455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.766334][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2911'. [ 174.790365][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2911'. [ 174.818849][T11874] loop6: detected capacity change from 0 to 512 [ 174.851593][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2915'. [ 174.860676][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'. [ 174.862815][T11885] xt_hashlimit: max too large, truncated to 1048576 [ 174.872523][T11874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.974369][T11899] xt_hashlimit: max too large, truncated to 1048576 [ 174.986488][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.060304][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 175.060332][ T29] audit: type=1326 audit(175.029:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.093845][ T29] audit: type=1326 audit(175.059:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.117053][ T29] audit: type=1326 audit(175.059:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.140081][ T29] audit: type=1326 audit(175.059:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.163264][ T29] audit: type=1326 audit(175.059:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.186306][ T29] audit: type=1326 audit(175.059:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.209373][ T29] audit: type=1326 audit(175.059:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.233099][ T29] audit: type=1326 audit(175.059:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.256157][ T29] audit: type=1326 audit(175.059:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.279046][ T29] audit: type=1326 audit(175.059:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11904 comm="syz.5.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5a8ae969 code=0x7ffc0000 [ 175.391262][T11914] xt_hashlimit: max too large, truncated to 1048576 [ 175.512710][T11922] FAULT_INJECTION: forcing a failure. [ 175.512710][T11922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.525814][T11922] CPU: 1 UID: 0 PID: 11922 Comm: syz.3.2931 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 175.525841][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 175.525852][T11922] Call Trace: [ 175.525859][T11922] [ 175.525868][T11922] __dump_stack+0x1d/0x30 [ 175.525974][T11922] dump_stack_lvl+0xe8/0x140 [ 175.525992][T11922] dump_stack+0x15/0x1b [ 175.526006][T11922] should_fail_ex+0x265/0x280 [ 175.526039][T11922] should_fail+0xb/0x20 [ 175.526130][T11922] should_fail_usercopy+0x1a/0x20 [ 175.526151][T11922] _copy_from_user+0x1c/0xb0 [ 175.526239][T11922] ___sys_sendmsg+0xc1/0x1d0 [ 175.526273][T11922] __x64_sys_sendmsg+0xd4/0x160 [ 175.526293][T11922] x64_sys_call+0x2999/0x2fb0 [ 175.526322][T11922] do_syscall_64+0xd0/0x1a0 [ 175.526342][T11922] ? clear_bhb_loop+0x25/0x80 [ 175.526436][T11922] ? clear_bhb_loop+0x25/0x80 [ 175.526461][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.526481][T11922] RIP: 0033:0x7f834bcfe969 [ 175.526494][T11922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.526523][T11922] RSP: 002b:00007f834a367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.526542][T11922] RAX: ffffffffffffffda RBX: 00007f834bf25fa0 RCX: 00007f834bcfe969 [ 175.526553][T11922] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 175.526564][T11922] RBP: 00007f834a367090 R08: 0000000000000000 R09: 0000000000000000 [ 175.526644][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.526657][T11922] R13: 0000000000000000 R14: 00007f834bf25fa0 R15: 00007ffd46edfe98 [ 175.526677][T11922] [ 175.762298][T11928] loop1: detected capacity change from 0 to 512 [ 175.782243][T11928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.852085][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.905178][T11934] xt_hashlimit: max too large, truncated to 1048576 [ 176.047587][T11954] 9pnet_fd: Insufficient options for proto=fd [ 176.067118][T11956] loop6: detected capacity change from 0 to 512 [ 176.092398][T11956] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2945: bg 0: block 248: padding at end of block bitmap is not set [ 176.107219][T11956] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2945: Failed to acquire dquot type 1 [ 176.118965][T11956] EXT4-fs (loop6): 1 truncate cleaned up [ 176.125140][T11956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.146169][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.327058][T11966] xt_hashlimit: max too large, truncated to 1048576 [ 176.676778][T11975] xt_hashlimit: max too large, truncated to 1048576 [ 176.698139][T11977] __nla_validate_parse: 7 callbacks suppressed [ 176.698157][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 176.713367][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2953'. [ 176.849382][T11986] netlink: 'syz.3.2957': attribute type 10 has an invalid length. [ 176.857282][T11986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2957'. [ 176.869294][T11986] team0: Port device geneve1 added [ 176.967784][T11990] loop3: detected capacity change from 0 to 512 [ 176.981751][T11990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.995895][T11990] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 177.007980][T11990] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 177.021141][T11990] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 177.041442][T11990] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 177.084427][T10981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.214914][T12008] 8021q: VLANs not supported on lo [ 177.301320][T12018] xt_hashlimit: max too large, truncated to 1048576 [ 177.352503][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'. [ 177.363152][T12020] 9pnet_fd: Insufficient options for proto=fd [ 178.042012][T12053] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 178.108406][T12060] loop6: detected capacity change from 0 to 256 [ 178.154369][T12064] xt_hashlimit: max too large, truncated to 1048576 [ 178.242182][T12078] xt_hashlimit: max too large, truncated to 1048576 [ 178.286052][T12085] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 178.308425][T12083] loop2: detected capacity change from 0 to 8192 [ 178.341500][T12089] loop3: detected capacity change from 0 to 256 [ 178.443706][T12096] xt_hashlimit: max too large, truncated to 1048576 [ 178.628910][T12106] loop1: detected capacity change from 0 to 128 [ 178.640463][T12106] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 178.648341][T12106] FAT-fs (loop1): Filesystem has been set read-only [ 178.659850][T12106] syz.1.2995: attempt to access beyond end of device [ 178.659850][T12106] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 178.676247][T12106] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 178.684302][T12106] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 178.692790][T12106] syz.1.2995: attempt to access beyond end of device [ 178.692790][T12106] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 178.706396][T12106] syz.1.2995: attempt to access beyond end of device [ 178.706396][T12106] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 178.720754][T12106] syz.1.2995: attempt to access beyond end of device [ 178.720754][T12106] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 178.734272][T12106] syz.1.2995: attempt to access beyond end of device [ 178.734272][T12106] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 179.110836][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2998'. [ 179.125979][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2998'. [ 179.159669][T12129] loop5: detected capacity change from 0 to 512 [ 179.188928][T12129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.235334][T12137] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 179.264038][ T4455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.325792][T12141] loop2: detected capacity change from 0 to 2048 [ 179.370420][T12141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.511744][T12165] xt_hashlimit: max too large, truncated to 1048576 [ 179.566143][T12169] xt_hashlimit: max too large, truncated to 1048576 [ 179.649939][T12174] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 179.764248][T12182] loop1: detected capacity change from 0 to 256 [ 179.922049][T12200] xt_hashlimit: max too large, truncated to 1048576 [ 179.993274][T12207] 9pnet_fd: Insufficient options for proto=fd [ 180.213923][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.252889][T12227] loop5: detected capacity change from 0 to 512 [ 180.306025][T12227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.414940][T12241] loop2: detected capacity change from 0 to 2048 [ 180.426544][T12227] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 180.447421][T12227] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 180.478350][T12241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.491501][T12227] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 180.520654][T12227] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 180.596443][ T4455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.910050][T12280] xt_hashlimit: max too large, truncated to 1048576 [ 181.063075][T12300] loop6: detected capacity change from 0 to 256 [ 181.234625][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.362246][T12334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12334 comm=syz.6.3044 [ 181.389821][T12334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12334 comm=syz.6.3044 [ 181.461052][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 181.461069][ T29] audit: type=1326 audit(181.429:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.491342][ T29] audit: type=1326 audit(181.459:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.514567][ T29] audit: type=1326 audit(181.459:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.537474][ T29] audit: type=1326 audit(181.459:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.560509][ T29] audit: type=1326 audit(181.459:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.590029][ T29] audit: type=1326 audit(181.459:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.612988][ T29] audit: type=1326 audit(181.459:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.635997][ T29] audit: type=1326 audit(181.459:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.658912][ T29] audit: type=1326 audit(181.459:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.681894][ T29] audit: type=1326 audit(181.459:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.6.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 181.719942][T12354] loop2: detected capacity change from 0 to 512 [ 181.753378][T12354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.768629][T12354] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3049: corrupted inode contents [ 181.800865][T12354] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.3049: mark_inode_dirty error [ 181.804017][T12370] __nla_validate_parse: 4 callbacks suppressed [ 181.804032][T12370] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 181.853372][T12354] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3049: corrupted inode contents [ 181.888716][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 181.899060][T12354] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3049: mark_inode_dirty error [ 181.905440][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3060'. [ 181.934198][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3062'. [ 181.944134][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.965725][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3062'. [ 181.980812][T12384] loop1: detected capacity change from 0 to 512 [ 182.010565][T12387] loop5: detected capacity change from 0 to 512 [ 182.022565][T12384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.076551][T12387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.116571][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.146866][T12401] loop1: detected capacity change from 0 to 2048 [ 182.172620][ T4455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.192195][T12401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.291800][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.332728][T12415] openvswitch: netlink: Message has 6 unknown bytes. [ 182.343273][T12417] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 182.422350][T12426] loop6: detected capacity change from 0 to 256 [ 182.499221][T12434] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 182.600952][T12448] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 182.686324][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 182.771592][T12457] loop5: detected capacity change from 0 to 256 [ 182.954148][T12479] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 183.105391][T12488] loop3: detected capacity change from 0 to 512 [ 183.132842][T12488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.189015][T12488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.211785][T12488] FAULT_INJECTION: forcing a failure. [ 183.211785][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.224887][T12488] CPU: 1 UID: 0 PID: 12488 Comm: syz.3.3099 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 183.224918][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 183.224997][T12488] Call Trace: [ 183.225004][T12488] [ 183.225011][T12488] __dump_stack+0x1d/0x30 [ 183.225033][T12488] dump_stack_lvl+0xe8/0x140 [ 183.225119][T12488] dump_stack+0x15/0x1b [ 183.225137][T12488] should_fail_ex+0x265/0x280 [ 183.225167][T12488] should_fail+0xb/0x20 [ 183.225311][T12488] should_fail_usercopy+0x1a/0x20 [ 183.225330][T12488] strncpy_from_user+0x25/0x230 [ 183.225407][T12488] ? kmem_cache_alloc_noprof+0x186/0x310 [ 183.225440][T12488] ? getname_flags+0x80/0x3b0 [ 183.225471][T12488] getname_flags+0xae/0x3b0 [ 183.225509][T12488] __se_sys_quotactl+0x16a/0x670 [ 183.225623][T12488] ? fput+0x8f/0xc0 [ 183.225642][T12488] __x64_sys_quotactl+0x55/0x70 [ 183.225675][T12488] x64_sys_call+0x2886/0x2fb0 [ 183.225752][T12488] do_syscall_64+0xd0/0x1a0 [ 183.225774][T12488] ? clear_bhb_loop+0x25/0x80 [ 183.225796][T12488] ? clear_bhb_loop+0x25/0x80 [ 183.225819][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.225841][T12488] RIP: 0033:0x7f834bcfe969 [ 183.225870][T12488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.225888][T12488] RSP: 002b:00007f834a367038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 183.225907][T12488] RAX: ffffffffffffffda RBX: 00007f834bf25fa0 RCX: 00007f834bcfe969 [ 183.225921][T12488] RDX: 0000000000000000 RSI: 00000000000000f5 RDI: ffffffff80000102 [ 183.225934][T12488] RBP: 00007f834a367090 R08: 0000000000000000 R09: 0000000000000000 [ 183.225946][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.225960][T12488] R13: 0000000000000000 R14: 00007f834bf25fa0 R15: 00007ffd46edfe98 [ 183.225978][T12488] [ 183.438827][T10981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.491316][T12507] loop1: detected capacity change from 0 to 512 [ 183.503922][T12503] loop6: detected capacity change from 0 to 512 [ 183.511940][T12503] ext4: Unknown parameter 'mask' [ 183.535980][T12509] loop3: detected capacity change from 0 to 2048 [ 183.549510][T12507] EXT4-fs: error -4 creating inode table initialization thread [ 183.568269][T12507] EXT4-fs (loop1): mount failed [ 183.638010][T12509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.662272][T12527] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 183.729543][T12527] SELinux: failed to load policy [ 183.738385][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3109'. [ 183.807576][T10981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.854451][T12542] loop3: detected capacity change from 0 to 512 [ 183.890690][T12542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.912713][T12542] random: crng reseeded on system resumption [ 183.928340][T12546] loop6: detected capacity change from 0 to 2048 [ 183.960334][T12544] loop2: detected capacity change from 0 to 1024 [ 183.997911][T12544] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.008892][T12544] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.029586][ T3302] loop6: p1 < > p4 [ 184.042630][ T3302] loop6: p4 size 8388608 extends beyond EOD, truncated [ 184.051423][T12542] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 32: comm syz.3.3113: path /86/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.073714][T12544] JBD2: no valid journal superblock found [ 184.079737][T12544] EXT4-fs (loop2): Could not load journal inode [ 184.088281][T12546] loop6: p1 < > p4 [ 184.092955][T12542] EXT4-fs (loop3): Remounting filesystem read-only [ 184.099657][T12546] loop6: p4 size 8388608 extends beyond EOD, truncated [ 184.130277][T12554] SELinux: syz.5.3116 (12554) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.176178][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 184.176234][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 184.230248][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 184.242125][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 184.406956][T12568] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 184.456412][T12571] netlink: 'syz.5.3123': attribute type 10 has an invalid length. [ 184.465217][T12571] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 184.558429][T12573] loop5: detected capacity change from 0 to 2048 [ 184.592606][T12573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.698081][T12582] loop5: detected capacity change from 0 to 1024 [ 184.706522][T12582] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.717600][T12582] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.729283][T12582] JBD2: no valid journal superblock found [ 184.735142][T12582] EXT4-fs (loop5): Could not load journal inode [ 184.797675][T12584] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 184.834564][T12584] SELinux: failed to load policy [ 184.998032][T12598] tipc: Enabled bearer , priority 0 [ 185.011469][T12598] tipc: Disabling bearer [ 185.088211][T12608] xt_hashlimit: max too large, truncated to 1048576 [ 185.149974][T12614] xt_hashlimit: max too large, truncated to 1048576 [ 185.300373][T12645] loop1: detected capacity change from 0 to 2048 [ 185.365298][T12653] xt_hashlimit: max too large, truncated to 1048576 [ 185.545645][T12678] netlink: 'syz.1.3166': attribute type 10 has an invalid length. [ 185.738579][T12685] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 185.785674][T12688] xt_hashlimit: max too large, truncated to 1048576 [ 186.238626][T12713] loop2: detected capacity change from 0 to 2048 [ 186.248555][T12717] loop1: detected capacity change from 0 to 128 [ 186.271220][T12717] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 186.279105][T12717] FAT-fs (loop1): Filesystem has been set read-only [ 186.299532][T12717] syz.1.3179: attempt to access beyond end of device [ 186.299532][T12717] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 186.329511][T12717] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 186.337404][T12717] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 186.345555][T12717] syz.1.3179: attempt to access beyond end of device [ 186.345555][T12717] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.358969][T12717] syz.1.3179: attempt to access beyond end of device [ 186.358969][T12717] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.372649][T12717] syz.1.3179: attempt to access beyond end of device [ 186.372649][T12717] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.386121][T12717] syz.1.3179: attempt to access beyond end of device [ 186.386121][T12717] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.486704][T12729] loop6: detected capacity change from 0 to 128 [ 186.514122][T12729] FAULT_INJECTION: forcing a failure. [ 186.514122][T12729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.527301][T12729] CPU: 1 UID: 0 PID: 12729 Comm: syz.6.3184 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 186.527333][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.527401][T12729] Call Trace: [ 186.527408][T12729] [ 186.527415][T12729] __dump_stack+0x1d/0x30 [ 186.527442][T12729] dump_stack_lvl+0xe8/0x140 [ 186.527460][T12729] dump_stack+0x15/0x1b [ 186.527475][T12729] should_fail_ex+0x265/0x280 [ 186.527505][T12729] should_fail+0xb/0x20 [ 186.527615][T12729] should_fail_usercopy+0x1a/0x20 [ 186.527707][T12729] copy_page_from_iter_atomic+0x21b/0xff0 [ 186.527729][T12729] ? fat_write_begin+0x4f/0xe0 [ 186.527746][T12729] ? __pfx_fat_get_block+0x10/0x10 [ 186.527837][T12729] generic_perform_write+0x2c2/0x490 [ 186.527871][T12729] __generic_file_write_iter+0xec/0x120 [ 186.527957][T12729] ? __pfx_generic_file_write_iter+0x10/0x10 [ 186.527985][T12729] generic_file_write_iter+0x8d/0x2f0 [ 186.528013][T12729] ? _parse_integer_limit+0x170/0x190 [ 186.528045][T12729] ? _parse_integer+0x27/0x40 [ 186.528129][T12729] ? kstrtoull+0x111/0x140 [ 186.528152][T12729] ? kstrtouint+0x76/0xc0 [ 186.528179][T12729] ? kstrtouint_from_user+0x9f/0xf0 [ 186.528254][T12729] ? avc_policy_seqno+0x15/0x30 [ 186.528281][T12729] ? selinux_file_permission+0x213/0x360 [ 186.528308][T12729] ? __pfx_generic_file_write_iter+0x10/0x10 [ 186.528359][T12729] vfs_write+0x49d/0x8d0 [ 186.528390][T12729] ksys_write+0xda/0x1a0 [ 186.528511][T12729] __x64_sys_write+0x40/0x50 [ 186.528538][T12729] x64_sys_call+0x2cdd/0x2fb0 [ 186.528561][T12729] do_syscall_64+0xd0/0x1a0 [ 186.528585][T12729] ? clear_bhb_loop+0x25/0x80 [ 186.528646][T12729] ? clear_bhb_loop+0x25/0x80 [ 186.528664][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.528688][T12729] RIP: 0033:0x7fd50961e969 [ 186.528705][T12729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.528725][T12729] RSP: 002b:00007fd507c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.528825][T12729] RAX: ffffffffffffffda RBX: 00007fd509845fa0 RCX: 00007fd50961e969 [ 186.528839][T12729] RDX: 0000000000032600 RSI: 0000200000000280 RDI: 0000000000000006 [ 186.528853][T12729] RBP: 00007fd507c87090 R08: 0000000000000000 R09: 0000000000000000 [ 186.528867][T12729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.528881][T12729] R13: 0000000000000000 R14: 00007fd509845fa0 R15: 00007ffe4f2aae28 [ 186.528897][T12729] [ 186.556620][T12733] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 186.764299][T12729] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 186.795266][T12729] FAT-fs (loop6): Filesystem has been set read-only [ 186.810302][T12729] syz.6.3184: attempt to access beyond end of device [ 186.810302][T12729] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 186.832198][T12729] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 186.840221][T12729] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 186.848375][T12729] syz.6.3184: attempt to access beyond end of device [ 186.848375][T12729] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.863255][T12729] syz.6.3184: attempt to access beyond end of device [ 186.863255][T12729] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.876733][T12729] syz.6.3184: attempt to access beyond end of device [ 186.876733][T12729] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.890657][T12729] syz.6.3184: attempt to access beyond end of device [ 186.890657][T12729] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 186.904174][T12733] SELinux: failed to load policy [ 187.074881][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 187.074898][ T29] audit: type=1326 audit(187.039:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.107709][ T29] audit: type=1326 audit(187.059:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.130702][ T29] audit: type=1326 audit(187.059:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.153668][ T29] audit: type=1326 audit(187.059:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.176638][ T29] audit: type=1326 audit(187.059:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.199556][ T29] audit: type=1326 audit(187.059:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.222516][ T29] audit: type=1326 audit(187.059:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.245504][ T29] audit: type=1326 audit(187.059:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.268979][ T29] audit: type=1326 audit(187.059:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.291989][ T29] audit: type=1326 audit(187.059:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcf6bd0e969 code=0x7ffc0000 [ 187.326538][T12760] loop2: detected capacity change from 0 to 2048 [ 187.384092][T12764] IPv6: Can't replace route, no match found [ 187.466529][T12771] loop1: detected capacity change from 0 to 8192 [ 187.956038][T12792] loop3: detected capacity change from 0 to 2048 [ 188.229106][T12798] FAULT_INJECTION: forcing a failure. [ 188.229106][T12798] name failslab, interval 1, probability 0, space 0, times 0 [ 188.241881][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.6.3207 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 188.241916][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 188.241929][T12798] Call Trace: [ 188.241936][T12798] [ 188.241945][T12798] __dump_stack+0x1d/0x30 [ 188.241970][T12798] dump_stack_lvl+0xe8/0x140 [ 188.242005][T12798] dump_stack+0x15/0x1b [ 188.242020][T12798] should_fail_ex+0x265/0x280 [ 188.242118][T12798] should_failslab+0x8c/0xb0 [ 188.242147][T12798] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 188.242224][T12798] ? __d_alloc+0x3d/0x350 [ 188.242326][T12798] __d_alloc+0x3d/0x350 [ 188.242352][T12798] ? should_failslab+0x8c/0xb0 [ 188.242458][T12798] d_alloc_pseudo+0x1e/0x80 [ 188.242507][T12798] alloc_file_pseudo+0x71/0x160 [ 188.242595][T12798] ? security_inode_alloc+0x69/0x100 [ 188.242617][T12798] sock_alloc_file+0x9c/0x1e0 [ 188.242638][T12798] do_accept+0x1e4/0x3a0 [ 188.242666][T12798] __sys_accept4+0xbf/0x140 [ 188.242766][T12798] __x64_sys_accept4+0x51/0x60 [ 188.242859][T12798] x64_sys_call+0x23d5/0x2fb0 [ 188.242881][T12798] do_syscall_64+0xd0/0x1a0 [ 188.242921][T12798] ? clear_bhb_loop+0x25/0x80 [ 188.242958][T12798] ? clear_bhb_loop+0x25/0x80 [ 188.243057][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.243077][T12798] RIP: 0033:0x7fd50961e969 [ 188.243095][T12798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.243141][T12798] RSP: 002b:00007fd507c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 188.243164][T12798] RAX: ffffffffffffffda RBX: 00007fd509845fa0 RCX: 00007fd50961e969 [ 188.243178][T12798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 188.243191][T12798] RBP: 00007fd507c87090 R08: 0000000000000000 R09: 0000000000000000 [ 188.243244][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.243262][T12798] R13: 0000000000000000 R14: 00007fd509845fa0 R15: 00007ffe4f2aae28 [ 188.243282][T12798] [ 188.503831][T12802] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 188.518473][T12801] loop6: detected capacity change from 0 to 1024 [ 188.526063][T12802] SELinux: failed to load policy [ 188.547763][T12801] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.572284][T12804] netlink: 'syz.2.3210': attribute type 10 has an invalid length. [ 188.580187][T12804] __nla_validate_parse: 7 callbacks suppressed [ 188.580201][T12804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3210'. [ 188.658458][T12804] team0: Port device geneve1 added [ 188.692129][T12801] EXT4-fs mount: 9 callbacks suppressed [ 188.692151][T12801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.750851][T12811] program syz.5.3213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.769044][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'. [ 188.801624][T10981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.824825][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3214'. [ 188.865486][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 188.876562][T12817] loop2: detected capacity change from 0 to 512 [ 188.886155][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3217'. [ 188.897211][T12801] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.3209: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 188.933209][T12817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.973125][T12828] xt_hashlimit: max too large, truncated to 1048576 [ 189.023438][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.061055][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.145444][T12836] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 189.171873][T12836] SELinux: failed to load policy [ 189.221221][T12841] loop2: detected capacity change from 0 to 512 [ 189.258965][T12841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.285976][T12841] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 189.332501][T12841] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 189.378286][T12841] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 189.419171][T12841] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 189.472649][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.540767][T12849] loop6: detected capacity change from 0 to 512 [ 189.619373][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'. [ 189.644316][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3231'. [ 189.674278][T12849] EXT4-fs (loop6): 1 orphan inode deleted [ 189.701506][T10696] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 189.783736][T12849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.894150][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.021899][T10736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.071972][T10736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.089853][T10736] bond0 (unregistering): Released all slaves [ 190.102583][T10736] bond1 (unregistering): Released all slaves [ 190.158469][T10736] tipc: Left network mode [ 190.201749][T10736] hsr_slave_0: left promiscuous mode [ 190.217612][T10736] hsr_slave_1: left promiscuous mode [ 190.310087][T10725] smc: removing ib device syz! [ 190.356154][T12904] loop1: detected capacity change from 0 to 1024 [ 190.373427][T12904] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.384476][T12904] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 190.442235][T12863] chnl_net:caif_netlink_parms(): no params data found [ 190.450877][T12904] JBD2: no valid journal superblock found [ 190.456667][T12904] EXT4-fs (loop1): Could not load journal inode [ 190.599085][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.606294][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.615185][T12863] bridge_slave_0: entered allmulticast mode [ 190.622437][T12863] bridge_slave_0: entered promiscuous mode [ 190.631162][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.638335][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.645818][T12863] bridge_slave_1: entered allmulticast mode [ 190.652874][T12863] bridge_slave_1: entered promiscuous mode [ 190.685067][T12863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.704158][T12863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.777016][T12863] team0: Port device team_slave_0 added [ 190.784469][T12863] team0: Port device team_slave_1 added [ 190.813102][T12924] loop1: detected capacity change from 0 to 256 [ 190.856244][T12863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.863295][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.889332][T12863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.990642][T12863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.997685][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.023713][T12863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.091651][T12933] program syz.6.3243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.168332][T12863] hsr_slave_0: entered promiscuous mode [ 191.174625][T12863] hsr_slave_1: entered promiscuous mode [ 191.565341][T12863] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.576739][T12863] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.588835][T12863] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.602674][T12991] program syz.1.3254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.605836][T12863] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.656154][T12994] loop1: detected capacity change from 0 to 512 [ 191.662829][T12863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.680008][T12863] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.691498][T12994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.704948][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.712094][T10723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.721459][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.728574][T10723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.757211][T12994] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 191.816936][T13015] loop1: detected capacity change from 0 to 256 [ 191.837947][T12863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.016383][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'. [ 192.108956][T12863] veth0_vlan: entered promiscuous mode [ 192.118485][T12863] veth1_vlan: entered promiscuous mode [ 192.151743][T13075] loop6: detected capacity change from 0 to 256 [ 192.154008][T12863] veth0_macvtap: entered promiscuous mode [ 192.170429][T12863] veth1_macvtap: entered promiscuous mode [ 192.192825][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.203362][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.213243][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.223694][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.233564][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.244102][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.254952][T12863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.265514][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 192.265567][ T29] audit: type=1326 audit(192.239:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.274138][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.305376][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.315289][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.325848][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.335713][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.346248][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.356137][T12863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.366634][T12863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.376757][ T29] audit: type=1326 audit(192.349:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.378412][T12863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.424978][T12863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.433871][T12863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.442674][T12863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.442801][ T29] audit: type=1326 audit(192.349:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.451458][T12863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.474339][ T29] audit: type=1326 audit(192.349:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.474367][ T29] audit: type=1326 audit(192.369:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.528910][ T29] audit: type=1326 audit(192.369:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.552141][ T29] audit: type=1326 audit(192.369:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.575101][ T29] audit: type=1326 audit(192.369:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.598198][ T29] audit: type=1326 audit(192.369:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.620991][ T29] audit: type=1326 audit(192.369:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13083 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 192.698614][T13109] netlink: 'syz.5.3267': attribute type 10 has an invalid length. [ 192.706733][T13109] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3267'. [ 192.725240][T13109] team0: Port device geneve1 added [ 193.178403][T13141] loop2: detected capacity change from 0 to 2048 [ 193.208531][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3280'. [ 193.240814][T13141] loop2: p1 < > p3 [ 193.244791][T13150] loop6: detected capacity change from 0 to 256 [ 193.245625][T13141] loop2: p3 size 134217728 extends beyond EOD, truncated [ 193.265317][T13150] FAT-fs (loop6): Directory bread(block 64) failed [ 193.273234][T13150] FAT-fs (loop6): Directory bread(block 65) failed [ 193.280573][ T3006] loop2: p1 < > p3 [ 193.285395][ T3006] loop2: p3 size 134217728 extends beyond EOD, truncated [ 193.287009][T13150] FAT-fs (loop6): Directory bread(block 66) failed [ 193.316138][T13153] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 193.326007][T13150] FAT-fs (loop6): Directory bread(block 67) failed [ 193.327059][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 193.335327][T13153] SELinux: failed to load policy [ 193.350935][T13150] FAT-fs (loop6): Directory bread(block 68) failed [ 193.357502][T13150] FAT-fs (loop6): Directory bread(block 69) failed [ 193.364274][T13150] FAT-fs (loop6): Directory bread(block 70) failed [ 193.370988][T13150] FAT-fs (loop6): Directory bread(block 71) failed [ 193.385244][T13150] FAT-fs (loop6): Directory bread(block 72) failed [ 193.398432][T13150] FAT-fs (loop6): Directory bread(block 73) failed [ 193.408787][T13159] xt_hashlimit: max too large, truncated to 1048576 [ 193.454971][T13166] loop6: detected capacity change from 0 to 256 [ 193.728655][T13182] loop2: detected capacity change from 0 to 512 [ 193.743547][T13182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.756995][T13182] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 193.768604][T13182] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 193.779803][T13182] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 193.792658][T13182] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 193.814552][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.873020][T13192] xt_hashlimit: max too large, truncated to 1048576 [ 193.969494][T13200] FAULT_INJECTION: forcing a failure. [ 193.969494][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 193.982232][T13200] CPU: 1 UID: 0 PID: 13200 Comm: syz.6.3301 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 193.982263][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.982376][T13200] Call Trace: [ 193.982434][T13200] [ 193.982442][T13200] __dump_stack+0x1d/0x30 [ 193.982466][T13200] dump_stack_lvl+0xe8/0x140 [ 193.982489][T13200] dump_stack+0x15/0x1b [ 193.982508][T13200] should_fail_ex+0x265/0x280 [ 193.982583][T13200] should_failslab+0x8c/0xb0 [ 193.982614][T13200] kmem_cache_alloc_noprof+0x50/0x310 [ 193.982642][T13200] ? skb_clone+0x151/0x1f0 [ 193.982660][T13200] skb_clone+0x151/0x1f0 [ 193.982728][T13200] __netlink_deliver_tap+0x2c9/0x500 [ 193.982767][T13200] netlink_unicast+0x64c/0x670 [ 193.982797][T13200] netlink_sendmsg+0x58b/0x6b0 [ 193.982897][T13200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.982976][T13200] __sock_sendmsg+0x142/0x180 [ 193.983005][T13200] ____sys_sendmsg+0x31e/0x4e0 [ 193.983026][T13200] ___sys_sendmsg+0x17b/0x1d0 [ 193.983058][T13200] __x64_sys_sendmsg+0xd4/0x160 [ 193.983081][T13200] x64_sys_call+0x2999/0x2fb0 [ 193.983150][T13200] do_syscall_64+0xd0/0x1a0 [ 193.983181][T13200] ? clear_bhb_loop+0x25/0x80 [ 193.983205][T13200] ? clear_bhb_loop+0x25/0x80 [ 193.983230][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.983324][T13200] RIP: 0033:0x7fd50961e969 [ 193.983338][T13200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.983435][T13200] RSP: 002b:00007fd507c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.983458][T13200] RAX: ffffffffffffffda RBX: 00007fd509845fa0 RCX: 00007fd50961e969 [ 193.983473][T13200] RDX: 0000000000000000 RSI: 0000200000004000 RDI: 0000000000000003 [ 193.983486][T13200] RBP: 00007fd507c87090 R08: 0000000000000000 R09: 0000000000000000 [ 193.983623][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.983637][T13200] R13: 0000000000000000 R14: 00007fd509845fa0 R15: 00007ffe4f2aae28 [ 193.983657][T13200] [ 194.281133][T13209] loop6: detected capacity change from 0 to 8192 [ 194.348424][T13212] loop5: detected capacity change from 0 to 2048 [ 194.381451][T13212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.806122][T13221] __nla_validate_parse: 1 callbacks suppressed [ 194.806140][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 194.822472][T13221] bridge_slave_1: left allmulticast mode [ 194.828146][T13221] bridge_slave_1: left promiscuous mode [ 194.833956][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.842735][T13221] bridge_slave_0: left allmulticast mode [ 194.848636][T13221] bridge_slave_0: left promiscuous mode [ 194.854665][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.880903][T13222] SELinux: Context is not valid (left unmapped). [ 194.986276][T13224] program syz.2.3310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.080978][T13228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3312'. [ 195.120779][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 195.134213][T13232] loop1: detected capacity change from 0 to 256 [ 195.255661][T12863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.279201][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3318'. [ 195.290556][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3318'. [ 195.565124][T13252] loop5: detected capacity change from 0 to 256 [ 195.578526][T13252] FAT-fs (loop5): Directory bread(block 64) failed [ 195.585817][T13252] FAT-fs (loop5): Directory bread(block 65) failed [ 195.592531][T13252] FAT-fs (loop5): Directory bread(block 66) failed [ 195.599169][T13252] FAT-fs (loop5): Directory bread(block 67) failed [ 195.605894][T13252] FAT-fs (loop5): Directory bread(block 68) failed [ 195.612795][T13252] FAT-fs (loop5): Directory bread(block 69) failed [ 195.620055][T13252] FAT-fs (loop5): Directory bread(block 70) failed [ 195.626640][T13252] FAT-fs (loop5): Directory bread(block 71) failed [ 195.633708][T13252] FAT-fs (loop5): Directory bread(block 72) failed [ 195.640360][T13252] FAT-fs (loop5): Directory bread(block 73) failed [ 195.661586][T13252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.071681][T13259] ip6gretap0: entered promiscuous mode [ 196.077245][T13259] ip6gretap0: entered allmulticast mode [ 196.156917][T13273] loop2: detected capacity change from 0 to 512 [ 196.173084][T13275] loop1: detected capacity change from 0 to 256 [ 196.187782][T13273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.236453][T13273] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 196.259694][T13273] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 196.272213][T13273] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 196.295921][T13287] loop6: detected capacity change from 0 to 1024 [ 196.302507][T13284] loop1: detected capacity change from 0 to 512 [ 196.308921][T13273] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 196.320838][T13284] EXT4-fs: inline encryption not supported [ 196.328346][T13287] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 196.339360][T13287] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 196.347895][T13284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.358876][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.363113][T13287] JBD2: no valid journal superblock found [ 196.373678][T13287] EXT4-fs (loop6): Could not load journal inode [ 196.381942][T13284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 196.551344][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 196.583219][T13304] loop1: detected capacity change from 0 to 256 [ 196.689152][T13313] loop1: detected capacity change from 0 to 128 [ 196.744586][T13317] xt_hashlimit: max too large, truncated to 1048576 [ 196.852987][T13324] netlink: 'syz.5.3351': attribute type 10 has an invalid length. [ 196.860998][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3351'. [ 196.904129][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 196.913310][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3352'. [ 196.935738][T13326] loop1: detected capacity change from 0 to 512 [ 196.952417][T13326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.065818][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.121230][T13341] loop3: detected capacity change from 0 to 256 [ 197.175114][ T3006] udevd[3006]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 197.189498][T13343] xt_hashlimit: max too large, truncated to 1048576 [ 197.208257][ T3006] udevd[3006]: worker [3309] failed while handling '/devices/virtual/block/loop3' [ 197.270641][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 197.270673][ T29] audit: type=1326 audit(197.239:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.520498][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 197.547297][T13364] loop6: detected capacity change from 0 to 1024 [ 197.553747][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3366'. [ 197.573972][ T29] audit: type=1326 audit(197.279:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.597058][ T29] audit: type=1326 audit(197.299:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.620086][ T29] audit: type=1326 audit(197.299:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.643068][ T29] audit: type=1326 audit(197.299:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.659701][T13361] loop1: detected capacity change from 0 to 512 [ 197.666062][ T29] audit: type=1326 audit(197.299:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.695162][ T29] audit: type=1326 audit(197.299:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.718060][ T29] audit: type=1326 audit(197.299:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.729827][T13364] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 197.741258][ T29] audit: type=1326 audit(197.309:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.752058][T13364] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 197.775023][ T29] audit: type=1326 audit(197.309:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.1.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 197.801200][T13364] JBD2: no valid journal superblock found [ 197.813323][T13364] EXT4-fs (loop6): Could not load journal inode [ 197.886164][T13361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.975082][T13378] xt_hashlimit: max too large, truncated to 1048576 [ 198.022442][T13383] loop5: detected capacity change from 0 to 256 [ 198.057313][T13383] FAULT_INJECTION: forcing a failure. [ 198.057313][T13383] name failslab, interval 1, probability 0, space 0, times 0 [ 198.070097][T13383] CPU: 1 UID: 0 PID: 13383 Comm: syz.5.3373 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 198.070129][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.070220][T13383] Call Trace: [ 198.070227][T13383] [ 198.070235][T13383] __dump_stack+0x1d/0x30 [ 198.070259][T13383] dump_stack_lvl+0xe8/0x140 [ 198.070277][T13383] dump_stack+0x15/0x1b [ 198.070354][T13383] should_fail_ex+0x265/0x280 [ 198.070389][T13383] should_failslab+0x8c/0xb0 [ 198.070424][T13383] kmem_cache_alloc_noprof+0x50/0x310 [ 198.070468][T13383] ? alloc_empty_file+0x76/0x200 [ 198.070502][T13383] ? mntput+0x4b/0x80 [ 198.070522][T13383] alloc_empty_file+0x76/0x200 [ 198.070607][T13383] path_openat+0x68/0x2170 [ 198.070629][T13383] ? _parse_integer_limit+0x170/0x190 [ 198.070658][T13383] ? kstrtoull+0x111/0x140 [ 198.070725][T13383] ? kstrtouint+0x76/0xc0 [ 198.070756][T13383] do_filp_open+0x109/0x230 [ 198.070782][T13383] do_sys_openat2+0xa6/0x110 [ 198.070805][T13383] __x64_sys_openat+0xf2/0x120 [ 198.070828][T13383] x64_sys_call+0x1af/0x2fb0 [ 198.070847][T13383] do_syscall_64+0xd0/0x1a0 [ 198.070867][T13383] ? clear_bhb_loop+0x25/0x80 [ 198.070887][T13383] ? clear_bhb_loop+0x25/0x80 [ 198.070908][T13383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.070927][T13383] RIP: 0033:0x7fa217dae969 [ 198.071013][T13383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.071031][T13383] RSP: 002b:00007fa216417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.071054][T13383] RAX: ffffffffffffffda RBX: 00007fa217fd5fa0 RCX: 00007fa217dae969 [ 198.071066][T13383] RDX: 0000000000105042 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 198.071123][T13383] RBP: 00007fa216417090 R08: 0000000000000000 R09: 0000000000000000 [ 198.071138][T13383] R10: 00000000000001f9 R11: 0000000000000246 R12: 0000000000000001 [ 198.071152][T13383] R13: 0000000000000000 R14: 00007fa217fd5fa0 R15: 00007ffcd5fc0068 [ 198.071172][T13383] [ 198.073432][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.142936][T13387] syzkaller0: entered promiscuous mode [ 198.220244][T13388] loop3: detected capacity change from 0 to 8192 [ 198.225830][T13387] syzkaller0: entered allmulticast mode [ 198.373339][T13392] netlink: 'syz.5.3378': attribute type 10 has an invalid length. [ 198.389783][T13392] batman_adv: batadv0: Adding interface: team0 [ 198.396006][T13392] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.421260][T13392] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 198.606642][T13405] FAULT_INJECTION: forcing a failure. [ 198.606642][T13405] name failslab, interval 1, probability 0, space 0, times 0 [ 198.619528][T13405] CPU: 0 UID: 0 PID: 13405 Comm: syz.2.3381 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 198.619559][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.619571][T13405] Call Trace: [ 198.619578][T13405] [ 198.619586][T13405] __dump_stack+0x1d/0x30 [ 198.619616][T13405] dump_stack_lvl+0xe8/0x140 [ 198.619637][T13405] dump_stack+0x15/0x1b [ 198.619701][T13405] should_fail_ex+0x265/0x280 [ 198.619732][T13405] ? legacy_init_fs_context+0x31/0x80 [ 198.619809][T13405] should_failslab+0x8c/0xb0 [ 198.619840][T13405] __kmalloc_cache_noprof+0x4c/0x320 [ 198.619865][T13405] legacy_init_fs_context+0x31/0x80 [ 198.619917][T13405] alloc_fs_context+0x3ec/0x4e0 [ 198.619987][T13405] fs_context_for_mount+0x22/0x30 [ 198.620007][T13405] do_new_mount+0xe9/0x680 [ 198.620033][T13405] path_mount+0x4a4/0xb20 [ 198.620109][T13405] ? user_path_at+0x109/0x130 [ 198.620127][T13405] __se_sys_mount+0x28f/0x2e0 [ 198.620153][T13405] ? fput+0x8f/0xc0 [ 198.620173][T13405] __x64_sys_mount+0x67/0x80 [ 198.620241][T13405] x64_sys_call+0xd36/0x2fb0 [ 198.620262][T13405] do_syscall_64+0xd0/0x1a0 [ 198.620285][T13405] ? clear_bhb_loop+0x25/0x80 [ 198.620304][T13405] ? clear_bhb_loop+0x25/0x80 [ 198.620359][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.620381][T13405] RIP: 0033:0x7fcf6bd0e969 [ 198.620399][T13405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.620476][T13405] RSP: 002b:00007fcf6a377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.620499][T13405] RAX: ffffffffffffffda RBX: 00007fcf6bf35fa0 RCX: 00007fcf6bd0e969 [ 198.620513][T13405] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 198.620528][T13405] RBP: 00007fcf6a377090 R08: 0000200000000240 R09: 0000000000000000 [ 198.620541][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.620553][T13405] R13: 0000000000000000 R14: 00007fcf6bf35fa0 R15: 00007fff7f5f96b8 [ 198.620571][T13405] [ 198.875912][T13410] loop6: detected capacity change from 0 to 1024 [ 198.899887][T13410] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.910919][T13410] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.930970][T13410] JBD2: no valid journal superblock found [ 198.936805][T13410] EXT4-fs (loop6): Could not load journal inode [ 198.938808][T13412] netlink: 'syz.2.3383': attribute type 10 has an invalid length. [ 199.014495][T13415] xt_hashlimit: max too large, truncated to 1048576 [ 199.317174][T13444] loop1: detected capacity change from 0 to 1024 [ 199.325443][T13444] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.336530][T13444] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 199.347722][T13444] JBD2: no valid journal superblock found [ 199.353553][T13444] EXT4-fs (loop1): Could not load journal inode [ 199.510006][T13447] loop5: detected capacity change from 0 to 8192 [ 199.700245][T13465] loop1: detected capacity change from 0 to 8192 [ 200.089876][T13482] __nla_validate_parse: 2 callbacks suppressed [ 200.089892][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'. [ 200.107705][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3407'. [ 200.171088][T13482] loop3: detected capacity change from 0 to 512 [ 200.192347][T13482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.302415][T10981] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.425316][T13495] loop5: detected capacity change from 0 to 256 [ 200.545428][T13498] loop5: detected capacity change from 0 to 8192 [ 200.677006][T13506] xt_hashlimit: max too large, truncated to 1048576 [ 201.097419][T13522] netlink: 'syz.2.3422': attribute type 10 has an invalid length. [ 201.105345][T13522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3422'. [ 201.160499][T13524] loop2: detected capacity change from 0 to 256 [ 201.193917][ T3006] udevd[3006]: worker [3482] terminated by signal 33 (Unknown signal 33) [ 201.205198][ T3006] udevd[3006]: worker [3482] failed while handling '/devices/virtual/block/loop2' [ 201.228967][T13526] loop3: detected capacity change from 0 to 1024 [ 201.245340][T13526] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.256327][T13526] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.268868][T13526] JBD2: no valid journal superblock found [ 201.274754][T13526] EXT4-fs (loop3): Could not load journal inode [ 201.358046][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. [ 201.367087][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3427'. [ 201.387044][T13534] loop2: detected capacity change from 0 to 512 [ 201.442763][T13534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.542852][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.594031][T13555] netlink: 'syz.5.3436': attribute type 10 has an invalid length. [ 201.612444][T13553] netlink: 'syz.1.3434': attribute type 10 has an invalid length. [ 201.620357][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3434'. [ 201.630611][T13555] netlink: 'syz.5.3436': attribute type 10 has an invalid length. [ 201.638473][T13555] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3436'. [ 201.653040][T13555] team0: entered promiscuous mode [ 201.658129][T13555] team_slave_0: entered promiscuous mode [ 201.664068][T13555] team_slave_1: entered promiscuous mode [ 201.669985][T13555] geneve1: entered promiscuous mode [ 201.674644][T13560] xt_hashlimit: max too large, truncated to 1048576 [ 201.777122][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.784754][T13555] batman_adv: batadv0: Interface activated: team0 [ 201.791326][T13555] batman_adv: batadv0: Interface deactivated: team0 [ 201.797989][T13555] batman_adv: batadv0: Removing interface: team0 [ 201.811122][T13555] bridge0: port 3(team0) entered blocking state [ 201.817433][T13555] bridge0: port 3(team0) entered disabled state [ 201.838266][T13555] team0: entered allmulticast mode [ 201.843470][T13555] team_slave_0: entered allmulticast mode [ 201.849228][T13555] team_slave_1: entered allmulticast mode [ 201.854992][T13555] geneve1: entered allmulticast mode [ 201.883485][T13555] bridge0: port 3(team0) entered blocking state [ 201.889830][T13555] bridge0: port 3(team0) entered forwarding state [ 201.978729][T13572] loop5: detected capacity change from 0 to 2048 [ 202.022753][T13572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.038646][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'. [ 202.339873][T13581] loop6: detected capacity change from 0 to 8192 [ 203.030071][T13583] netlink: 'syz.3.3444': attribute type 10 has an invalid length. [ 203.052289][T13583] batman_adv: batadv0: Adding interface: team0 [ 203.058499][T13583] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.083808][T13583] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 203.139904][T12863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.140636][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 203.140718][ T29] audit: type=1326 audit(203.109:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.178040][ T29] audit: type=1326 audit(203.109:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.201047][ T29] audit: type=1326 audit(203.109:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.223948][ T29] audit: type=1326 audit(203.109:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.246759][ T29] audit: type=1326 audit(203.109:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.280855][T13590] xt_hashlimit: max too large, truncated to 1048576 [ 203.323214][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3447'. [ 203.361387][T13597] loop2: detected capacity change from 0 to 512 [ 203.374207][T13597] ext4: Unknown parameter 'permit_directio' [ 203.393994][ T29] audit: type=1326 audit(203.179:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.416941][ T29] audit: type=1326 audit(203.179:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.418198][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3448'. [ 203.439830][ T29] audit: type=1326 audit(203.179:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.439882][ T29] audit: type=1326 audit(203.179:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.494998][ T29] audit: type=1326 audit(203.179:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13587 comm="syz.1.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeaeb5e969 code=0x7ffc0000 [ 203.527568][T13608] loop6: detected capacity change from 0 to 512 [ 203.656925][T13608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.820286][T13620] bond1: entered promiscuous mode [ 203.825375][T13620] bond1: entered allmulticast mode [ 203.843243][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.864515][T13620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.138385][T13638] program syz.6.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.201476][T13644] loop6: detected capacity change from 0 to 1024 [ 204.213017][T13646] futex_wake_op: syz.5.3462 tries to shift op by -1; fix this program [ 204.226834][T13644] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.237874][T13644] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.251980][T13644] JBD2: no valid journal superblock found [ 204.257775][T13644] EXT4-fs (loop6): Could not load journal inode [ 204.284564][T13650] loop2: detected capacity change from 0 to 2048 [ 204.295266][T10723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.373744][T13650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.408600][T10723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.446601][T13630] chnl_net:caif_netlink_parms(): no params data found [ 204.473269][T10723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.547137][T10723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.683995][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.691125][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.732531][T13630] bridge_slave_0: entered allmulticast mode [ 204.739064][T13630] bridge_slave_0: entered promiscuous mode [ 204.782507][T13630] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.789679][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.798104][T13630] bridge_slave_1: entered allmulticast mode [ 204.806764][T13630] bridge_slave_1: entered promiscuous mode [ 204.855051][T13630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.870375][T13676] program syz.3.3472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.895327][T13630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.960629][T13630] team0: Port device team_slave_0 added [ 205.148660][T10723] team0: Port device geneve1 removed [ 205.275073][T10723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.294206][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.318704][T10723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.358396][T10723] bond0 (unregistering): Released all slaves [ 205.403691][T13630] team0: Port device team_slave_1 added [ 205.409187][T13706] xt_hashlimit: max too large, truncated to 1048576 [ 205.459982][T13630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.467046][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.494598][T13630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.515283][T10723] tipc: Left network mode [ 205.533202][T10723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.540790][T10723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.556041][T10723] veth1_macvtap: left promiscuous mode [ 205.563328][T10723] veth0_macvtap: left promiscuous mode [ 205.571084][T10723] veth1_vlan: left promiscuous mode [ 205.579717][T10723] veth0_vlan: left promiscuous mode [ 205.735160][T10723] team0 (unregistering): Port device team_slave_1 removed [ 205.761564][T10723] team0 (unregistering): Port device team_slave_0 removed [ 205.799748][T13729] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 205.822535][T13729] SELinux: failed to load policy [ 205.853974][T13630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.861094][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.887055][T13630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.941643][T13734] loop6: detected capacity change from 0 to 8192 [ 206.039646][T13630] hsr_slave_0: entered promiscuous mode [ 206.046747][T13630] hsr_slave_1: entered promiscuous mode [ 206.057665][T13630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.065515][T13630] Cannot create hsr debugfs directory [ 206.076304][T13744] loop3: detected capacity change from 0 to 128 [ 206.292116][T13763] netlink: 'syz.5.3494': attribute type 10 has an invalid length. [ 206.300242][T13763] __nla_validate_parse: 3 callbacks suppressed [ 206.300257][T13763] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3494'. [ 206.634999][T13775] xt_hashlimit: max too large, truncated to 1048576 [ 206.775839][T13630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.811717][T13630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.841830][T13630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.875543][T13630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.917079][T13801] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 206.961750][T13801] SELinux: failed to load policy [ 207.020298][T13630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.039506][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.064293][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.071510][T10698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.082710][T13806] loop3: detected capacity change from 0 to 256 [ 207.090255][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.097357][T10698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.166831][T13630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.251303][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.400575][T13630] veth0_vlan: entered promiscuous mode [ 207.426806][T13630] veth1_vlan: entered promiscuous mode [ 207.608748][T13630] veth0_macvtap: entered promiscuous mode [ 207.621707][T13630] veth1_macvtap: entered promiscuous mode [ 207.641111][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.651608][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.661608][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.672078][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.682023][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.692482][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.702384][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.712913][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.873862][T13846] loop6: detected capacity change from 0 to 1024 [ 207.892383][T13630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.918219][T13846] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.929326][T13846] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.954978][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.965672][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.975545][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.986025][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.995876][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.006437][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.016305][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.026808][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.039665][ T3006] udevd[3006]: worker [13772] terminated by signal 33 (Unknown signal 33) [ 208.041754][T13630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.048358][ T3006] udevd[3006]: worker [13772] failed while handling '/devices/virtual/block/loop6' [ 208.058943][T13630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.073594][T13630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.082333][T13630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.091208][T13630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.129505][T13846] JBD2: no valid journal superblock found [ 208.135384][T13846] EXT4-fs (loop6): Could not load journal inode [ 208.187362][T13853] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 208.210509][T13853] SELinux: failed to load policy [ 208.237763][T13858] xt_hashlimit: max too large, truncated to 1048576 [ 208.375794][T13875] program syz.3.3521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.398444][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 208.398463][ T29] audit: type=1326 audit(208.359:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.427576][ T29] audit: type=1326 audit(208.359:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.453461][T13879] loop2: detected capacity change from 0 to 1024 [ 208.470224][T13879] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.481211][T13879] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.493141][ T29] audit: type=1326 audit(208.429:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.516062][ T29] audit: type=1326 audit(208.429:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.539007][ T29] audit: type=1326 audit(208.429:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.561943][ T29] audit: type=1326 audit(208.429:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.584914][ T29] audit: type=1326 audit(208.429:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.608116][ T29] audit: type=1326 audit(208.429:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.610122][T13885] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 208.631042][ T29] audit: type=1326 audit(208.429:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.663772][T13879] JBD2: no valid journal superblock found [ 208.663785][T13879] EXT4-fs (loop2): Could not load journal inode [ 208.675818][ T29] audit: type=1326 audit(208.429:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13876 comm="syz.6.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50961e969 code=0x7ffc0000 [ 208.699573][T13885] SELinux: failed to load policy [ 208.822242][T13895] xt_hashlimit: max too large, truncated to 1048576 [ 208.849127][T13898] loop2: detected capacity change from 0 to 512 [ 208.856255][T13898] ext4: Unknown parameter 'permit_directio' [ 208.899696][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 208.910525][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3533'. [ 208.927201][T13905] loop1: detected capacity change from 0 to 512 [ 208.942426][T13905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.998147][T13630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.016650][T13910] program syz.1.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.124071][T13915] netlink: 'syz.1.3536': attribute type 10 has an invalid length. [ 209.131942][T13915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3536'. [ 209.143876][T13915] team0: Port device geneve1 added [ 209.382951][T13927] xt_hashlimit: max too large, truncated to 1048576 [ 209.652830][T13942] netlink: 'syz.5.3548': attribute type 10 has an invalid length. [ 209.660987][T13942] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3548'. [ 209.748790][T13950] program syz.6.3551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.834592][T13957] loop6: detected capacity change from 0 to 256 [ 209.849235][T13959] loop5: detected capacity change from 0 to 256 [ 209.982675][T13966] loop6: detected capacity change from 0 to 2048 [ 210.157036][T13966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.364972][T13977] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 210.385068][T13977] SELinux: failed to load policy [ 210.394991][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 210.423874][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 210.471873][ T10] kernel write not supported for file /363/attr/exec (pid: 10 comm: kworker/0:1) [ 210.524913][T13979] loop1: detected capacity change from 0 to 512 [ 210.584096][T13991] loop3: detected capacity change from 0 to 256 [ 210.584866][T13979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.592891][T13990] xt_hashlimit: max too large, truncated to 1048576 [ 210.626976][T13991] vfat: Unknown parameter 'nonumtz 7 o' [ 210.721604][T13630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.767938][T14003] loop3: detected capacity change from 0 to 128 [ 210.798683][ T3006] udevd[3006]: worker [3302] terminated by signal 33 (Unknown signal 33) [ 210.810561][ T3006] udevd[3006]: worker [3302] failed while handling '/devices/virtual/block/loop3' [ 210.964390][T14012] loop5: detected capacity change from 0 to 512 [ 211.028771][T11250] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.056206][T14012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.091312][T14012] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 211.115836][T14012] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 211.152419][T14012] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 211.187586][T14012] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 211.264386][T12863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.306136][T14022] xt_hashlimit: max too large, truncated to 1048576 [ 211.469456][T14031] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 211.469485][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.469485][T10736] loop3: rw=1, sector=145, nr_sectors = 40 limit=128 [ 211.490112][T14031] SELinux: failed to load policy [ 211.521676][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.521676][T10736] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 211.559530][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.559530][T10736] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 211.575287][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.575287][T10736] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 211.599471][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.599471][T10736] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 211.613208][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.613208][T10736] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 211.627251][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.627251][T10736] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 211.671942][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.671942][T10736] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 211.702045][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.702045][T10736] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 211.748160][T10736] kworker/u8:58: attempt to access beyond end of device [ 211.748160][T10736] loop3: rw=1, sector=321, nr_sectors = 8 limit=128 [ 212.460869][T14050] netlink: 'syz.5.3587': attribute type 10 has an invalid length. [ 212.468763][T14050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3587'. [ 212.505320][T14052] xt_hashlimit: max too large, truncated to 1048576 [ 212.550633][T14055] loop2: detected capacity change from 0 to 1024 [ 212.565531][T14060] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 212.575550][T14060] SELinux: failed to load policy [ 212.584010][T14055] EXT4-fs: Ignoring removed orlov option [ 212.589802][T14055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.820665][T14055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.868558][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.888466][T14084] program syz.3.3599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.969773][T14090] xt_hashlimit: max too large, truncated to 1048576 [ 213.002425][T14092] loop3: detected capacity change from 0 to 256 [ 213.053318][T14096] loop2: detected capacity change from 0 to 164 [ 213.066384][T14096] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 213.138146][T14100] loop2: detected capacity change from 0 to 512 [ 213.163202][T14100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.181925][T14100] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 213.193848][T14100] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm wޣ: mark_inode_dirty error [ 213.206225][T14100] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm wޣ: corrupted inode contents [ 213.218191][T14100] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm wޣ: mark_inode_dirty error [ 213.241249][T11617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.538764][T14117] loop5: detected capacity change from 0 to 2048 [ 213.588089][T14117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.763831][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3616'. [ 214.422198][T12863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.663127][T14161] loop6: detected capacity change from 0 to 8192 [ 214.784379][T14166] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 214.794326][T14166] SELinux: failed to load policy [ 214.819496][T14168] xt_hashlimit: max too large, truncated to 1048576 [ 214.850558][T14170] program syz.2.3631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.001357][T14180] xt_hashlimit: max too large, truncated to 1048576 [ 215.071747][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3637'. [ 215.302497][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 215.302517][ T29] audit: type=1326 audit(215.269:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.351334][ T29] audit: type=1326 audit(215.309:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.374305][ T29] audit: type=1326 audit(215.309:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.397263][ T29] audit: type=1326 audit(215.309:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.420228][ T29] audit: type=1326 audit(215.309:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.443130][ T29] audit: type=1326 audit(215.309:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.466138][ T29] audit: type=1326 audit(215.309:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.489199][ T29] audit: type=1326 audit(215.309:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.512127][ T29] audit: type=1326 audit(215.309:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.535061][ T29] audit: type=1326 audit(215.309:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14186 comm="syz.5.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa217dae969 code=0x7ffc0000 [ 215.627053][T14194] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 215.636966][T14194] SELinux: failed to load policy [ 215.659091][T14196] SELinux: syz.5.3642 (14196) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 215.677273][T14196] loop5: detected capacity change from 0 to 512 [ 215.684201][T14196] ext4: Unknown parameter 'noacl' [ 215.945970][T14206] program syz.1.3646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.576719][T14219] xt_hashlimit: max too large, truncated to 1048576 [ 216.591590][T14221] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 216.601789][T14221] SELinux: failed to load policy [ 216.623961][T14223] netlink: 12 bytes leftover after parsing attributes in process `g'. [ 216.682164][T14225] loop5: detected capacity change from 0 to 8192 [ 216.720936][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3655'. [ 217.013656][T14241] netlink: 'syz.6.3659': attribute type 10 has an invalid length. [ 217.021696][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.028923][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.042474][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.049600][T14241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.056963][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.064053][T14241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.076155][T13630] ================================================================== [ 217.084283][T13630] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 217.091164][T14241] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.091764][T13630] [ 217.091774][T13630] read-write to 0xffff8881193c65d8 of 8 bytes by task 14239 on cpu 1: [ 217.091792][T13630] shmem_recalc_inode+0x36/0x1c0 [ 217.115796][T13630] shmem_get_folio_gfp+0x7a3/0xd40 [ 217.120941][T13630] shmem_write_begin+0xa8/0x190 [ 217.125822][T13630] generic_perform_write+0x181/0x490 [ 217.131137][T13630] shmem_file_write_iter+0xc5/0xf0 [ 217.136276][T13630] __kernel_write_iter+0x253/0x4c0 [ 217.141404][T13630] dump_user_range+0x5f4/0x8d0 [ 217.146278][T13630] elf_core_dump+0x1dc2/0x1f80 [ 217.151071][T13630] do_coredump+0x1836/0x1f40 [ 217.155692][T13630] get_signal+0xd85/0xf70 [ 217.160054][T13630] arch_do_signal_or_restart+0x97/0x480 [ 217.165633][T13630] irqentry_exit_to_user_mode+0x5e/0xa0 [ 217.171199][T13630] irqentry_exit+0x12/0x50 [ 217.175635][T13630] asm_exc_page_fault+0x26/0x30 [ 217.180503][T13630] [ 217.182841][T13630] read to 0xffff8881193c65d8 of 8 bytes by task 13630 on cpu 0: [ 217.190490][T13630] shmem_getattr+0x41/0x200 [ 217.195024][T13630] vfs_getattr_nosec+0x143/0x1e0 [ 217.199983][T13630] vfs_statx+0x11a/0x380 [ 217.204260][T13630] vfs_fstatat+0xe1/0x160 [ 217.208628][T13630] __se_sys_newfstatat+0x55/0x260 [ 217.213691][T13630] __x64_sys_newfstatat+0x55/0x70 [ 217.218752][T13630] x64_sys_call+0x2c22/0x2fb0 [ 217.223454][T13630] do_syscall_64+0xd0/0x1a0 [ 217.227981][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.233897][T13630] [ 217.236236][T13630] value changed: 0x000000000000104f -> 0x0000000000001050 [ 217.243367][T13630] [ 217.245729][T13630] Reported by Kernel Concurrency Sanitizer on: [ 217.251895][T13630] CPU: 0 UID: 0 PID: 13630 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 217.264595][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.274672][T13630] ==================================================================