last executing test programs: 32.558804624s ago: executing program 0 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 31.67839788s ago: executing program 0 (id=2709): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') fchmod(r0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 31.637457645s ago: executing program 0 (id=2711): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L-'}, 0x16, 0x2) 31.605247647s ago: executing program 0 (id=2713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xfff, 0x5a, 0x800, 0x8]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5a}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xfd, 0xdb}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x10}]}}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0x7, 0x6, 0x0]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_ID={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000040}, 0x8040) membarrier(0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 31.399893088s ago: executing program 0 (id=2717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x4}, &(0x7f00000002c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 30.208007045s ago: executing program 0 (id=2735): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x0, 0x0, 0x0, 0x13, 0x1, 0x8}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x2}, 0x28) 30.195409197s ago: executing program 32 (id=2735): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x0, 0x0, 0x0, 0x13, 0x1, 0x8}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x2}, 0x28) 23.578818808s ago: executing program 4 (id=2835): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002600)={'syztnl1\x00', &(0x7f0000002580)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x6, 0x9, 0x39, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0x100, 0x3}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x5, @empty, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)="12977a29f938677e2646797feaf83571da9fe7e9e5b69ca46899e14b800947116ffccb0e6b7e62be13e7da96d8ffd8989c688dd965bbd4b2c2177f56f2e0d01873f28ec8339249766bf0ea8427fe6c", 0x4f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000140)="1e7075a6e93320d96b882fb1e048eaf72658b735184911192dd2c1ca8e6dd640740265274658875bad8aaf637c0916278894a47611dd97c891b2d35c210126ec7a4114546a5f29e965cd3178e5794d18db585b5b023efa844f38186e0a5ac0349ce24ff9dd88cdb38f6e2ae08553b6d9580c54d3e265ab41f255d6135024753191107da192392aab481ba7866d0deb2f03ac09b0732531d4bf9d96937387e98da9166ab870b61c3e94e01a13c11fc65eb608f5865af49ebb75418073878cbd5943810eb2d64c18d08dc8f2d09db2f003cb70c2901bd547a11dc6d3049073491e83605b05b85f0d38d2b3", 0xea}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000280)="7cc012bebf1384323424973310c2da88e0406c0fc95df2a40e7e3550f81a8aaba15dec0d731b31af436c9d103f261dc250d2247654512768d6349966f7c37143d9b1a213aa9fbf21eef6421ed0c73e3dea5cd88bb36dbb7cacf6779bcb49c15b893c437e665215059aaabeead7d40793800421c4bfe8ac24de24e6e513658941f8d745e1997c011d6f4469f8ffa281c2b8b1b33d2eca11654a20293be55cd9504c88c378f5cb3dc6df160238c4b6", 0xae}, {&(0x7f0000000340)="dc13e9fa4d74a1e49036fbb8df6c14d6d150c0d491f9409ee2e6857ff364cb383c89d19c6ef526c490e6879b1508ff90107f1bbd9a6fc026533fae0696fafdfda39478f600f59db29e210c34616853f81e847e38290d8e2606f534582df3cd47a4974b2f35eb5721de704679051a649a6d42066b4cd2802160f0865d7cc2d2c6175ab5597d1e912418437a351de065d510d2f11a08aa97eff512144d755a9945501697da8d5ecb41c666196a3648ee724e529af265a9a800708f8553e6a0b3ab87038d43b9b9837f50bff4b8dde07f9245bbfade0fa44d6eb426c50fb7f3b8f68e12393cd68f8a", 0xe7}], 0x6, &(0x7f0000002640)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x0, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@ra, @pad1, @pad1, @enc_lim]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}}}, @dstopts={{0x60, 0x29, 0x37, {0x6c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x0, [0x4, 0x1, 0x548effa4, 0x9, 0xc8, 0x3, 0x80000000]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}], 0x178}}], 0x1, 0x4000040) 23.45348732s ago: executing program 4 (id=2836): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.45255578s ago: executing program 4 (id=2837): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14010000390001000000000000000000010100800c00020007000000000000e7530001"], 0x114}], 0x1}, 0x0) 23.379324598s ago: executing program 4 (id=2839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) mount$9p_fd(0x0, &(0x7f0000000440)='./file1/file0\x00', &(0x7f0000000480), 0x800, &(0x7f0000001040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@noextend}, {@privport}, {@noextend}, {@access_any}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x38, 0x32, 0x32, 0x65, 0x38, 0x32], 0x2d, [0x61, 0x33, 0x61, 0x64], 0x2d, [0x0, 0x33, 0x31, 0x31], 0x2d, [0x32, 0x65, 0x62, 0x61], 0x2d, [0x63, 0xd372198a5cd1d041, 0x35, 0x0, 0x70, 0x63, 0x64, 0x38]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise}, {@context={'context', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_type={'subj_type', 0x3d, '&@$]\\$@'}}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x4000008) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) fcntl$setlease(r3, 0x400, 0x2) syz_clone(0xc000, &(0x7f0000000380)="68a5d7a1624f35a6dd85fa162b8b5ab4c386f7cc8f088a19b642f2d5d7a35e92e3cb023227bd4d619844caaa8d6cf86bda0dffff2086eaf02442b921b8eedf9f25fe9e076cc828aa446d4056a040031bec916740d9a2753dae873f4fb400faecb36c4f8fad6a59693db1db39b115bff90db3e2a87c31b24ca0e85a7f5169ff996ff6a15df04a3f8be010990da5d21dc1365ee5855fdc", 0x96, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000bc0)="2274ef14340e749a838064438a6ae8f318f1f7e76a1e502ef10cd008ea570e5e3bb2e19baee7f730003c4e89a98de30085c26ac9ab9cfe710a5bd431ec5a5f94b7add8bfb9ebbcc17d186926bd9785cb1030516babb05943631e25bb8dcd00546d28ca9e79563ad1d52f612109f177a9078151ac4536ef8808a72f0ba66dc97eed364c99866b577f989814933cf6240ed00e808bebf80178f0f0a65768907a13e52f0786c783b6bfa678f9ffb4b6a6ada2146827915674698bdbdad79d6517566293557e358198d408") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb, 0x0, 0x7ffc1feb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 23.097093636s ago: executing program 4 (id=2844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000010007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22.571984967s ago: executing program 4 (id=2850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 22.571839807s ago: executing program 33 (id=2850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.736504564s ago: executing program 1 (id=3082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)) stat(&(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r6}, {0xe61, 0x0, 0x5, 0x2, 0x9, 0x1, 0xffd, 0xf}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r6, &(0x7f0000000180)={0x9, 0x87b, 0xfffffffffffff94c, 0x400, 0x7fff, 0x6, 0x8, 0x0, 0xb129}) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) accept(r4, &(0x7f0000000680)=@nl=@unspec, &(0x7f0000000000)=0x80) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) 2.520272092s ago: executing program 6 (id=3123): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) readahead(0xffffffffffffffff, 0x7f, 0x7) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001, 0x0}, 0x8) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000080)=0xc0000006, 0x4) recvmmsg(r7, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) 1.650775208s ago: executing program 6 (id=3127): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.545855348s ago: executing program 6 (id=3129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x9c, &(0x7f0000000380)={0x0, 0xec23, 0x0, 0x0, 0x22c}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r7, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac"], 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="f8040000130001002abd7000fedbdf25090800104e224e200500000007000000090000000100000008000000020000000300000000000000", @ANYRES32=r7, @ANYBLOB="0080000007000000070000005873780384000100fd97eaf93c79fb79cbab3a026a1445c6f27edbac6b358ac78924a04b297e197923789b507eb3bff4d7b6d3983d14a05f0335e4da1e042b9fc4197c769813e6a4ff2af939030372d2a2a7e85bd579184da66758abee349a37db1d22a4b183c115b4652c4a582bf44c43c2c68e8af3dd326233fcbebe01ce0fc66a4825b65f481b800001008550501ac963c3f67c2086e592e67fb9c6049ed9629c1ead718867179899d511279e75b5c07cb712167bddc595eaf190d7c5864223d7971eb03ab4058d2689f8680628f7a88e4b476cc0e126a131fb323464bb38827c8912b449037b160ed588fb682c421d3be0909bf3eae72f97423c9c4faec6045d7b4f4590ebb304000100ea00010076a11e138132937c8ac069af99814ab2c3fc8bc4bf456b2e5558ed3378b572a6ff73c6ccaf5603a06e7eb28e3187ea71ad70754295e5c8f79634abe321dbbc8def36b6de3ec11aada3ef970d5dfa0d1a444c6e8da7d0f9dcb213be7c2a8760a92a8a9e123107d593a4ff6966ab2d56a8ded3b430a1853b161b42f92a30f80c61d0fc950b92afaf2b5432ec0402e4538b4478a45cb93d3001182c57deafa247bdfa13c08771e83eb64022c869bd3751fc229201d35618e27f7ea104f45db16877e20067caf02b05b5ab8569b465f9730f440547ded01f1de66a9516810e455bd48243105c82330000d8000100ce028abdc97a7711de7bbe05054d6fb7c67c6ce86444f87806e14778d9ae836fbd9c8915f481d3d03478a11bf0e1cbbea615611242f71273f3fe8c83b3f4f3ce85b06157c13bf7c1e9e612ccb2b8fa36c9e0f2c803b8c8b9dd6c4a53d000e5ce20f348820eeccea1d77b3a16266f9bd10fc80f53e036cb4a3a120684a43b375fc853057a224e033a63afba95877cb63cffe942f708e108990bc08a67b5e05c76a1c80cf205d0278e4495b222fef7d9d460d85d6cd9eadffd07a87219e300007a82612609d2ae7cecd2ca14330283e58ff8482a2f180001001ab18e450b4c191410b0933d3bbeb684a88a06fcf40001002fcbebd9c450d9e4eb096f791d2cf3cd5cea5aa8f6584436515637ee518614a138a6400cfbcf0c96cb8c90938e5d9b1c23194a869f8fdab07f01a62bfe08e4f5d5d5a775022fabd580ab1a4e3a2f27165c46732982c88687ebe03611096541fc4aab2327582c22ae1c617efe9344303859ee6c591078c555b85e8fe8568dd9be242c004fd36af7c5d6901e34535a7ad34f6bfb8b90a5415bdd916eb0143afa05ede91bb391665028133a0ae7c4e95bef677d249d7ed3b7209b61c37d525d56fb29bcae66505e435611950437cf6ef2a2b8487787cd018524def7707301e30a519371c1adf4a75db9336cea91bd4ff109d10001002a35f488703b452675e1ad2848cd6d66b0fcbcf301a3166bb43468d427a417f451f21043e71f1b65e9ede01d71cc91350e84581ac0f425a38237333a799625de4e8b37cf80ee44f7d57d1d8ae33ab2a4458535e8b60b25711828fa1db477951f16156b962c28939604aa596da3f55c907b670918b4051494230a76c2bc01a2173228fb8b18457b002d957c5267723a57f09e043bcd4c84dfa3ce3ff7fd35c87486e7a7a14fc54ab46cbdcb62dfef891c29f450d15ff3617592bb40e5aa0599a33303e10e70d3c8b7b25ea82f37000000"], 0x4f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x51) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x1, 0x7fffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000002c0)="d1", 0x1}], 0x1, 0x14, 0x1, {0x1}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = open(0x0, 0x400800, 0x97) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) 1.470773765s ago: executing program 3 (id=3131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400, 0x400100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) fallocate(r3, 0x0, 0x0, 0x2000402) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES32], 0x108}}], 0x1, 0xc040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) umount2(&(0x7f0000000040)='./file0\x00', 0xb) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.416422101s ago: executing program 1 (id=3132): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r0, 0x0, 0x7) recvmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000bc0)=""/144, 0x90}], 0x3, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20) r1 = syz_io_uring_setup(0x499, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x0, 0x26d}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8524a9af801bb0f, 0x0, r1, 0x0, 0x0, 0x4, 0x240940, 0x23456}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r5, 0x0, 0x2) 1.380716884s ago: executing program 6 (id=3133): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r1, 0x0, 0x3, 0x1}}, 0x20) 1.332269879s ago: executing program 1 (id=3134): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x5, 0x5, @mcast1, @rand_addr=' \x01\x00', 0x10, 0x8000, 0x8000, 0x1}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x6, 0x0}, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x8, '\x00', 0x0, r0, 0x5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x1, &(0x7f0000000000)=@raw=[@generic={0xb, 0x1, 0x9, 0x81, 0xd415}], &(0x7f00000000c0)='GPL\x00', 0x3b0ea0e5, 0xc1, &(0x7f0000000100)=""/193, 0x41100, 0x4f, '\x00', r1, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0xb, 0x6}, 0x10, r2, r0, 0x3, &(0x7f00000004c0)=[r0, r0, r3], &(0x7f0000000500)=[{0x0, 0x4, 0x1, 0x7}, {0x0, 0x5, 0x1, 0x8}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0x7}, 0x94) lsetxattr$security_ima(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640), &(0x7f0000000740)=@sha1={0x1, "2d219ed0dcff52dd1d0ff076dc9285a4fc033079"}, 0x15, 0x3) 1.332099539s ago: executing program 6 (id=3135): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r1, 0x0, 0x0) 1.331913919s ago: executing program 1 (id=3136): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES64=r1, @ANYRES32=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) bind$rds(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) 1.297939542s ago: executing program 2 (id=3137): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 1.297449512s ago: executing program 1 (id=3138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x2}, 0x18) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1.296859742s ago: executing program 3 (id=3139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1.11314176s ago: executing program 2 (id=3140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r2}, 0x38) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x585080) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, 0xfffffffffffffffd) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 978.162664ms ago: executing program 3 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)) stat(&(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r6}, {0xe61, 0x0, 0x5, 0x2, 0x9, 0x1, 0xffd, 0xf}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r6, &(0x7f0000000180)={0x9, 0x87b, 0xfffffffffffff94c, 0x400, 0x7fff, 0x6, 0x8, 0x0, 0xb129}) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) accept(r4, &(0x7f0000000680)=@nl=@unspec, &(0x7f0000000000)=0x80) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) 967.499265ms ago: executing program 1 (id=3143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 907.610061ms ago: executing program 2 (id=3144): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x5, 0x5, @mcast1, @rand_addr=' \x01\x00', 0x10, 0x8000, 0x8000, 0x1}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x6, 0x0}, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x8, '\x00', 0x0, r0, 0x5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x1, &(0x7f0000000000)=@raw=[@generic={0xb, 0x1, 0x9, 0x81, 0xd415}], &(0x7f00000000c0)='GPL\x00', 0x3b0ea0e5, 0xc1, &(0x7f0000000100)=""/193, 0x41100, 0x4f, '\x00', r1, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0xb, 0x6}, 0x10, r2, r0, 0x3, &(0x7f00000004c0)=[r0, r0, r3], &(0x7f0000000500)=[{0x0, 0x4, 0x1, 0x7}, {0x0, 0x5, 0x1, 0x8}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0x7}, 0x94) lsetxattr$security_ima(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640), &(0x7f0000000740)=@sha1={0x1, "2d219ed0dcff52dd1d0ff076dc9285a4fc033079"}, 0x15, 0x3) 907.231031ms ago: executing program 2 (id=3145): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00) 844.103577ms ago: executing program 2 (id=3146): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 820.72136ms ago: executing program 2 (id=3147): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="e1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) splice(r0, 0x0, r2, 0x0, 0xa86, 0x0) 419.790949ms ago: executing program 6 (id=3151): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18df1c0021000000000000003b000650000000950000e496cb8e1b6e8b36000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') pread64(r5, &(0x7f0000000040)=""/9, 0x9, 0x103) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) semget(0x3, 0x4, 0x453) 346.783436ms ago: executing program 3 (id=3152): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8e, 0x6, 0x8, 0x81, 0xb}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @alu={0x4, 0x0, 0x6, 0x8, 0xb, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r4, r4, r3, r4, r2, r4, r2, r4, r4, r2], &(0x7f0000000640)=[{0x1, 0x5, 0x8, 0x3}, {0x2, 0x4, 0xf, 0x6}, {0x3, 0x2, 0x5, 0x7}, {0x3, 0x3, 0xd, 0x1}, {0x1, 0x5, 0x10, 0x2}, {0x4, 0x1, 0x10, 0x1}, {0x4, 0x3, 0xd, 0x1}], 0x10, 0xf8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='host1x_channel_submitted\x00', r5, 0x0, 0x1000000}, 0x18) write$qrtrtun(r2, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x800) r8 = open(&(0x7f00000000c0)='./file1\x00', 0x400147543, 0xa) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r8, 0x0) 312.249309ms ago: executing program 3 (id=3153): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 286.412062ms ago: executing program 5 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 244.503596ms ago: executing program 3 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0x10, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000140600fe8000000000000000000000000000bb"], 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x1003, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x36e, 0x18000, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={0x0, @in={0x2, 0x4e20, @broadcast}, @llc={0x1a, 0x10e, 0x72, 0x4, 0xf9, 0xd, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @llc={0x1a, 0x300, 0x9, 0x8, 0xe, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x4, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)='veth0_vlan\x00', 0x4, 0x8, 0x1b9b}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x4, 0x0, 0xfffe, 0x2, 0x15, "0000000000feff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000100)=0x60, 0x80800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={0x0, @phonet={0x23, 0xd, 0x9, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @llc={0x1a, 0x30b, 0x9, 0x5, 0xfa, 0xf7, @local}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)='macsec0\x00', 0x200, 0xd6d, 0x8}) r4 = io_uring_setup(0x10a2, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2d, 0xf8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="96ca64f4a0373f64283d51a9e5dcf8b2d05bf000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffebc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) 244.093236ms ago: executing program 5 (id=3156): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 180.723432ms ago: executing program 5 (id=3157): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x14) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10a00, 0x4}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x2}) futex(0x0, 0x121ec36a12c68a9, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfff7bffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r10, 0x0) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000000500)={'syzkaller1\x00', 0x4000000000, 0x401}) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000040)) io_pgetevents(0x0, 0x2, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 179.904632ms ago: executing program 5 (id=3158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x10f}) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) 147.595016ms ago: executing program 5 (id=3159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x578, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(0x0, &(0x7f0000000180)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x9081}], 0x1, 0x2) 0s ago: executing program 5 (id=3160): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) kernel console output (not intermixed with test programs): 0: Port device team_slave_0 added [ 174.236651][T10946] team0: Port device team_slave_1 added [ 174.250405][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 174.259365][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2759'. [ 174.275308][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.282311][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.308388][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.320001][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.326995][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.341414][T11023] xt_l2tp: wrong L2TP version: 1 [ 174.353076][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.386968][T11027] loop1: detected capacity change from 0 to 512 [ 174.393969][T11027] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.400852][T11027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.410637][T11027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.412272][T11029] usb usb1: check_ctrlrecip: process 11029 (syz.3.2763) requesting ep 01 but needs 81 [ 174.419461][T11027] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.422432][T10946] hsr_slave_0: entered promiscuous mode [ 174.429110][T11029] usb usb1: usbfs: process 11029 (syz.3.2763) did not claim interface 0 before use [ 174.454961][T10946] hsr_slave_1: entered promiscuous mode [ 174.458398][T11031] xt_l2tp: wrong L2TP version: 1 [ 174.461167][T10946] debugfs: 'hsr0' already exists in 'hsr' [ 174.468475][T11027] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2762: Allocating blocks 41-42 which overlap fs metadata [ 174.471540][T10946] Cannot create hsr debugfs directory [ 174.491528][T11027] EXT4-fs (loop1): Remounting filesystem read-only [ 174.498602][T11027] EXT4-fs (loop1): 1 truncate cleaned up [ 174.512257][T11027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.527425][T11027] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 174.575729][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.586914][T10946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.596294][T10946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.605538][T10946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.617719][T10946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.686722][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 174.698758][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.712120][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.727500][T11053] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2770'. [ 174.737043][T11053] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 174.745358][T11053] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 174.764513][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.771725][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.779959][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 174.788913][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2771'. [ 174.814772][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.821894][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.860043][T11060] usb usb1: check_ctrlrecip: process 11060 (syz.2.2773) requesting ep 01 but needs 81 [ 174.869817][T11060] usb usb1: usbfs: process 11060 (syz.2.2773) did not claim interface 0 before use [ 174.881518][T10946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.943343][T11068] xt_l2tp: wrong L2TP version: 1 [ 174.996736][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.033993][T11079] FAULT_INJECTION: forcing a failure. [ 175.033993][T11079] name failslab, interval 1, probability 0, space 0, times 0 [ 175.034031][T11079] CPU: 0 UID: 0 PID: 11079 Comm: syz.2.2780 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.034067][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.034084][T11079] Call Trace: [ 175.034103][T11079] [ 175.034114][T11079] __dump_stack+0x1d/0x30 [ 175.034142][T11079] dump_stack_lvl+0xe8/0x140 [ 175.034193][T11079] dump_stack+0x15/0x1b [ 175.034215][T11079] should_fail_ex+0x265/0x280 [ 175.034287][T11079] ? kobject_uevent_env+0x1c0/0x570 [ 175.034412][T11079] should_failslab+0x8c/0xb0 [ 175.034449][T11079] __kmalloc_cache_noprof+0x4c/0x4a0 [ 175.034558][T11079] kobject_uevent_env+0x1c0/0x570 [ 175.034633][T11079] ? device_pm_check_callbacks+0x683/0x6a0 [ 175.034669][T11079] kobject_uevent+0x1d/0x30 [ 175.034701][T11079] device_del+0x710/0x790 [ 175.034722][T11079] device_destroy+0x66/0xa0 [ 175.034811][T11079] vcs_remove_sysfs+0x21/0x60 [ 175.034849][T11079] vc_deallocate+0xfc/0x250 [ 175.034878][T11079] vt_disallocate+0x162/0x1a0 [ 175.034906][T11079] vt_ioctl+0x11fa/0x18a0 [ 175.034973][T11079] ? tty_jobctrl_ioctl+0x29e/0x810 [ 175.035073][T11079] tty_ioctl+0x7d8/0xb80 [ 175.035166][T11079] ? __pfx_tty_ioctl+0x10/0x10 [ 175.035187][T11079] __se_sys_ioctl+0xce/0x140 [ 175.035207][T11079] __x64_sys_ioctl+0x43/0x50 [ 175.035298][T11079] x64_sys_call+0x1816/0x3000 [ 175.035328][T11079] do_syscall_64+0xd2/0x200 [ 175.035362][T11079] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.035481][T11079] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.035527][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.035559][T11079] RIP: 0033:0x7fee5410eec9 [ 175.035593][T11079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.035695][T11079] RSP: 002b:00007fee52b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.035723][T11079] RAX: ffffffffffffffda RBX: 00007fee54365fa0 RCX: 00007fee5410eec9 [ 175.035742][T11079] RDX: 0000000000000003 RSI: 0000000000005608 RDI: 0000000000000003 [ 175.035759][T11079] RBP: 00007fee52b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.035777][T11079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.035793][T11079] R13: 00007fee54366038 R14: 00007fee54365fa0 R15: 00007ffed73477d8 [ 175.035819][T11079] [ 175.065178][T11084] loop3: detected capacity change from 0 to 512 [ 175.065563][T11084] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.065613][T11084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.066159][T11084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.066176][T11084] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.084157][T11084] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2782: Allocating blocks 41-42 which overlap fs metadata [ 175.084329][T11084] EXT4-fs (loop3): Remounting filesystem read-only [ 175.084470][T11084] EXT4-fs (loop3): 1 truncate cleaned up [ 175.084797][T11087] usb usb1: check_ctrlrecip: process 11087 (syz.4.2783) requesting ep 01 but needs 81 [ 175.084824][T11084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.084840][T11087] usb usb1: usbfs: process 11087 (syz.4.2783) did not claim interface 0 before use [ 175.086962][T11084] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.131129][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.186661][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 175.331133][T10946] veth0_vlan: entered promiscuous mode [ 175.335874][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2784'. [ 175.457880][T10946] veth1_vlan: entered promiscuous mode [ 175.477059][T10946] veth0_macvtap: entered promiscuous mode [ 175.486495][T10946] veth1_macvtap: entered promiscuous mode [ 175.493208][T11107] usb usb1: check_ctrlrecip: process 11107 (syz.3.2785) requesting ep 01 but needs 81 [ 175.502965][T11107] usb usb1: usbfs: process 11107 (syz.3.2785) did not claim interface 0 before use [ 175.528727][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.541974][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.554863][ T5623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.566529][ T5623] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.569911][T11103] loop1: detected capacity change from 0 to 512 [ 175.588439][ T5623] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.590525][T11111] 9pnet_fd: Insufficient options for proto=fd [ 175.599025][T11103] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.604310][T11113] usb usb1: check_ctrlrecip: process 11113 (syz.4.2797) requesting ep 01 but needs 81 [ 175.610679][T11103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.619764][T11113] usb usb1: usbfs: process 11113 (syz.4.2797) did not claim interface 0 before use [ 175.622358][T11111] netlink: 'syz.3.2788': attribute type 1 has an invalid length. [ 175.635428][ T5623] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.635866][T11111] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2788'. [ 175.666225][T11103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.674835][T11103] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.756281][T11103] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2786: Allocating blocks 41-42 which overlap fs metadata [ 175.782923][T11103] EXT4-fs (loop1): Remounting filesystem read-only [ 175.789847][T11103] EXT4-fs (loop1): 1 truncate cleaned up [ 175.811203][T11103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.857808][T11131] loop5: detected capacity change from 0 to 512 [ 175.868550][T11103] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.883710][T11131] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.000172][T11131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.020828][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.044835][T11131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.053390][T11131] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.146083][T11132] lo speed is unknown, defaulting to 1000 [ 176.316872][T11131] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2794: Allocating blocks 41-42 which overlap fs metadata [ 176.341976][T11131] EXT4-fs (loop5): Remounting filesystem read-only [ 176.356609][T11131] EXT4-fs (loop5): 1 truncate cleaned up [ 176.362840][T11131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.377595][T11131] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 176.430096][T11149] usb usb1: check_ctrlrecip: process 11149 (syz.1.2802) requesting ep 01 but needs 81 [ 176.440030][T11149] usb usb1: usbfs: process 11149 (syz.1.2802) did not claim interface 0 before use [ 176.512983][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.770096][T11176] loop2: detected capacity change from 0 to 512 [ 176.781491][T11176] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.793265][T11176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.801148][ T36] syz1: Port: 1 Link DOWN [ 176.834083][T11176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.842844][T11176] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.894884][T11176] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2814: Allocating blocks 41-42 which overlap fs metadata [ 176.959765][T11187] macvtap0: refused to change device tx_queue_len [ 176.972642][T11176] EXT4-fs (loop2): Remounting filesystem read-only [ 177.017415][T11176] EXT4-fs (loop2): 1 truncate cleaned up [ 177.073064][T11176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.140432][T11176] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.312727][T11179] lo speed is unknown, defaulting to 1000 [ 177.330936][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.538972][T11179] chnl_net:caif_netlink_parms(): no params data found [ 177.697286][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 177.697306][ T29] audit: type=1326 audit(1760370845.366:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.727183][ T29] audit: type=1326 audit(1760370845.366:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.750747][ T29] audit: type=1326 audit(1760370845.366:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.774231][ T29] audit: type=1326 audit(1760370845.366:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.797814][ T29] audit: type=1326 audit(1760370845.366:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.821436][ T29] audit: type=1326 audit(1760370845.366:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.844967][ T29] audit: type=1326 audit(1760370845.366:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.869040][ T29] audit: type=1326 audit(1760370845.366:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.892812][ T29] audit: type=1326 audit(1760370845.366:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.916383][ T29] audit: type=1326 audit(1760370845.366:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 177.972250][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.979594][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.991942][T11179] bridge_slave_0: entered allmulticast mode [ 177.998954][T11179] bridge_slave_0: entered promiscuous mode [ 178.006793][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.014051][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.026942][T11179] bridge_slave_1: entered allmulticast mode [ 178.083255][T11225] netlink: set zone limit has 8 unknown bytes [ 178.102827][T11179] bridge_slave_1: entered promiscuous mode [ 178.158322][T11229] loop2: detected capacity change from 0 to 512 [ 178.170785][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.190404][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.260645][T11179] team0: Port device team_slave_0 added [ 178.270537][T11179] team0: Port device team_slave_1 added [ 178.339302][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.346345][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.372311][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.435001][T11229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.468294][T11229] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.491100][T11236] macvtap0: refused to change device tx_queue_len [ 178.498166][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.505159][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.531123][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.722766][T11179] hsr_slave_0: entered promiscuous mode [ 178.738105][T11179] hsr_slave_1: entered promiscuous mode [ 178.745010][T11179] debugfs: 'hsr0' already exists in 'hsr' [ 178.750769][T11179] Cannot create hsr debugfs directory [ 178.813581][T11254] netlink: set zone limit has 8 unknown bytes [ 178.871772][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.916110][T11259] loop4: detected capacity change from 0 to 512 [ 178.928785][T11259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.959469][T11259] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.120336][T11275] macvtap0: refused to change device tx_queue_len [ 179.139584][ T3309] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 179.159320][ T3309] EXT4-fs error (device loop4): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 179.226351][T11283] FAULT_INJECTION: forcing a failure. [ 179.226351][T11283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.233074][T11179] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.239695][T11283] CPU: 0 UID: 0 PID: 11283 Comm: syz.2.2845 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.239812][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.239831][T11283] Call Trace: [ 179.239841][T11283] [ 179.239851][T11283] __dump_stack+0x1d/0x30 [ 179.239882][T11283] dump_stack_lvl+0xe8/0x140 [ 179.239911][T11283] dump_stack+0x15/0x1b [ 179.239935][T11283] should_fail_ex+0x265/0x280 [ 179.240031][T11283] should_fail_alloc_page+0xf2/0x100 [ 179.240124][T11283] __alloc_frozen_pages_noprof+0xff/0x360 [ 179.240250][T11283] alloc_pages_mpol+0xb3/0x260 [ 179.240281][T11283] vma_alloc_folio_noprof+0x1aa/0x300 [ 179.240312][T11283] handle_mm_fault+0xec2/0x2be0 [ 179.240356][T11283] do_user_addr_fault+0x3fe/0x1080 [ 179.240401][T11283] exc_page_fault+0x62/0xa0 [ 179.240470][T11283] asm_exc_page_fault+0x26/0x30 [ 179.240499][T11283] RIP: 0010:__se_sys_waitid+0x1d8/0x2a0 [ 179.240530][T11283] Code: e8 6d 48 1e 00 4d 85 ff 74 5f 48 bb 00 f0 ff ff ff 7f 00 00 48 89 df 4c 89 fe e8 d3 45 1e 00 4c 39 fb 72 76 0f 01 cb 0f ae e8 <41> 89 2f 41 c7 47 04 00 00 00 00 8b 44 24 1c 41 89 47 08 48 8d 7c [ 179.240557][T11283] RSP: 0018:ffffc90001b03d90 EFLAGS: 00050212 [ 179.240638][T11283] RAX: ffffffff8138fc0d RBX: 00007ffffffff000 RCX: ffff88814de78000 [ 179.240656][T11283] RDX: 0000000000000000 RSI: 0000200000002ff9 RDI: 00007ffffffff000 [ 179.240675][T11283] RBP: 0000000000000000 R08: 0001ffff8684802f R09: 0000000000000000 [ 179.240694][T11283] R10: 0000000000000003 R11: 0000000000000000 R12: fffffffffffffff6 [ 179.240712][T11283] R13: 0000000000000000 R14: fffffffffffffff6 R15: 0000200000002ff9 [ 179.240735][T11283] ? __se_sys_waitid+0x1cd/0x2a0 [ 179.240775][T11283] ? __pfx_child_wait_callback+0x10/0x10 [ 179.240844][T11283] __x64_sys_waitid+0x67/0x80 [ 179.240894][T11283] x64_sys_call+0xb0d/0x3000 [ 179.240925][T11283] do_syscall_64+0xd2/0x200 [ 179.241062][T11283] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 179.241139][T11283] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 179.241175][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.241207][T11283] RIP: 0033:0x7fee5410eec9 [ 179.241231][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.241298][T11283] RSP: 002b:00007fee52b4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 179.241325][T11283] RAX: ffffffffffffffda RBX: 00007fee54366090 RCX: 00007fee5410eec9 [ 179.241343][T11283] RDX: 0000200000002ff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.241360][T11283] RBP: 00007fee52b4e090 R08: 0000000000000000 R09: 0000000000000000 [ 179.241378][T11283] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 179.241403][T11283] R13: 00007fee54366128 R14: 00007fee54366090 R15: 00007ffed73477d8 [ 179.241430][T11283] [ 179.535015][T11179] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.544371][T11179] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.558621][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.575201][ T5635] bridge_slave_1: left allmulticast mode [ 179.581323][ T5635] bridge_slave_1: left promiscuous mode [ 179.587087][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.613972][ T5635] bridge_slave_0: left allmulticast mode [ 179.619736][ T5635] bridge_slave_0: left promiscuous mode [ 179.625505][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.683590][ T3424] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 179.694636][ T5635] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 179.819166][ T5635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.829811][ T5635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.839545][ T5635] bond0 (unregistering): Released all slaves [ 179.850432][ T5635] bond1 (unregistering): (slave bond2): Releasing backup interface [ 179.859736][ T5635] bond1 (unregistering): Released all slaves [ 179.870221][ T5635] bond2 (unregistering): Released all slaves [ 179.880238][ T5635] bond3 (unregistering): Released all slaves [ 179.891445][T11179] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.950764][T11179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.971755][T11179] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.985891][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.993032][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.009811][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.016988][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.054969][T11294] lo speed is unknown, defaulting to 1000 [ 180.061055][T11179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.072017][T11179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.154710][ T5635] hsr_slave_0: left promiscuous mode [ 180.168156][ T5635] hsr_slave_1: left promiscuous mode [ 180.182912][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.190458][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.266662][ T5635] team0 (unregistering): Port device team_slave_1 removed [ 180.280000][ T5635] team0 (unregistering): Port device team_slave_0 removed [ 180.439966][T11179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.457760][T11294] chnl_net:caif_netlink_parms(): no params data found [ 180.515298][T11294] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.522424][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.530273][T11294] bridge_slave_0: entered allmulticast mode [ 180.537764][T11294] bridge_slave_0: entered promiscuous mode [ 180.545633][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.553058][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.560443][T11294] bridge_slave_1: entered allmulticast mode [ 180.568201][T11294] bridge_slave_1: entered promiscuous mode [ 180.589324][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.604893][T11179] veth0_vlan: entered promiscuous mode [ 180.620227][T11179] veth1_vlan: entered promiscuous mode [ 180.637498][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.658843][T11179] veth0_macvtap: entered promiscuous mode [ 180.697558][ T5635] ------------[ cut here ]------------ [ 180.703279][ T5635] WARNING: CPU: 0 PID: 5635 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 180.712959][ T5635] Modules linked in: [ 180.716886][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.727025][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.737162][ T5635] Workqueue: netns cleanup_net [ 180.741973][ T5635] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 180.747596][ T5635] Code: 48 8d bb 70 0e 00 00 e8 65 a8 b7 fc 48 8b bb 70 0e 00 00 e8 e9 53 c4 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 38 51 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a 51 9c fc 90 0f 0b 90 4c 89 f7 e8 2e [ 180.767356][ T5635] RSP: 0018:ffffc9000123fc60 EFLAGS: 00010293 [ 180.773478][ T5635] RAX: ffffffff84baee48 RBX: ffff88810bb71780 RCX: ffff88811a852100 [ 180.781562][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810bb725c0 [ 180.789625][ T5635] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 180.797674][ T5635] R10: ffffc9000123fbe8 R11: 0001c9000123fbe8 R12: ffffffff86c91020 [ 180.805764][ T5635] R13: ffff88810bb717a8 R14: ffff88810bb725c0 R15: ffff88810bb71780 [ 180.813788][ T5635] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 180.822824][ T5635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.829480][ T5635] CR2: 00007fee52b6ef98 CR3: 0000000006834000 CR4: 00000000003506f0 [ 180.837682][ T5635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.845844][ T5635] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 180.853982][ T5635] Call Trace: [ 180.857304][ T5635] [ 180.860355][ T5635] xfrm_net_exit+0x2d/0x60 [ 180.864840][ T5635] ops_undo_list+0x27b/0x410 [ 180.869525][ T5635] cleanup_net+0x2f4/0x4f0 [ 180.874071][ T5635] process_scheduled_works+0x4ce/0x9d0 [ 180.879581][ T5635] worker_thread+0x582/0x770 [ 180.884227][ T5635] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 180.890127][ T5635] kthread+0x489/0x510 [ 180.894270][ T5635] ? finish_task_switch+0xad/0x2b0 [ 180.899433][ T5635] ? __pfx_worker_thread+0x10/0x10 [ 180.904595][ T5635] ? __pfx_kthread+0x10/0x10 [ 180.909225][ T5635] ret_from_fork+0x122/0x1b0 [ 180.913892][ T5635] ? __pfx_kthread+0x10/0x10 [ 180.918502][ T5635] ret_from_fork_asm+0x1a/0x30 [ 180.923333][ T5635] [ 180.926434][ T5635] ---[ end trace 0000000000000000 ]--- [ 180.932900][ T5635] ------------[ cut here ]------------ [ 180.938377][ T5635] WARNING: CPU: 0 PID: 5635 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 180.947993][ T5635] Modules linked in: [ 180.951918][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.963576][ T5635] Tainted: [W]=WARN [ 180.967484][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.977946][ T5635] Workqueue: netns cleanup_net [ 180.982769][ T5635] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 180.988349][ T5635] Code: a8 b7 fc 4d 8b 3e e9 06 ff ff ff e8 11 51 9c fc 90 0f 0b 90 4c 89 f7 e8 15 a8 b7 fc 4d 8b 3e e9 24 ff ff ff e8 f8 50 9c fc 90 <0f> 0b 90 4c 89 f7 e8 fc a7 b7 fc 4d 8b 3e e9 42 ff ff ff e8 df 50 [ 181.008290][ T5635] RSP: 0018:ffffc9000123fc60 EFLAGS: 00010293 [ 181.014506][ T5635] RAX: ffffffff84baee88 RBX: ffff88810bb71780 RCX: ffff88811a852100 [ 181.022597][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881189eae00 [ 181.030591][ T5635] RBP: 0000000000000040 R08: 000188810bb725df R09: 0000000000000000 [ 181.038605][ T5635] R10: ffff8881189eae80 R11: 00018881189eae7f R12: ffffffff86c91020 [ 181.046638][ T5635] R13: ffff88810bb717a8 R14: ffff88810bb725d8 R15: ffff8881189eae00 [ 181.054722][ T5635] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 181.063698][ T5635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.070355][ T5635] CR2: 00007fee52b6ef98 CR3: 0000000006834000 CR4: 00000000003506f0 [ 181.078496][ T5635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.086517][ T5635] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 181.094523][ T5635] Call Trace: [ 181.097820][ T5635] [ 181.100847][ T5635] xfrm_net_exit+0x2d/0x60 [ 181.105375][ T5635] ops_undo_list+0x27b/0x410 [ 181.110047][ T5635] cleanup_net+0x2f4/0x4f0 [ 181.114525][ T5635] process_scheduled_works+0x4ce/0x9d0 [ 181.120029][ T5635] worker_thread+0x582/0x770 [ 181.124664][ T5635] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 181.130554][ T5635] kthread+0x489/0x510 [ 181.134727][ T5635] ? finish_task_switch+0xad/0x2b0 [ 181.139911][ T5635] ? __pfx_worker_thread+0x10/0x10 [ 181.145085][ T5635] ? __pfx_kthread+0x10/0x10 [ 181.149767][ T5635] ret_from_fork+0x122/0x1b0 [ 181.154469][ T5635] ? __pfx_kthread+0x10/0x10 [ 181.159123][ T5635] ret_from_fork_asm+0x1a/0x30 [ 181.164038][ T5635] [ 181.167090][ T5635] ---[ end trace 0000000000000000 ]--- [ 181.173638][ T5635] ------------[ cut here ]------------ [ 181.179167][ T5635] WARNING: CPU: 0 PID: 5635 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 181.188788][ T5635] Modules linked in: [ 181.192743][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.204429][ T5635] Tainted: [W]=WARN [ 181.208238][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.218397][ T5635] Workqueue: netns cleanup_net [ 181.223212][ T5635] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 181.228798][ T5635] Code: a8 b7 fc 4d 8b 3e e9 24 ff ff ff e8 f8 50 9c fc 90 0f 0b 90 4c 89 f7 e8 fc a7 b7 fc 4d 8b 3e e9 42 ff ff ff e8 df 50 9c fc 90 <0f> 0b 90 4c 89 f7 e8 e3 a7 b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 181.248705][ T5635] RSP: 0018:ffffc9000123fc60 EFLAGS: 00010293 [ 181.254816][ T5635] RAX: ffffffff84baeea1 RBX: ffff88810bb71780 RCX: ffff88811a852100 [ 181.262822][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881189eadc0 [ 181.270985][ T5635] RBP: 0000000000000040 R08: 000188810bb725d7 R09: 0000000000000000 [ 181.278994][ T5635] R10: ffff8881189eae40 R11: 00018881189eae3f R12: ffffffff86c91020 [ 181.287011][ T5635] R13: ffff88810bb717a8 R14: ffff88810bb725d0 R15: ffff8881189eadc0 [ 181.295087][ T5635] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 181.304046][ T5635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.310635][ T5635] CR2: 00007fee52b6ef98 CR3: 0000000006834000 CR4: 00000000003506f0 [ 181.318719][ T5635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.326781][ T5635] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 181.335203][ T5635] Call Trace: [ 181.338518][ T5635] [ 181.341467][ T5635] xfrm_net_exit+0x2d/0x60 [ 181.345934][ T5635] ops_undo_list+0x27b/0x410 [ 181.350624][ T5635] cleanup_net+0x2f4/0x4f0 [ 181.355103][ T5635] process_scheduled_works+0x4ce/0x9d0 [ 181.360653][ T5635] worker_thread+0x582/0x770 [ 181.365284][ T5635] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 181.371163][ T5635] kthread+0x489/0x510 [ 181.375296][ T5635] ? finish_task_switch+0xad/0x2b0 [ 181.380426][ T5635] ? __pfx_worker_thread+0x10/0x10 [ 181.385578][ T5635] ? __pfx_kthread+0x10/0x10 [ 181.390182][ T5635] ret_from_fork+0x122/0x1b0 [ 181.394833][ T5635] ? __pfx_kthread+0x10/0x10 [ 181.399533][ T5635] ret_from_fork_asm+0x1a/0x30 [ 181.404444][ T5635] [ 181.407512][ T5635] ---[ end trace 0000000000000000 ]--- [ 181.416875][T11294] team0: Port device team_slave_0 added [ 181.423949][T11294] team0: Port device team_slave_1 added [ 181.442193][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.449358][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.475779][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.488732][T11179] veth1_macvtap: entered promiscuous mode [ 181.499756][T11179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.507833][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.514836][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.540913][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.556500][T11342] macvtap0: refused to change device tx_queue_len [ 181.565119][T11179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.587144][ T3342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.604079][T11294] hsr_slave_0: entered promiscuous mode [ 181.610289][T11294] hsr_slave_1: entered promiscuous mode [ 181.733576][T11294] debugfs: 'hsr0' already exists in 'hsr' [ 181.739387][T11294] Cannot create hsr debugfs directory [ 181.796168][ T3342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.831112][T11345] lo speed is unknown, defaulting to 1000 [ 181.996691][ T3342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.046591][ T3342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.105817][T11363] lo speed is unknown, defaulting to 1000 [ 182.111891][T11363] lo speed is unknown, defaulting to 1000 [ 182.131393][T11363] lo speed is unknown, defaulting to 1000 [ 182.137738][T11363] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.146807][T11363] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 182.163419][T11363] lo speed is unknown, defaulting to 1000 [ 182.178997][T11363] lo speed is unknown, defaulting to 1000 [ 182.190593][T11294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.200618][T11363] lo speed is unknown, defaulting to 1000 [ 182.206775][T11294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.216952][T11363] lo speed is unknown, defaulting to 1000 [ 182.223224][T11294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.233184][T11363] lo speed is unknown, defaulting to 1000 [ 182.239274][T11294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.249787][T11363] lo speed is unknown, defaulting to 1000 [ 182.265688][T11363] lo speed is unknown, defaulting to 1000 [ 182.299810][T11384] loop3: detected capacity change from 0 to 1024 [ 182.307422][T11384] EXT4-fs: Ignoring removed orlov option [ 182.325128][T11384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.338395][T11384] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.379268][ T5635] bridge_slave_1: left allmulticast mode [ 182.385158][ T5635] bridge_slave_1: left promiscuous mode [ 182.390982][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.399909][ T5635] bridge_slave_0: left allmulticast mode [ 182.405630][ T5635] bridge_slave_0: left promiscuous mode [ 182.411327][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.447053][ T5635] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 182.455455][ T3406] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 182.785842][ T5635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.812247][ T5635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.848242][ T5635] bond0 (unregistering): Released all slaves [ 182.883831][ T5635] bond1 (unregistering): (slave bond2): Releasing backup interface [ 182.907602][ T5635] bond1 (unregistering): Released all slaves [ 182.917153][ T5635] bond2 (unregistering): Released all slaves [ 182.925958][ T5635] bond3 (unregistering): Released all slaves [ 182.945358][T11399] lo speed is unknown, defaulting to 1000 [ 182.985566][T11399] lo speed is unknown, defaulting to 1000 [ 183.048850][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.074629][T11411] loop3: detected capacity change from 0 to 1024 [ 183.089033][T11294] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.093379][T11411] EXT4-fs (loop3): filesystem is read-only [ 183.103368][T11411] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 183.113459][ T5635] hsr_slave_0: left promiscuous mode [ 183.113824][T11411] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.130545][T11417] __nla_validate_parse: 9 callbacks suppressed [ 183.130565][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2883'. [ 183.146049][T11411] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.2882: inode #1: comm syz.3.2882: iget: illegal inode # [ 183.159489][T11411] EXT4-fs (loop3): no journal found [ 183.164758][T11411] EXT4-fs (loop3): can't get journal size [ 183.167464][ T5635] hsr_slave_1: left promiscuous mode [ 183.222177][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.232023][T11411] EXT4-fs (loop3): failed to initialize system zone (-22) [ 183.240778][T11411] EXT4-fs (loop3): mount failed [ 183.241211][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.306389][ T5635] team0 (unregistering): Port device team_slave_1 removed [ 183.323231][ T5635] team0 (unregistering): Port device team_slave_0 removed [ 183.393738][T11417] vlan2: entered promiscuous mode [ 183.398961][T11417] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 183.411693][ T4428] lo speed is unknown, defaulting to 1000 [ 183.417497][ T4428] syz2: Port: 1 Link DOWN [ 183.425572][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.432775][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.463279][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.470512][ T5628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.615516][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.823076][T11294] veth0_vlan: entered promiscuous mode [ 183.832206][T11294] veth1_vlan: entered promiscuous mode [ 183.849901][T11294] veth0_macvtap: entered promiscuous mode [ 183.861226][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2894'. [ 183.870335][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 183.885594][T11294] veth1_macvtap: entered promiscuous mode [ 183.891487][T11459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2894'. [ 183.900579][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 183.916219][T11461] bridge6: entered promiscuous mode [ 183.921516][T11461] bridge6: entered allmulticast mode [ 183.929468][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.941138][T11459] bridge7: entered promiscuous mode [ 183.946574][T11459] bridge7: entered allmulticast mode [ 183.956490][T11465] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2895'. [ 183.967225][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.998777][ T148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.035622][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.058173][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.083895][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 184.083923][ T29] audit: type=1326 audit(1760370851.756:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.121626][ T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.130550][ T29] audit: type=1326 audit(1760370851.786:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.154113][ T29] audit: type=1326 audit(1760370851.786:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.177667][ T29] audit: type=1326 audit(1760370851.786:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.201369][ T29] audit: type=1326 audit(1760370851.786:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.226068][ T29] audit: type=1326 audit(1760370851.786:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.251009][ T29] audit: type=1326 audit(1760370851.786:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.274852][ T29] audit: type=1326 audit(1760370851.786:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.298539][ T29] audit: type=1326 audit(1760370851.786:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.322672][ T29] audit: type=1326 audit(1760370851.786:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 184.348660][ T5628] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.373157][ T5628] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.402744][T11486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.407041][ T5628] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.431093][ T5628] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.445971][T11494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2906'. [ 184.589380][T11508] lo speed is unknown, defaulting to 1000 [ 184.817175][T11517] atomic_op ffff888119de4d28 conn xmit_atomic 0000000000000000 [ 184.963260][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.978194][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.355277][T11527] usb usb1: check_ctrlrecip: process 11527 (syz.1.2917) requesting ep 01 but needs 81 [ 185.365058][T11527] usb usb1: usbfs: process 11527 (syz.1.2917) did not claim interface 0 before use [ 185.443051][T11534] FAULT_INJECTION: forcing a failure. [ 185.443051][T11534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.456175][T11534] CPU: 1 UID: 0 PID: 11534 Comm: syz.5.2920 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.456226][T11534] Tainted: [W]=WARN [ 185.456236][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.456253][T11534] Call Trace: [ 185.456267][T11534] [ 185.456278][T11534] __dump_stack+0x1d/0x30 [ 185.456302][T11534] dump_stack_lvl+0xe8/0x140 [ 185.456327][T11534] dump_stack+0x15/0x1b [ 185.456350][T11534] should_fail_ex+0x265/0x280 [ 185.456442][T11534] should_fail+0xb/0x20 [ 185.456483][T11534] should_fail_usercopy+0x1a/0x20 [ 185.456511][T11534] _copy_from_user+0x1c/0xb0 [ 185.456610][T11534] __copy_msghdr+0x244/0x300 [ 185.456644][T11534] ___sys_sendmsg+0x109/0x1d0 [ 185.456744][T11534] __x64_sys_sendmsg+0xd4/0x160 [ 185.456790][T11534] x64_sys_call+0x191e/0x3000 [ 185.456815][T11534] do_syscall_64+0xd2/0x200 [ 185.456849][T11534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.456900][T11534] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.456931][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.457019][T11534] RIP: 0033:0x7f819b8ceec9 [ 185.457096][T11534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.457121][T11534] RSP: 002b:00007f819a32f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.457147][T11534] RAX: ffffffffffffffda RBX: 00007f819bb25fa0 RCX: 00007f819b8ceec9 [ 185.457163][T11534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 185.457186][T11534] RBP: 00007f819a32f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.457204][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.457221][T11534] R13: 00007f819bb26038 R14: 00007f819bb25fa0 R15: 00007fff07784418 [ 185.457246][T11534] [ 185.751567][T11541] loop3: detected capacity change from 0 to 512 [ 185.816065][T11541] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.932306][T11531] lo speed is unknown, defaulting to 1000 [ 185.999619][T11565] usb usb1: check_ctrlrecip: process 11565 (syz.1.2930) requesting ep 01 but needs 81 [ 186.009334][T11565] usb usb1: usbfs: process 11565 (syz.1.2930) did not claim interface 0 before use [ 186.108048][T11571] usb usb1: check_ctrlrecip: process 11571 (syz.3.2931) requesting ep 01 but needs 81 [ 186.117788][T11571] usb usb1: usbfs: process 11571 (syz.3.2931) did not claim interface 0 before use [ 186.136176][ T5635] bridge_slave_1: left allmulticast mode [ 186.141941][ T5635] bridge_slave_1: left promiscuous mode [ 186.147661][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.163285][ T5635] bridge_slave_0: left allmulticast mode [ 186.169102][ T5635] bridge_slave_0: left promiscuous mode [ 186.174851][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.215723][T11581] loop6: detected capacity change from 0 to 1024 [ 186.222603][ T3424] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 186.232090][T11581] EXT4-fs: Ignoring removed orlov option [ 186.235808][ T5635] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 186.257351][T11581] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2936: bg 0: block 272: padding at end of block bitmap is not set [ 186.280056][T11587] loop3: detected capacity change from 0 to 512 [ 186.288888][T11587] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.355807][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.364357][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.484512][ T5635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.494128][ T5635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.503211][ T5635] bond0 (unregistering): Released all slaves [ 186.512257][ T5635] bond1 (unregistering): (slave bond2): Releasing backup interface [ 186.520632][ T5635] bond1 (unregistering): Released all slaves [ 186.529230][ T5635] bond2 (unregistering): Released all slaves [ 186.538039][ T5635] bond3 (unregistering): (slave bond4): Releasing backup interface [ 186.546617][ T5635] bond3 (unregistering): Released all slaves [ 186.555467][ T5635] bond4 (unregistering): Released all slaves [ 186.564364][ T5635] bond5 (unregistering): (slave bond6): Releasing backup interface [ 186.572750][ T5635] bond5 (unregistering): Released all slaves [ 186.581113][ T5635] bond6 (unregistering): Released all slaves [ 186.589428][ T5635] bond7 (unregistering): (slave bond8): Releasing backup interface [ 186.598020][ T5635] bond7 (unregistering): Released all slaves [ 186.606782][ T5635] bond8 (unregistering): Released all slaves [ 186.617120][T11531] chnl_net:caif_netlink_parms(): no params data found [ 186.653578][T11597] loop3: detected capacity change from 0 to 512 [ 186.664232][T11597] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.675072][ T5635] hsr_slave_0: left promiscuous mode [ 186.680952][ T5635] hsr_slave_1: left promiscuous mode [ 186.686945][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.694503][ T5635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.732180][ T5635] team0 (unregistering): Port device team_slave_1 removed [ 186.742009][ T5635] team0 (unregistering): Port device team_slave_0 removed [ 186.806514][T11608] usb usb1: check_ctrlrecip: process 11608 (syz.5.2944) requesting ep 01 but needs 81 [ 186.816272][T11608] usb usb1: usbfs: process 11608 (syz.5.2944) did not claim interface 0 before use [ 186.836867][ T1101] lo speed is unknown, defaulting to 1000 [ 186.842749][ T1101] infiniband syz0: ib_query_port failed (-19) [ 186.884397][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2947'. [ 186.913301][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.920741][T11531] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.940347][T11531] bridge_slave_0: entered allmulticast mode [ 186.946936][T11531] bridge_slave_0: entered promiscuous mode [ 186.953966][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.961075][T11531] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.968319][T11531] bridge_slave_1: entered allmulticast mode [ 186.975479][T11531] bridge_slave_1: entered promiscuous mode [ 186.999579][T11531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.014057][T11531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.061966][T11531] team0: Port device team_slave_0 added [ 187.074114][T11531] team0: Port device team_slave_1 added [ 187.113963][T11531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.120943][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.146985][T11531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.166330][T11531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.166345][T11531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.166403][T11531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.192875][T11531] hsr_slave_0: entered promiscuous mode [ 187.193719][T11531] hsr_slave_1: entered promiscuous mode [ 187.194355][T11531] debugfs: 'hsr0' already exists in 'hsr' [ 187.194369][T11531] Cannot create hsr debugfs directory [ 187.319775][T11642] loop5: detected capacity change from 0 to 1024 [ 187.322447][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 187.384041][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 187.384555][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 187.384640][T11642] EXT4-fs (loop5): mount failed [ 188.065782][T11642] loop5: detected capacity change from 0 to 1024 [ 188.079259][T11651] usb usb1: check_ctrlrecip: process 11651 (syz.1.2957) requesting ep 01 but needs 81 [ 188.089803][T11651] usb usb1: usbfs: process 11651 (syz.1.2957) did not claim interface 0 before use [ 188.106190][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.140060][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 188.176025][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 188.202794][T11642] EXT4-fs (loop5): mount failed [ 188.255172][T11642] loop5: detected capacity change from 0 to 1024 [ 188.263963][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.303413][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 188.312161][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 188.349559][T11642] EXT4-fs (loop5): mount failed [ 188.374954][T11642] loop5: detected capacity change from 0 to 1024 [ 188.385242][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.417052][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 188.429675][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 188.457146][T11642] EXT4-fs (loop5): mount failed [ 188.509305][T11642] loop5: detected capacity change from 0 to 1024 [ 188.527069][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.546082][T11531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.555982][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 188.559917][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.582302][T11531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.590246][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.607194][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 188.619788][T11531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.632034][T11642] EXT4-fs (loop5): mount failed [ 188.644652][T11531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.674830][T11642] loop5: detected capacity change from 0 to 1024 [ 188.713701][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.741304][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 188.761507][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 188.778439][T11642] EXT4-fs (loop5): mount failed [ 188.823865][T11642] loop5: detected capacity change from 0 to 1024 [ 188.834783][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.866979][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 188.883183][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 188.891269][T11642] EXT4-fs (loop5): mount failed [ 188.918478][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.934991][T11642] loop5: detected capacity change from 0 to 1024 [ 188.948764][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 188.952010][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.976753][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.983858][ T5635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.992441][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.002632][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.011307][T11642] EXT4-fs (loop5): mount failed [ 189.030785][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.037905][ T5635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.067263][T11642] loop5: detected capacity change from 0 to 1024 [ 189.083632][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.102301][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.127797][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.135396][T11642] EXT4-fs (loop5): mount failed [ 189.152002][T11642] loop5: detected capacity change from 0 to 1024 [ 189.161423][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.189970][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.209895][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.241153][T11642] EXT4-fs (loop5): mount failed [ 189.286338][T11642] loop5: detected capacity change from 0 to 1024 [ 189.304532][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.322961][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.346131][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.355950][T11642] EXT4-fs (loop5): mount failed [ 189.400797][T11642] loop5: detected capacity change from 0 to 1024 [ 189.419005][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.451916][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.479935][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.497332][T11642] EXT4-fs (loop5): mount failed [ 189.499705][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.522859][T11642] loop5: detected capacity change from 0 to 1024 [ 189.531201][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.548361][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.559672][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.567032][T11642] EXT4-fs (loop5): mount failed [ 189.606737][T11642] loop5: detected capacity change from 0 to 1024 [ 189.618205][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.631584][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.641252][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.648555][T11642] EXT4-fs (loop5): mount failed [ 189.679076][T11642] loop5: detected capacity change from 0 to 1024 [ 189.701368][T11642] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 189.730581][T11642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 189.750317][T11642] EXT4-fs (loop5): failed to initialize system zone (-117) [ 189.758140][T11642] EXT4-fs (loop5): mount failed [ 189.846533][T11700] loop6: detected capacity change from 0 to 1024 [ 189.854410][T11700] EXT4-fs: inline encryption not supported [ 190.091912][T11531] veth0_vlan: entered promiscuous mode [ 190.159691][T11531] veth1_vlan: entered promiscuous mode [ 190.253715][T11531] veth0_macvtap: entered promiscuous mode [ 190.268640][T11531] veth1_macvtap: entered promiscuous mode [ 190.333072][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.380362][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.415873][T11708] usb usb1: check_ctrlrecip: process 11708 (syz.1.2968) requesting ep 01 but needs 81 [ 190.425519][T11708] usb usb1: usbfs: process 11708 (syz.1.2968) did not claim interface 0 before use [ 190.458365][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.487958][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.512196][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.570585][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.687512][T11713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2918'. [ 190.749085][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 190.749100][ T29] audit: type=1400 audit(1760370858.416:5793): avc: denied { read } for pid=11714 comm="syz.1.2970" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.828862][ T29] audit: type=1326 audit(1760370858.476:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.852725][ T29] audit: type=1326 audit(1760370858.476:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.876848][ T29] audit: type=1326 audit(1760370858.476:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.900661][ T29] audit: type=1326 audit(1760370858.476:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.924442][ T29] audit: type=1326 audit(1760370858.476:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.948119][ T29] audit: type=1326 audit(1760370858.476:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.971827][ T29] audit: type=1326 audit(1760370858.476:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 190.995709][ T29] audit: type=1326 audit(1760370858.476:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 191.019969][ T29] audit: type=1326 audit(1760370858.476:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11714 comm="syz.1.2970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7feb41f9eec9 code=0x7ffc0000 [ 191.558071][T11726] netlink: 'syz.6.2966': attribute type 13 has an invalid length. [ 191.630958][T11730] loop3: detected capacity change from 0 to 1764 [ 191.656671][T11730] bond1: option mode: invalid value (9) [ 191.671925][T11730] bond1 (unregistering): Released all slaves [ 191.709794][T11743] FAULT_INJECTION: forcing a failure. [ 191.709794][T11743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.723066][T11743] CPU: 0 UID: 0 PID: 11743 Comm: syz.5.2976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.723154][T11743] Tainted: [W]=WARN [ 191.723161][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.723209][T11743] Call Trace: [ 191.723217][T11743] [ 191.723225][T11743] __dump_stack+0x1d/0x30 [ 191.723253][T11743] dump_stack_lvl+0xe8/0x140 [ 191.723273][T11743] dump_stack+0x15/0x1b [ 191.723289][T11743] should_fail_ex+0x265/0x280 [ 191.723394][T11743] should_fail+0xb/0x20 [ 191.723494][T11743] should_fail_usercopy+0x1a/0x20 [ 191.723515][T11743] _copy_from_user+0x1c/0xb0 [ 191.723552][T11743] __sys_bpf+0x183/0x7c0 [ 191.723650][T11743] __x64_sys_bpf+0x41/0x50 [ 191.723688][T11743] x64_sys_call+0x2aee/0x3000 [ 191.723714][T11743] do_syscall_64+0xd2/0x200 [ 191.723815][T11743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.723844][T11743] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 191.723940][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.723963][T11743] RIP: 0033:0x7f819b8ceec9 [ 191.723979][T11743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.723999][T11743] RSP: 002b:00007f819a32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.724021][T11743] RAX: ffffffffffffffda RBX: 00007f819bb25fa0 RCX: 00007f819b8ceec9 [ 191.724037][T11743] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 191.724121][T11743] RBP: 00007f819a32f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.724134][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.724147][T11743] R13: 00007f819bb26038 R14: 00007f819bb25fa0 R15: 00007fff07784418 [ 191.724167][T11743] [ 192.038607][T11760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2981'. [ 192.100212][T11765] loop3: detected capacity change from 0 to 512 [ 192.111093][T11765] EXT4-fs mount: 11 callbacks suppressed [ 192.111114][T11765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.129578][T11763] macvtap0: refused to change device tx_queue_len [ 192.129764][T11765] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.168999][T11775] FAULT_INJECTION: forcing a failure. [ 192.168999][T11775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.181572][T11732] chnl_net:caif_netlink_parms(): no params data found [ 192.182259][T11775] CPU: 0 UID: 0 PID: 11775 Comm: syz.5.2985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.182340][T11775] Tainted: [W]=WARN [ 192.182348][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.182369][T11775] Call Trace: [ 192.182378][T11775] [ 192.182388][T11775] __dump_stack+0x1d/0x30 [ 192.182420][T11775] dump_stack_lvl+0xe8/0x140 [ 192.182460][T11775] dump_stack+0x15/0x1b [ 192.182485][T11775] should_fail_ex+0x265/0x280 [ 192.182541][T11775] should_fail+0xb/0x20 [ 192.182605][T11775] should_fail_usercopy+0x1a/0x20 [ 192.182635][T11775] _copy_from_user+0x1c/0xb0 [ 192.182673][T11775] ___sys_sendmsg+0xc1/0x1d0 [ 192.182734][T11775] __x64_sys_sendmsg+0xd4/0x160 [ 192.182824][T11775] x64_sys_call+0x191e/0x3000 [ 192.182855][T11775] do_syscall_64+0xd2/0x200 [ 192.182891][T11775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.182996][T11775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 192.183026][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.183064][T11775] RIP: 0033:0x7f819b8ceec9 [ 192.183085][T11775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.183112][T11775] RSP: 002b:00007f819a32f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.183140][T11775] RAX: ffffffffffffffda RBX: 00007f819bb25fa0 RCX: 00007f819b8ceec9 [ 192.183158][T11775] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 192.183176][T11775] RBP: 00007f819a32f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.183195][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.183289][T11775] R13: 00007f819bb26038 R14: 00007f819bb25fa0 R15: 00007fff07784418 [ 192.183317][T11775] [ 192.384056][T11179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.407202][T11778] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2986'. [ 192.451135][T11789] loop3: detected capacity change from 0 to 736 [ 192.461388][T11791] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2988'. [ 192.521951][T11791] 0ªX¹¦À: renamed from caif0 [ 192.532110][T11791] 0ªX¹¦À: entered allmulticast mode [ 192.537568][T11791] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 192.600544][T11801] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 192.612040][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.619285][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.651324][T11732] bridge_slave_0: entered allmulticast mode [ 192.658111][T11732] bridge_slave_0: entered promiscuous mode [ 192.727879][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.735136][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.742466][T11732] bridge_slave_1: entered allmulticast mode [ 192.748946][T11732] bridge_slave_1: entered promiscuous mode [ 192.772059][T11732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.792501][T11732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.824288][T11732] team0: Port device team_slave_0 added [ 192.824814][T11816] loop3: detected capacity change from 0 to 1024 [ 192.831338][T11732] team0: Port device team_slave_1 added [ 192.843666][T11816] EXT4-fs: Ignoring removed orlov option [ 192.854923][T11816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.868400][T11816] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2993: bg 0: block 272: padding at end of block bitmap is not set [ 192.885982][T11732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.893040][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.919101][T11732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.930786][T11732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.937880][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.964138][T11732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.988702][T11179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.004445][T11732] hsr_slave_0: entered promiscuous mode [ 193.011583][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.011688][T11732] hsr_slave_1: entered promiscuous mode [ 193.023369][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.034893][T11732] debugfs: 'hsr0' already exists in 'hsr' [ 193.040658][T11732] Cannot create hsr debugfs directory [ 193.123907][T11837] netlink: 'syz.3.3002': attribute type 13 has an invalid length. [ 193.194808][ T148] bridge_slave_1: left allmulticast mode [ 193.200516][ T148] bridge_slave_1: left promiscuous mode [ 193.206193][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.216992][ T148] bridge_slave_0: left allmulticast mode [ 193.222808][ T148] bridge_slave_0: left promiscuous mode [ 193.228610][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.239460][T11845] loop2: detected capacity change from 0 to 512 [ 193.251518][T11845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.269850][T11849] FAULT_INJECTION: forcing a failure. [ 193.269850][T11849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.283071][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.5.3006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.283113][T11849] Tainted: [W]=WARN [ 193.283122][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.283139][T11849] Call Trace: [ 193.283147][T11849] [ 193.283196][T11849] __dump_stack+0x1d/0x30 [ 193.283222][T11849] dump_stack_lvl+0xe8/0x140 [ 193.283310][T11849] dump_stack+0x15/0x1b [ 193.283332][T11849] should_fail_ex+0x265/0x280 [ 193.283378][T11849] should_fail+0xb/0x20 [ 193.283452][T11849] should_fail_usercopy+0x1a/0x20 [ 193.283479][T11849] _copy_to_user+0x20/0xa0 [ 193.283512][T11849] simple_read_from_buffer+0xb5/0x130 [ 193.283616][T11849] proc_fail_nth_read+0x10e/0x150 [ 193.283656][T11849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.283741][T11849] vfs_read+0x1a8/0x770 [ 193.283774][T11849] ? __rcu_read_unlock+0x4f/0x70 [ 193.283807][T11849] ? __fget_files+0x184/0x1c0 [ 193.283854][T11849] ksys_read+0xda/0x1a0 [ 193.283886][T11849] __x64_sys_read+0x40/0x50 [ 193.283915][T11849] x64_sys_call+0x27c0/0x3000 [ 193.283951][T11849] do_syscall_64+0xd2/0x200 [ 193.284011][T11849] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.284045][T11849] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 193.284131][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.284160][T11849] RIP: 0033:0x7f819b8cd8dc [ 193.284194][T11849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.284220][T11849] RSP: 002b:00007f819a32f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.284299][T11849] RAX: ffffffffffffffda RBX: 00007f819bb25fa0 RCX: 00007f819b8cd8dc [ 193.284316][T11849] RDX: 000000000000000f RSI: 00007f819a32f0a0 RDI: 0000000000000007 [ 193.284334][T11849] RBP: 00007f819a32f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.284348][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.284361][T11849] R13: 00007f819bb26038 R14: 00007f819bb25fa0 R15: 00007fff07784418 [ 193.284387][T11849] [ 193.292749][T11845] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.304108][ T6676] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 193.517118][ T148] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 193.558148][T11531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.613465][T11868] loop2: detected capacity change from 0 to 512 [ 193.646049][T11868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.665401][T11880] FAULT_INJECTION: forcing a failure. [ 193.665401][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.678567][T11880] CPU: 1 UID: 0 PID: 11880 Comm: syz.6.3011 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.678625][T11880] Tainted: [W]=WARN [ 193.678634][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.678649][T11880] Call Trace: [ 193.678657][T11880] [ 193.678665][T11880] __dump_stack+0x1d/0x30 [ 193.678721][T11880] dump_stack_lvl+0xe8/0x140 [ 193.678744][T11880] dump_stack+0x15/0x1b [ 193.678760][T11880] should_fail_ex+0x265/0x280 [ 193.678887][T11880] should_fail+0xb/0x20 [ 193.678991][T11880] should_fail_usercopy+0x1a/0x20 [ 193.679019][T11880] _copy_from_user+0x1c/0xb0 [ 193.679132][T11880] ___sys_recvmsg+0xaa/0x370 [ 193.679172][T11880] ? _parse_integer+0x27/0x40 [ 193.679293][T11880] do_recvmmsg+0x1ef/0x540 [ 193.679412][T11880] ? fput+0x8f/0xc0 [ 193.679452][T11880] __x64_sys_recvmmsg+0xe5/0x170 [ 193.679492][T11880] x64_sys_call+0x27aa/0x3000 [ 193.679568][T11880] do_syscall_64+0xd2/0x200 [ 193.679593][T11880] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.679630][T11880] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 193.679662][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.679704][T11880] RIP: 0033:0x7f7fb181eec9 [ 193.679799][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.679823][T11880] RSP: 002b:00007f7fb0287038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 193.679849][T11880] RAX: ffffffffffffffda RBX: 00007f7fb1a75fa0 RCX: 00007f7fb181eec9 [ 193.679874][T11880] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 193.679890][T11880] RBP: 00007f7fb0287090 R08: 0000000000000000 R09: 0000000000000000 [ 193.679907][T11880] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 193.679998][T11880] R13: 00007f7fb1a76038 R14: 00007f7fb1a75fa0 R15: 00007ffc7abaaae8 [ 193.680023][T11880] [ 193.702880][T11868] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.944607][T11894] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3016'. [ 193.995918][T11892] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.3009: corrupted inode contents [ 194.008281][T11892] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.3009: mark_inode_dirty error [ 194.023659][T11892] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.3009: corrupted inode contents [ 194.115705][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.124991][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.134261][ T148] bond0 (unregistering): Released all slaves [ 194.144556][ T148] bond1 (unregistering): (slave bond2): Releasing backup interface [ 194.153002][ T148] bond1 (unregistering): Released all slaves [ 194.161450][ T148] bond2 (unregistering): Released all slaves [ 194.200999][T11868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.244472][T11531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.254675][ T148] hsr_slave_0: left promiscuous mode [ 194.260498][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.268944][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.327731][ T148] team0 (unregistering): Port device team_slave_1 removed [ 194.338226][ T148] team0 (unregistering): Port device team_slave_0 removed [ 194.369605][T11917] loop5: detected capacity change from 0 to 512 [ 194.377663][T11917] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.394338][T11917] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 194.411331][T11917] EXT4-fs (loop5): 1 truncate cleaned up [ 194.417942][T11917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.432252][T11917] FAULT_INJECTION: forcing a failure. [ 194.432252][T11917] name failslab, interval 1, probability 0, space 0, times 0 [ 194.445074][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.5.3024 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.445119][T11917] Tainted: [W]=WARN [ 194.445129][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.445147][T11917] Call Trace: [ 194.445155][T11917] [ 194.445165][T11917] __dump_stack+0x1d/0x30 [ 194.445236][T11917] dump_stack_lvl+0xe8/0x140 [ 194.445261][T11917] dump_stack+0x15/0x1b [ 194.445283][T11917] should_fail_ex+0x265/0x280 [ 194.445329][T11917] should_failslab+0x8c/0xb0 [ 194.445489][T11917] kmem_cache_alloc_noprof+0x50/0x480 [ 194.445525][T11917] ? security_inode_alloc+0x37/0x100 [ 194.445555][T11917] security_inode_alloc+0x37/0x100 [ 194.445599][T11917] inode_init_always_gfp+0x4b7/0x500 [ 194.445634][T11917] alloc_inode+0x58/0x170 [ 194.445663][T11917] create_pipe_files+0x41/0x440 [ 194.445732][T11917] __do_pipe_flags+0x44/0x150 [ 194.445766][T11917] do_pipe2+0x61/0x130 [ 194.445799][T11917] ? ksys_write+0x192/0x1a0 [ 194.445846][T11917] __x64_sys_pipe2+0x30/0x40 [ 194.445939][T11917] x64_sys_call+0x2628/0x3000 [ 194.445970][T11917] do_syscall_64+0xd2/0x200 [ 194.446003][T11917] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.446040][T11917] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.446081][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.446182][T11917] RIP: 0033:0x7f819b8ceec9 [ 194.446203][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.446228][T11917] RSP: 002b:00007f819a32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 194.446255][T11917] RAX: ffffffffffffffda RBX: 00007f819bb25fa0 RCX: 00007f819b8ceec9 [ 194.446273][T11917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000540 [ 194.446290][T11917] RBP: 00007f819a32f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.446307][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.446323][T11917] R13: 00007f819bb26038 R14: 00007f819bb25fa0 R15: 00007fff07784418 [ 194.446403][T11917] [ 194.664566][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.701881][T11932] loop6: detected capacity change from 0 to 512 [ 194.708785][T11932] EXT4-fs: Ignoring removed bh option [ 194.714608][T11932] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.725085][T11944] FAULT_INJECTION: forcing a failure. [ 194.725085][T11944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.739136][T11944] CPU: 1 UID: 0 PID: 11944 Comm: syz.5.3033 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.739177][T11944] Tainted: [W]=WARN [ 194.739186][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.739203][T11944] Call Trace: [ 194.739211][T11944] [ 194.739219][T11944] __dump_stack+0x1d/0x30 [ 194.739242][T11944] dump_stack_lvl+0xe8/0x140 [ 194.739298][T11932] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 194.739328][T11944] dump_stack+0x15/0x1b [ 194.739348][T11944] should_fail_ex+0x265/0x280 [ 194.739401][T11944] should_fail+0xb/0x20 [ 194.739516][T11944] should_fail_usercopy+0x1a/0x20 [ 194.739541][T11944] _copy_from_user+0x1c/0xb0 [ 194.739580][T11944] ___sys_sendmsg+0xc1/0x1d0 [ 194.739687][T11944] __x64_sys_sendmsg+0xd4/0x160 [ 194.739754][T11944] x64_sys_call+0x191e/0x3000 [ 194.739866][T11944] do_syscall_64+0xd2/0x200 [ 194.739901][T11944] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.739938][T11944] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.739971][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.740035][T11944] RIP: 0033:0x7f819b8ceec9 [ 194.740119][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.740222][T11944] RSP: 002b:00007f819a32f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.740250][T11944] RAX: ffffffffffffffda RBX: 00007f819bb25fa0 RCX: 00007f819b8ceec9 [ 194.740268][T11944] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000006 [ 194.740287][T11944] RBP: 00007f819a32f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.740418][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.740437][T11944] R13: 00007f819bb26038 R14: 00007f819bb25fa0 R15: 00007fff07784418 [ 194.740464][T11944] [ 194.808261][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3036'. [ 194.832057][T11932] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 194.866995][T11955] FAULT_INJECTION: forcing a failure. [ 194.866995][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 194.891597][T11932] EXT4-fs (loop6): orphan cleanup on readonly fs [ 194.899098][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.3.3038 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.899149][T11955] Tainted: [W]=WARN [ 194.899224][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.899243][T11955] Call Trace: [ 194.899250][T11955] [ 194.899290][T11955] __dump_stack+0x1d/0x30 [ 194.899321][T11955] dump_stack_lvl+0xe8/0x140 [ 194.899349][T11955] dump_stack+0x15/0x1b [ 194.899372][T11955] should_fail_ex+0x265/0x280 [ 194.899424][T11955] should_failslab+0x8c/0xb0 [ 194.899537][T11955] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 194.899579][T11955] ? __alloc_skb+0x101/0x320 [ 194.899616][T11955] __alloc_skb+0x101/0x320 [ 194.899651][T11955] netlink_alloc_large_skb+0xbf/0xf0 [ 194.899730][T11955] netlink_sendmsg+0x3cf/0x6b0 [ 194.899814][T11955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.899858][T11955] __sock_sendmsg+0x145/0x180 [ 194.899960][T11955] ____sys_sendmsg+0x31e/0x4e0 [ 194.900030][T11955] ___sys_sendmsg+0x17b/0x1d0 [ 194.900091][T11955] __x64_sys_sendmsg+0xd4/0x160 [ 194.900139][T11955] x64_sys_call+0x191e/0x3000 [ 194.900252][T11955] do_syscall_64+0xd2/0x200 [ 194.900287][T11955] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.900328][T11955] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.900360][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.900455][T11955] RIP: 0033:0x7f20ec60eec9 [ 194.900475][T11955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.900494][T11955] RSP: 002b:00007f20eb06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.900533][T11955] RAX: ffffffffffffffda RBX: 00007f20ec865fa0 RCX: 00007f20ec60eec9 [ 194.900554][T11955] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.900573][T11955] RBP: 00007f20eb06f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.900634][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.900652][T11955] R13: 00007f20ec866038 R14: 00007f20ec865fa0 R15: 00007fff7c766e38 [ 194.900679][T11955] [ 195.170442][T11932] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3030: Failed to acquire dquot type 1 [ 195.182222][T11948] bridge_slave_1: left allmulticast mode [ 195.188058][T11948] bridge_slave_1: left promiscuous mode [ 195.194009][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.202218][T11932] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3030: Invalid block bitmap block 0 in block_group 0 [ 195.216912][T11932] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3030: Invalid block bitmap block 0 in block_group 0 [ 195.217212][T11948] bridge_slave_0: left allmulticast mode [ 195.230762][T11932] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3030: Invalid block bitmap block 0 in block_group 0 [ 195.236118][T11948] bridge_slave_0: left promiscuous mode [ 195.236304][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.254361][T11932] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3030: Failed to acquire dquot type 1 [ 195.274413][T11932] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3030: Failed to acquire dquot type 1 [ 195.286186][T11932] EXT4-fs (loop6): 1 orphan inode deleted [ 195.292898][T11932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.310674][T11932] syz.6.3030 (11932) used greatest stack depth: 8992 bytes left [ 195.330143][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.360132][T11969] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 195.368202][T11969] vhci_hcd: invalid port number 96 [ 195.373396][T11969] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 195.400516][T11972] loop6: detected capacity change from 0 to 512 [ 195.412073][T11972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.424999][T11972] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.523688][T11732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.539411][T11732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.549250][T11732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.559807][T11732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.612249][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.677089][T11732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.694143][T11732] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.706771][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.709330][T12013] loop6: detected capacity change from 0 to 736 [ 195.713901][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.740455][T11732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.750922][T11732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.771517][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.778764][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.791707][T12020] 9pnet_fd: Insufficient options for proto=fd [ 195.793768][T12019] loop5: detected capacity change from 0 to 512 [ 195.798774][T12020] netlink: 'syz.6.3061': attribute type 1 has an invalid length. [ 195.811943][T12020] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3061'. [ 195.829846][T12019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.843387][T12019] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.863771][T12020] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.930861][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 195.930880][ T29] audit: type=1326 audit(1760370863.596:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 195.931994][T11732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.945633][ T29] audit: type=1326 audit(1760370863.616:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 195.991110][ T29] audit: type=1326 audit(1760370863.616:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 196.014728][ T29] audit: type=1326 audit(1760370863.616:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 196.038338][ T29] audit: type=1326 audit(1760370863.616:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 196.061952][ T29] audit: type=1326 audit(1760370863.616:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 196.085492][ T29] audit: type=1326 audit(1760370863.616:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 196.109072][ T29] audit: type=1326 audit(1760370863.616:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f819b8ceec9 code=0x7ffc0000 [ 196.132613][ T29] audit: type=1326 audit(1760370863.616:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f819b8cef03 code=0x7ffc0000 [ 196.159257][ T29] audit: type=1326 audit(1760370863.766:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f819b8cd97f code=0x7ffc0000 [ 196.185458][T12020] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.248619][T11732] veth0_vlan: entered promiscuous mode [ 196.257616][T11732] veth1_vlan: entered promiscuous mode [ 196.267180][T12020] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.294031][T11732] veth0_macvtap: entered promiscuous mode [ 196.308506][T11732] veth1_macvtap: entered promiscuous mode [ 196.317981][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.407363][T12020] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.437883][T11732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.451657][T11732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.467312][ T5619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.477938][ T5619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.491101][ T5619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.500034][T12046] loop5: detected capacity change from 0 to 128 [ 196.516427][ T5619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.544701][ T3342] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.560493][ T3342] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.573062][ T3342] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.591515][ T3342] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.715035][T12060] loop3: detected capacity change from 0 to 736 [ 197.048676][T12068] loop6: detected capacity change from 0 to 512 [ 197.124357][T12068] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.181757][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3075'. [ 197.193268][T12070] netlink: 'syz.3.3074': attribute type 21 has an invalid length. [ 197.201226][T12070] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3074'. [ 197.221972][T12068] EXT4-fs (loop6): 1 truncate cleaned up [ 197.228249][T12068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.240892][T12070] netlink: 'syz.3.3074': attribute type 5 has an invalid length. [ 197.248842][T12070] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3074'. [ 197.298860][T12068] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 197.397565][T12057] loop5: detected capacity change from 0 to 164 [ 197.404811][T12089] loop2: detected capacity change from 0 to 128 [ 197.414594][T12089] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.442865][T12089] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.511269][T12057] rock: directory entry would overflow storage [ 197.515474][T12094] loop3: detected capacity change from 0 to 128 [ 197.517530][T12057] rock: sig=0x4f50, size=4, remaining=3 [ 197.525904][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.529445][T12057] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 197.549628][T12089] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3078'. [ 197.550103][T12094] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.577825][T12094] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.636195][T12103] 9pnet_fd: Insufficient options for proto=fd [ 197.651987][T12097] netlink: 'syz.1.3082': attribute type 1 has an invalid length. [ 197.659832][T12097] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3082'. [ 197.674629][T11531] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.690353][T12094] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3080'. [ 197.708719][T12097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.723848][T12110] loop2: detected capacity change from 0 to 512 [ 197.730684][T12110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.763464][T12110] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3084: bad orphan inode 16 [ 197.773984][T12110] ext4_test_bit(bit=15, block=4) = 0 [ 197.779320][T12110] EXT4-fs (loop2): 1 orphan inode deleted [ 197.795176][T12110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.825209][T12110] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.3084: reserved inode found cleared - inode=9 [ 197.897350][T12115] macvtap0: refused to change device tx_queue_len [ 197.960436][T11531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.052005][T12121] loop2: detected capacity change from 0 to 512 [ 198.065613][T12121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.098640][T12121] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.126657][T12121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.190072][T11179] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.207051][T12134] FAULT_INJECTION: forcing a failure. [ 198.207051][T12134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.220352][T12134] CPU: 0 UID: 0 PID: 12134 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.220389][T12134] Tainted: [W]=WARN [ 198.220398][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.220424][T12134] Call Trace: [ 198.220433][T12134] [ 198.220443][T12134] __dump_stack+0x1d/0x30 [ 198.220468][T12134] dump_stack_lvl+0xe8/0x140 [ 198.220487][T12134] dump_stack+0x15/0x1b [ 198.220502][T12134] should_fail_ex+0x265/0x280 [ 198.220563][T12134] should_fail_alloc_page+0xf2/0x100 [ 198.220590][T12134] __alloc_frozen_pages_noprof+0xff/0x360 [ 198.220675][T12134] alloc_pages_mpol+0xb3/0x260 [ 198.220693][T12134] alloc_pages_noprof+0x90/0x130 [ 198.220711][T12134] get_zeroed_page_noprof+0x1a/0x40 [ 198.220820][T12134] simple_transaction_get+0x4c/0x130 [ 198.220842][T12134] selinux_transaction_write+0x9d/0x110 [ 198.220874][T12134] ? __pfx_selinux_transaction_write+0x10/0x10 [ 198.220990][T12134] vfs_write+0x269/0x960 [ 198.221011][T12134] ? __rcu_read_unlock+0x4f/0x70 [ 198.221033][T12134] ? __fget_files+0x184/0x1c0 [ 198.221059][T12134] ksys_write+0xda/0x1a0 [ 198.221082][T12134] __x64_sys_write+0x40/0x50 [ 198.221130][T12134] x64_sys_call+0x2802/0x3000 [ 198.221150][T12134] do_syscall_64+0xd2/0x200 [ 198.221222][T12134] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.221270][T12134] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 198.221291][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.221311][T12134] RIP: 0033:0x7f20ec60eec9 [ 198.221325][T12134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.221343][T12134] RSP: 002b:00007f20eb06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.221376][T12134] RAX: ffffffffffffffda RBX: 00007f20ec865fa0 RCX: 00007f20ec60eec9 [ 198.221394][T12134] RDX: 000000000000005c RSI: 0000200000000300 RDI: 0000000000000005 [ 198.221411][T12134] RBP: 00007f20eb06f090 R08: 0000000000000000 R09: 0000000000000000 [ 198.221423][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.221435][T12134] R13: 00007f20ec866038 R14: 00007f20ec865fa0 R15: 00007fff7c766e38 [ 198.221505][T12134] [ 198.467724][T12135] loop6: detected capacity change from 0 to 512 [ 198.472883][T12121] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.3088: corrupted inode contents [ 198.486076][T12135] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 198.501405][T12121] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.3088: mark_inode_dirty error [ 198.514488][T12135] EXT4-fs (loop6): 1 truncate cleaned up [ 198.520653][T12121] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.3088: corrupted inode contents [ 198.533224][T12135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.571625][T12141] loop3: detected capacity change from 0 to 736 [ 198.579150][T11531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.616195][T12149] FAULT_INJECTION: forcing a failure. [ 198.616195][T12149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.629511][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.2.3096 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.629552][T12149] Tainted: [W]=WARN [ 198.629593][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.629611][T12149] Call Trace: [ 198.629620][T12149] [ 198.629631][T12149] __dump_stack+0x1d/0x30 [ 198.629659][T12149] dump_stack_lvl+0xe8/0x140 [ 198.629719][T12149] dump_stack+0x15/0x1b [ 198.629736][T12149] should_fail_ex+0x265/0x280 [ 198.629776][T12149] should_fail+0xb/0x20 [ 198.629879][T12149] should_fail_usercopy+0x1a/0x20 [ 198.629907][T12149] _copy_from_user+0x1c/0xb0 [ 198.629941][T12149] __copy_msghdr+0x244/0x300 [ 198.629991][T12149] ___sys_sendmsg+0x109/0x1d0 [ 198.630047][T12149] __x64_sys_sendmsg+0xd4/0x160 [ 198.630165][T12149] x64_sys_call+0x191e/0x3000 [ 198.630193][T12149] do_syscall_64+0xd2/0x200 [ 198.630225][T12149] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.630253][T12149] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 198.630320][T12149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.630350][T12149] RIP: 0033:0x7fa8efe7eec9 [ 198.630369][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.630389][T12149] RSP: 002b:00007fa8ee8df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.630409][T12149] RAX: ffffffffffffffda RBX: 00007fa8f00d5fa0 RCX: 00007fa8efe7eec9 [ 198.630492][T12149] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 198.630510][T12149] RBP: 00007fa8ee8df090 R08: 0000000000000000 R09: 0000000000000000 [ 198.630524][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.630536][T12149] R13: 00007fa8f00d6038 R14: 00007fa8f00d5fa0 R15: 00007fff70658c88 [ 198.630577][T12149] [ 198.847180][T12151] netlink: 'syz.3.3098': attribute type 21 has an invalid length. [ 198.855232][T12151] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3098'. [ 198.864599][T12151] netlink: 'syz.3.3098': attribute type 5 has an invalid length. [ 198.872441][T12151] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3098'. [ 198.928937][T12159] netlink: 'syz.2.3102': attribute type 21 has an invalid length. [ 198.937005][T12161] loop3: detected capacity change from 0 to 1024 [ 198.937035][T12159] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3102'. [ 198.938150][T12159] netlink: 'syz.2.3102': attribute type 5 has an invalid length. [ 198.954353][T12161] EXT4-fs: Ignoring removed orlov option [ 198.975386][T12161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.991183][T12161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3103: bg 0: block 272: padding at end of block bitmap is not set [ 199.030405][T11179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.041914][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.081686][T12173] FAULT_INJECTION: forcing a failure. [ 199.081686][T12173] name failslab, interval 1, probability 0, space 0, times 0 [ 199.094773][T12173] CPU: 1 UID: 0 PID: 12173 Comm: syz.2.3110 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.094815][T12173] Tainted: [W]=WARN [ 199.094824][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.094850][T12173] Call Trace: [ 199.094882][T12173] [ 199.094891][T12173] __dump_stack+0x1d/0x30 [ 199.094914][T12173] dump_stack_lvl+0xe8/0x140 [ 199.094934][T12173] dump_stack+0x15/0x1b [ 199.095014][T12173] should_fail_ex+0x265/0x280 [ 199.095051][T12173] should_failslab+0x8c/0xb0 [ 199.095148][T12173] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 199.095179][T12173] ? __alloc_skb+0x101/0x320 [ 199.095241][T12173] __alloc_skb+0x101/0x320 [ 199.095267][T12173] netlink_alloc_large_skb+0xbf/0xf0 [ 199.095376][T12173] netlink_sendmsg+0x3cf/0x6b0 [ 199.095446][T12173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.095478][T12173] __sock_sendmsg+0x145/0x180 [ 199.095500][T12173] ____sys_sendmsg+0x31e/0x4e0 [ 199.095534][T12173] ___sys_sendmsg+0x17b/0x1d0 [ 199.095624][T12173] __x64_sys_sendmsg+0xd4/0x160 [ 199.095662][T12173] x64_sys_call+0x191e/0x3000 [ 199.095759][T12173] do_syscall_64+0xd2/0x200 [ 199.095785][T12173] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.095839][T12173] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.095863][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.095886][T12173] RIP: 0033:0x7fa8efe7eec9 [ 199.095909][T12173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.095998][T12173] RSP: 002b:00007fa8ee8df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.096018][T12173] RAX: ffffffffffffffda RBX: 00007fa8f00d5fa0 RCX: 00007fa8efe7eec9 [ 199.096034][T12173] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 199.096047][T12173] RBP: 00007fa8ee8df090 R08: 0000000000000000 R09: 0000000000000000 [ 199.096061][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.096074][T12173] R13: 00007fa8f00d6038 R14: 00007fa8f00d5fa0 R15: 00007fff70658c88 [ 199.096142][T12173] [ 199.371320][T12097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.430134][T12195] loop3: detected capacity change from 0 to 128 [ 199.488620][T12201] loop6: detected capacity change from 0 to 1024 [ 199.505814][T12201] EXT4-fs: Ignoring removed orlov option [ 199.519348][T12195] syz.3.3115: attempt to access beyond end of device [ 199.519348][T12195] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 199.544236][T12201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.558157][T12201] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3118: bg 0: block 272: padding at end of block bitmap is not set [ 199.589947][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.674923][T12213] FAULT_INJECTION: forcing a failure. [ 199.674923][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 199.687794][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz.3.3121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.687920][T12213] Tainted: [W]=WARN [ 199.687930][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.687949][T12213] Call Trace: [ 199.687958][T12213] [ 199.687968][T12213] __dump_stack+0x1d/0x30 [ 199.687997][T12213] dump_stack_lvl+0xe8/0x140 [ 199.688023][T12213] dump_stack+0x15/0x1b [ 199.688108][T12213] should_fail_ex+0x265/0x280 [ 199.688150][T12213] should_failslab+0x8c/0xb0 [ 199.688214][T12213] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 199.688354][T12213] ? __get_vm_area_node+0x106/0x1d0 [ 199.688468][T12213] __get_vm_area_node+0x106/0x1d0 [ 199.688510][T12213] __vmalloc_node_range_noprof+0x28c/0xed0 [ 199.688589][T12213] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.688633][T12213] ? __rcu_read_unlock+0x4f/0x70 [ 199.688671][T12213] ? cred_has_capability+0x210/0x280 [ 199.688745][T12213] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.688802][T12213] __vmalloc_noprof+0x83/0xc0 [ 199.688840][T12213] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.688947][T12213] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.688981][T12213] ? bpf_prog_alloc+0x2a/0x150 [ 199.689092][T12213] bpf_prog_alloc+0x3c/0x150 [ 199.689132][T12213] bpf_prog_load+0x506/0x1100 [ 199.689169][T12213] ? security_bpf+0x2b/0x90 [ 199.689226][T12213] __sys_bpf+0x469/0x7c0 [ 199.689278][T12213] __x64_sys_bpf+0x41/0x50 [ 199.689318][T12213] x64_sys_call+0x2aee/0x3000 [ 199.689385][T12213] do_syscall_64+0xd2/0x200 [ 199.689416][T12213] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.689472][T12213] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.689510][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.689538][T12213] RIP: 0033:0x7f20ec60eec9 [ 199.689557][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.689629][T12213] RSP: 002b:00007f20eb06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.689654][T12213] RAX: ffffffffffffffda RBX: 00007f20ec865fa0 RCX: 00007f20ec60eec9 [ 199.689671][T12213] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 199.689687][T12213] RBP: 00007f20eb06f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.689702][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.689717][T12213] R13: 00007f20ec866038 R14: 00007f20ec865fa0 R15: 00007fff7c766e38 [ 199.689741][T12213] [ 199.689825][T12213] syz.3.3121: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 199.692487][T12215] loop6: detected capacity change from 0 to 512 [ 199.701291][T12213] ,cpuset=/,mems_allowed=0 [ 199.701334][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz.3.3121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.701373][T12213] Tainted: [W]=WARN [ 199.701383][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.701423][T12213] Call Trace: [ 199.701435][T12213] [ 199.701447][T12213] __dump_stack+0x1d/0x30 [ 199.701479][T12213] dump_stack_lvl+0xe8/0x140 [ 199.701516][T12213] dump_stack+0x15/0x1b [ 199.701608][T12213] warn_alloc+0x12b/0x1a0 [ 199.701660][T12213] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 199.701709][T12213] ? __rcu_read_unlock+0x4f/0x70 [ 199.701767][T12213] ? cred_has_capability+0x210/0x280 [ 199.701812][T12213] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.701907][T12213] __vmalloc_noprof+0x83/0xc0 [ 199.701948][T12213] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.701996][T12213] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 199.702040][T12213] ? bpf_prog_alloc+0x2a/0x150 [ 199.702098][T12213] bpf_prog_alloc+0x3c/0x150 [ 199.702154][T12213] bpf_prog_load+0x506/0x1100 [ 199.702194][T12213] ? security_bpf+0x2b/0x90 [ 199.702231][T12213] __sys_bpf+0x469/0x7c0 [ 199.702344][T12213] __x64_sys_bpf+0x41/0x50 [ 199.702425][T12213] x64_sys_call+0x2aee/0x3000 [ 199.702457][T12213] do_syscall_64+0xd2/0x200 [ 199.702502][T12213] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.702534][T12213] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.702628][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.702660][T12213] RIP: 0033:0x7f20ec60eec9 [ 199.702683][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.702710][T12213] RSP: 002b:00007f20eb06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.702736][T12213] RAX: ffffffffffffffda RBX: 00007f20ec865fa0 RCX: 00007f20ec60eec9 [ 199.702755][T12213] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 199.702840][T12213] RBP: 00007f20eb06f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.702859][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.702927][T12213] R13: 00007f20ec866038 R14: 00007f20ec865fa0 R15: 00007fff7c766e38 [ 199.702957][T12213] [ 199.702993][T12213] Mem-Info: [ 199.785054][T12215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.788133][T12213] active_anon:11889 inactive_anon:1 isolated_anon:0 [ 199.788133][T12213] active_file:23514 inactive_file:2690 isolated_file:0 [ 199.788133][T12213] unevictable:0 dirty:615 writeback:0 [ 199.788133][T12213] slab_reclaimable:3436 slab_unreclaimable:15320 [ 199.788133][T12213] mapped:37215 shmem:7945 pagetables:1443 [ 199.788133][T12213] sec_pagetables:0 bounce:0 [ 199.788133][T12213] kernel_misc_reclaimable:0 [ 199.788133][T12213] free:1780407 free_pcp:72828 free_cma:0 [ 199.793017][T12215] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.798341][T12213] Node 0 active_anon:47556kB inactive_anon:4kB active_file:94056kB inactive_file:10760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148860kB dirty:2460kB writeback:0kB shmem:31780kB kernel_stack:3520kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.970066][T12213] Node 0 [ 200.041807][T12219] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.3123: corrupted inode contents [ 200.045441][T12213] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.059564][T12219] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.3123: mark_inode_dirty error [ 200.059692][T12213] lowmem_reserve[]: [ 200.070022][T12219] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.3123: corrupted inode contents [ 200.072929][T12213] 0 2883 7862 7862 [ 200.349778][T12213] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 200.381352][T12213] lowmem_reserve[]: 0 0 4978 4978 [ 200.387012][T12213] Node 0 Normal free:4123704kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83052kB inactive_anon:4kB active_file:101132kB inactive_file:10760kB unevictable:0kB writepending:2460kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:278356kB local_pcp:261908kB free_cma:0kB [ 200.420619][T12213] lowmem_reserve[]: 0 0 0 0 [ 200.425443][T12213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.438314][T12213] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 200.454475][T12213] Node 0 Normal: 75*4kB (UME) 10*8kB (UM) 27*16kB (UME) 11*32kB (UME) 9*64kB (UE) 224*128kB (UM) 77*256kB (UME) 26*512kB (UM) 87*1024kB (UME) 69*2048kB (UM) 935*4096kB (UM) = 4123596kB [ 200.466166][T12226] netlink: 'syz.2.3124': attribute type 21 has an invalid length. [ 200.473231][T12213] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 200.473257][T12213] 44169 total pagecache pages [ 200.473267][T12213] 1 pages in swap cache [ 200.473275][T12213] Free swap = 124992kB [ 200.473284][T12213] Total swap = 124996kB [ 200.473293][T12213] 2097051 pages RAM [ 200.473301][T12213] 0 pages HighMem/MovableOnly [ 200.473309][T12213] 80479 pages reserved [ 200.523999][T12215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.597254][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.622114][T12097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.651417][T12226] netlink: 'syz.2.3124': attribute type 5 has an invalid length. [ 200.688694][T12097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.746371][T12237] loop2: detected capacity change from 0 to 1024 [ 200.754395][T12237] EXT4-fs: Ignoring removed orlov option [ 200.766230][ T5628] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.794695][T12237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.819662][ T5628] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.835974][T12237] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3130: bg 0: block 272: padding at end of block bitmap is not set [ 200.855998][ T5628] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.878223][T12247] macvtap0: refused to change device tx_queue_len [ 200.888253][ T5628] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.934183][T11531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.956146][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 200.956181][ T29] audit: type=1326 audit(1760370868.626:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 200.994898][T12256] netlink: 'syz.1.3138': attribute type 21 has an invalid length. [ 201.002795][T12256] __nla_validate_parse: 6 callbacks suppressed [ 201.002814][T12256] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3138'. [ 201.021243][ T29] audit: type=1326 audit(1760370868.666:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.024633][T12256] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3138'. [ 201.044884][ T29] audit: type=1326 audit(1760370868.666:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.044934][ T29] audit: type=1326 audit(1760370868.666:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.100963][ T29] audit: type=1326 audit(1760370868.666:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.124573][ T29] audit: type=1326 audit(1760370868.666:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.148212][ T29] audit: type=1326 audit(1760370868.666:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.171968][ T29] audit: type=1326 audit(1760370868.666:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.195711][ T29] audit: type=1326 audit(1760370868.666:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.219349][ T29] audit: type=1326 audit(1760370868.666:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.1.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587047eec9 code=0x7ffc0000 [ 201.284849][T12265] 9pnet_fd: Insufficient options for proto=fd [ 201.291454][T12265] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3142'. [ 201.306763][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'. [ 201.320458][T12265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.340418][T12267] team0: Device vxcan3 is of different type [ 201.463784][T12265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.571960][T12265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.588424][T12283] loop5: detected capacity change from 0 to 1024 [ 201.596645][T12283] EXT4-fs: Ignoring removed orlov option [ 201.616492][T12283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.630346][T12283] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3148: bg 0: block 272: padding at end of block bitmap is not set [ 201.658549][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.673294][T12265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.704117][T12290] loop5: detected capacity change from 0 to 128 [ 201.769238][ T3342] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.789640][ T3342] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.810857][ T3342] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.825619][ T3342] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.870554][T12290] syz.5.3150: attempt to access beyond end of device [ 201.870554][T12290] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 201.935295][T12297] loop6: detected capacity change from 0 to 1024 [ 201.970362][T12297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.123946][T12319] loop5: detected capacity change from 0 to 1024 [ 202.131149][T12319] EXT4-fs: Ignoring removed orlov option [ 202.155155][T12319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.170142][T12319] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3159: bg 0: block 272: padding at end of block bitmap is not set [ 202.205788][T10946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.238251][T12297] ================================================================== [ 202.246400][T12297] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 202.254568][T12297] [ 202.256906][T12297] write to 0xffff88811a4aba18 of 4 bytes by task 12293 on cpu 1: [ 202.264623][T12297] writeback_single_inode+0x150/0x3f0 [ 202.270167][T12297] sync_inode_metadata+0x5b/0x90 [ 202.275127][T12297] generic_buffers_fsync_noflush+0xd9/0x120 [ 202.281064][T12297] ext4_sync_file+0x1ab/0x690 [ 202.285751][T12297] vfs_fsync_range+0x10d/0x130 [ 202.290540][T12297] ext4_buffered_write_iter+0x34f/0x3c0 [ 202.296092][T12297] ext4_file_write_iter+0x387/0xf60 [ 202.301328][T12297] iter_file_splice_write+0x666/0xa60 [ 202.306710][T12297] direct_splice_actor+0x156/0x2a0 [ 202.311847][T12297] splice_direct_to_actor+0x312/0x680 [ 202.317234][T12297] do_splice_direct+0xda/0x150 [ 202.322061][T12297] do_sendfile+0x380/0x650 [ 202.326530][T12297] __x64_sys_sendfile64+0x105/0x150 [ 202.331763][T12297] x64_sys_call+0x2bb4/0x3000 [ 202.336451][T12297] do_syscall_64+0xd2/0x200 [ 202.340965][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.346876][T12297] [ 202.349211][T12297] read to 0xffff88811a4aba18 of 4 bytes by task 12297 on cpu 0: [ 202.356846][T12297] vfs_fsync_range+0x9b/0x130 [ 202.361540][T12297] ext4_buffered_write_iter+0x34f/0x3c0 [ 202.367118][T12297] ext4_file_write_iter+0x387/0xf60 [ 202.372360][T12297] iter_file_splice_write+0x666/0xa60 [ 202.378011][T12297] direct_splice_actor+0x156/0x2a0 [ 202.383263][T12297] splice_direct_to_actor+0x312/0x680 [ 202.388663][T12297] do_splice_direct+0xda/0x150 [ 202.393455][T12297] do_sendfile+0x380/0x650 [ 202.397995][T12297] __x64_sys_sendfile64+0x105/0x150 [ 202.403238][T12297] x64_sys_call+0x2bb4/0x3000 [ 202.408114][T12297] do_syscall_64+0xd2/0x200 [ 202.412654][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.418566][T12297] [ 202.420893][T12297] value changed: 0x00000070 -> 0x00000002 [ 202.426612][T12297] [ 202.428940][T12297] Reported by Kernel Concurrency Sanitizer on: [ 202.435097][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz.6.3151 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.446497][T12297] Tainted: [W]=WARN [ 202.450318][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.460385][T12297] ================================================================== [ 202.470506][T12324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.479143][T12324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.538554][T11294] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.