last executing test programs: 3m52.285917107s ago: executing program 4 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0xf00) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) close(0x3) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='{\x00') r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r10, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r11 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r10, r11, 0x0, 0xffffffff000) r12 = fsmount(r7, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r12, &(0x7f00000000c0)='./file0\x00') unlinkat(r12, &(0x7f0000000040)='./file0\x00', 0x0) 3m51.213183724s ago: executing program 4 (id=634): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000150000001811000000000000", @ANYBLOB="9fcc70598a661cca3f4be671a05bb68907c28c8598120227542b16e0bd018071cb16717e5e5fbb221d46909c6048dd154ee54dfa606b9338be70cc17c5fb548a953c1ad4684d41da4eccfdb7c76861c57149e106de15dac3fbf6a13f59ebd9bd352efd29ed92b0e510e7b750fa02ee91588caf66f11f58ee2eeecee69f5839debbfe6feced66d54c168f58cc0d30d4ea05", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x64d, &(0x7f0000000d40)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m50.833140697s ago: executing program 4 (id=635): msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0229cd6c40d9e329a8337c90996775cb26ff8966d51808ae30b625ef0c7a392857963133290a6f03a904c37399818b84a56b218942f664ca25f9c584a96d30ae190ebb95e16845142b3c2f5e52cd9c58c3d41a748560999f70c27d8448c1d2b3f6aa7eb2b884024ecd4f8c2ea6da0844ca40b3305f3fc296aa2680c2444c16231ac5cdfe71acdc1da378fde4348615dc96"], 0x2000, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r1, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup(r5) ftruncate(r4, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x4, 0xfffff001, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', r7, 0x80, 0x8000, 0xc53, 0x8, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0x10, 0xb5, 0x0, 0xf, [0x0, 0x7, 0x4]}]}}}}}) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000c00)='module_request\x00', r9}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid={'resuid', 0x3d, r8}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008"], 0x48) syslog(0x9, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) 3m49.256980826s ago: executing program 4 (id=654): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRES16, @ANYRES64], 0x8, 0x2f5, &(0x7f00000000c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000440)=0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 3m49.058790127s ago: executing program 4 (id=659): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='io_uring_complete\x00', r1, 0x0, 0x2}, 0xfffffffffffffd3c) rename(0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="3b256c7a40ff8cf3124ffee5b54c65a9eb3d53b137900d776a89d5cfc3ce7467bd24", 0x22}], 0x1, 0xc) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) 3m48.805910989s ago: executing program 4 (id=663): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) epoll_create(0xb213) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x7f}, 0x18) dup2(r3, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x212a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1ff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x3f5, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6}, 0x4000) 3m48.804000029s ago: executing program 32 (id=663): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) epoll_create(0xb213) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x7f}, 0x18) dup2(r3, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x212a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1ff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x3f5, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6}, 0x4000) 3m31.007994388s ago: executing program 5 (id=990): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x7fff, 0x3, 0x8, 0x8, 0x81, 0x0, 0x50, 0x8]) r2 = socket$caif_stream(0x25, 0x1, 0x5) write(r2, &(0x7f0000000080)="3fee43202db6da43043efa0ea8831274c3a8a5908c1b8de49aea692456f69452f03a59a36f50eef956e01b13f52a9afed68c036d9fc1302b2bfb1fe7f571ead52ee924a94f2c118243e7998683b331c61e410f24a2a877b3840092d6cb03cac641b87101d811b9576ad8072e335762a3498b10fbd0d4424994f039df8410df61566cdff450f09310", 0x88) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) write(r2, &(0x7f0000000140)="35b496aa02da55d45200ed3acbc7bfada662a6c6e61f54301a4609cbf97f78ff3a8467904ba266da664e073fa3b03bd110edd5d0df8b8e98d94d6d3346ed643240f6617b91cbb887398595ef55afab0a3a06f3164b0663b9a9cdb86529ef5a62ddcf65b0c40aff7364abefd53c859cab5e7b0e2547431c0801f16ff04abd27ad", 0x80) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'wg1\x00', {0x8}, 0xb495}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x10400, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000240)=0xe41f) close_range(r0, r0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="2645e0c368e68e1fb06ebf767e09ef989dd2b678a2727d42ce946e39df210821f85fc218bee8b8e4a13a39188f346186f71aca14b043bb228b83a740fdc4909fd62df45956eb346b3e9af1f58306eda1e5edad050f69fd0c3aa6", 0x5a, 0x805, &(0x7f0000000300)={0xa, 0x4e24, 0xc152, @remote, 0x5a6}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, 0x1403, 0x10, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/196, 0xc4, 0x0, &(0x7f0000000640)}, &(0x7f00000006c0)=0x40) ioctl$FITHAW(r3, 0xc0045878) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bind$rxrpc(r0, &(0x7f0000000700)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x1, 0x8, 0x5, 0xffffffffffff7fff, 0x1, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0xb, 0x8, 0x43, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x67}, 0x10020, 0xddbf, 0x7fff, 0x0, 0x20000000000, 0x7ef, 0xe874, 0x0, 0x6, 0x0, 0x3}, r4, 0xc, 0xffffffffffffffff, 0x3) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000840)={@dev, @dev, @loopback}, &(0x7f0000000880)=0xc) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000008c0)={0x18}) sendmsg$nl_route_sched(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)=@deltaction={0xc8, 0x31, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000f40)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4) fgetxattr(r5, &(0x7f0000000f80)=@known='security.apparmor\x00', &(0x7f0000000fc0)=""/186, 0xba) r6 = syz_open_dev$sg(&(0x7f0000001080), 0x10001, 0x28000) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) link(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='./file0\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) 3m30.889066919s ago: executing program 5 (id=993): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) epoll_create(0xb213) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r6, 0x0, 0x7f}, 0x18) dup2(r4, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x212a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1ff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x3f5, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6}, 0x4000) 3m30.553493471s ago: executing program 5 (id=1009): write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}, {&(0x7f0000000200)="4d0ff6044df96744927dc21a1af29aecbac549f3a15d", 0x16}, {&(0x7f0000000680)="8c4e", 0x2}], 0x5) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x4f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000"], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000075150102002eff1f000000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x6, 0x400, {{0x15, 0x4, 0x3, 0x36, 0x54, 0x67, 0x0, 0x6, 0x29, 0x0, @private=0xa010101, @broadcast, {[@lsrr={0x83, 0x27, 0xd5, [@multicast1, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2, @broadcast, @multicast1, @local, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x14, 0x87, 0x3, 0x3, [{@rand_addr=0x64010102}, {@multicast2, 0x1d5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000640), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0xa, 0xbc, 0x41, @local, @mcast2, 0x700, 0x8000, 0x7, 0x9}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="080003"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x11, 0x1, 0x8, 0x0, {{0x1e, 0x4, 0x1, 0x2e, 0x78, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x61, 0x2, [{0x4, 0x10, "1b38b0464cb94ce7aecee15f6ee6"}, {0x7, 0x6, "aeea2e9f"}, {0x5, 0x3, 'c'}, {0x7, 0x7, "3d483e8d68"}, {0x5, 0xe, "bfd1cc08e43a9c340012dda7"}, {0x0, 0x12, "76677ad2be58973eda4d1cc30801c87e"}, {0x0, 0xf, "999a93cf6b8a2f97c84a6e2b23"}, {0x7, 0xc, "c9d47780d1c7ab97d46c"}]}]}}}}}) 3m30.385376922s ago: executing program 5 (id=1015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3m30.349441772s ago: executing program 5 (id=1016): bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched(r0, 0x0, 0x480c5) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}]}}]}, 0x4c}}, 0x4000) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40001) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'ip6erspan0\x00'}}, 0x1e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000580)="88b6", 0x2, 0x400c000, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) 3m30.163843983s ago: executing program 5 (id=1017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="3fe10e28ae58aaaaaaaaaaaa86dd60000000009c8800fe800000000000000000000000000040ff02000000000000000000000000000100000000009c90780100000000000000b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c77733846860829accf2af44c0e1aaaaf532417a91c9bd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc3d73abde0da6c68c8d2dab"], 0x0) 3m15.140227655s ago: executing program 33 (id=1017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="3fe10e28ae58aaaaaaaaaaaa86dd60000000009c8800fe800000000000000000000000000040ff02000000000000000000000000000100000000009c90780100000000000000b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c77733846860829accf2af44c0e1aaaaf532417a91c9bd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc3d73abde0da6c68c8d2dab"], 0x0) 3m12.157280073s ago: executing program 3 (id=1373): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e21, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m11.729489466s ago: executing program 3 (id=1379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x2}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000740), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3m11.593906547s ago: executing program 3 (id=1384): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r5, 0x2007ffb) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 3m11.263169359s ago: executing program 3 (id=1390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x46a5f7329de31a52, 0x4) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) io_setup(0x1, &(0x7f0000000100)) 3m10.687151583s ago: executing program 3 (id=1399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) 3m10.351264385s ago: executing program 3 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x40, 0x8, 0xee4, 0x1, {{0x2d, 0x4, 0x0, 0x1a, 0xb4, 0x66, 0x0, 0x81, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x20, 0x6c, 0x0, 0x8, [0x8cf, 0x0, 0x7f, 0x79, 0x1, 0xa, 0x5]}, @end, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x7, 0x3, "8f"}, {0x3, 0x8, "e444100fe030"}, {0x6, 0xb, "4e04623f1ff5a165d6"}, {0x2, 0x12, "1e3c555f4ed6ed5f3db8e0e9ebe7569c"}, {0x6, 0xb, "625b6ea580946a9c56"}, {0x1, 0xc, "7428a3ed731196c363da"}]}, @lsrr={0x83, 0x1b, 0xe1, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @remote, @multicast1]}, @ssrr={0x89, 0x1f, 0x8, [@multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010101]}]}}}}}) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="28000000130a010100"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 3m10.350944254s ago: executing program 34 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x40, 0x8, 0xee4, 0x1, {{0x2d, 0x4, 0x0, 0x1a, 0xb4, 0x66, 0x0, 0x81, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x20, 0x6c, 0x0, 0x8, [0x8cf, 0x0, 0x7f, 0x79, 0x1, 0xa, 0x5]}, @end, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x7, 0x3, "8f"}, {0x3, 0x8, "e444100fe030"}, {0x6, 0xb, "4e04623f1ff5a165d6"}, {0x2, 0x12, "1e3c555f4ed6ed5f3db8e0e9ebe7569c"}, {0x6, 0xb, "625b6ea580946a9c56"}, {0x1, 0xc, "7428a3ed731196c363da"}]}, @lsrr={0x83, 0x1b, 0xe1, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @remote, @multicast1]}, @ssrr={0x89, 0x1f, 0x8, [@multicast1, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010101]}]}}}}}) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="28000000130a010100"], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 1m4.425886506s ago: executing program 6 (id=4277): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a800000ff02fd000010000014000500ff"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) io_setup(0x0, &(0x7f0000000180)) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0xfffffffd, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x15, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x11}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) 1m4.425459366s ago: executing program 6 (id=4278): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 1m4.407841936s ago: executing program 6 (id=4280): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000540)) 1m0.895229637s ago: executing program 6 (id=4282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2000448, &(0x7f00000003c0), 0xfc, 0x524, &(0x7f00000008c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_es_find_extent_range_enter\x00', r6, 0x0, 0x2000000000}, 0x11) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r11) ptrace$getregset(0x4204, r11, 0x202, &(0x7f0000000100)={0x0}) mq_timedreceive(r10, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) mmap(&(0x7f0000d58000/0x3000)=nil, 0x3000, 0x1000006, 0x80010, r1, 0x1a759000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") pipe(&(0x7f0000000080)) 59.998687803s ago: executing program 6 (id=4347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x141000, 0xd, 0x2, 0x107, 0x6, 0x5, 0x0, 0x0, 0x3}) close(r2) 58.293321113s ago: executing program 6 (id=4375): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a800000ff02fd000010000014000500ff"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) io_setup(0x0, &(0x7f0000000180)) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0xfffffffd, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x15, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x11}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x44f0) 58.271328533s ago: executing program 35 (id=4375): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a800000ff02fd000010000014000500ff"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) io_setup(0x0, &(0x7f0000000180)) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0xfffffffd, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x15, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x11}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x44f0) 1.76041357s ago: executing program 1 (id=5460): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x80000000, 0xd50c, 0x3, 0x28100, r1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x0, @value=r3}, 0x50) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) 1.63406741s ago: executing program 1 (id=5461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 1.614722931s ago: executing program 1 (id=5462): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.58859553s ago: executing program 1 (id=5463): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010", 0x5}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0xfeae}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x9, 0xbaf9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003"], 0x98}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) 1.473411351s ago: executing program 0 (id=5464): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x12000240}, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$inet(0x2, 0x3, 0x5) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x11, &(0x7f00000004c0)=""/17, 0x0, 0x1, '\x00', 0x0, @fallback=0x5b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x5, 0x9, 0xb}], 0x10, 0x5ee}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)={0xe8, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) write$binfmt_elf64(r7, &(0x7f0000001900)=ANY=[], 0x78) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 1.450960511s ago: executing program 1 (id=5466): mmap$xdp(&(0x7f0000258000/0x3000)=nil, 0x3000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x4, 0x5, 0x0, 0x4, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200084}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@ipv6_deladdrlabel={0x9c, 0x49, 0x300, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x0, r2, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x80c1) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c040000) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000180)=0xa001) 1.205773033s ago: executing program 8 (id=5470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1.187944933s ago: executing program 8 (id=5471): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x80000000, 0xd50c, 0x3, 0x28100, r1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x0, @value=r3}, 0x50) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x24}]) 1.088853644s ago: executing program 2 (id=5472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 1.088395304s ago: executing program 2 (id=5473): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.083841424s ago: executing program 8 (id=5474): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(0x0, 0x7192346c17744cfa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000001500000000000000180100002020702500000000002020207b1af8ff00000000bda900000000000037010000f8ffffffb702000008000000b70300000700000014090000060000004c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syncfs(r0) 1.063823004s ago: executing program 2 (id=5475): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) epoll_create(0xb213) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r6, 0x0, 0x7f}, 0x18) dup2(r4, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x212a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1ff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x3f5, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6}, 0x4000) 1.027640504s ago: executing program 8 (id=5477): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0xfffffff9}, 0x10) dup3(r2, r1, 0x0) 999.829435ms ago: executing program 8 (id=5478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x65, &(0x7f0000000440)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f00000000c0)=0x104, 0x0) 976.164245ms ago: executing program 8 (id=5479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000380)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xfffffffffffffffe, r2, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="340000008600000007000000f7ffffff080a0000317e36d35218a716aadda0d95e5803df5d49d50238db2cd97e168f4f861fc618f0c67685a99db49c2b8daa0732aad98f141e6c121dbae895a4a2bfcd09af7937eb86ebc657a19ffc6e76e2dc0c6ad77df9f03cf30ea57db766b7e3879058677283dcc16cb4e83f3010ef5ddfff46cef7936052a156abb034603b2d6752f47e011309268a6b5c151214", @ANYRES32=r5, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0500000002000000020000000b00"/28], 0x50) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 659.648286ms ago: executing program 0 (id=5483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0xffffffffffffffff], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) unshare(0x20060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2003ffc, 0x40, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1}, {0x1}}}, 0x24}}, 0x0) r7 = openat(0xffffffffffffffff, 0x0, 0x208100, 0x6f) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x0, 0x5}, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x68, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff801}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}]}, 0x68}}, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000140)={0x16, 0x7, 0x1, {{0x9, 'udp:syz2\x00'}, 0x4}}, 0x16) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x110480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r12, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 653.293346ms ago: executing program 7 (id=5484): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 591.263277ms ago: executing program 7 (id=5485): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 544.028427ms ago: executing program 7 (id=5486): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000001500000000000000180100002020702500000000002020207b1af8ff00000000bda900000000000037010000f8ffffffb702000008000000b70300000700000014090000060000004c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) 461.443938ms ago: executing program 2 (id=5487): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_sctp(0xa, 0x801, 0x84) mkdir(0x0, 0x7192346c17744cfa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000001500000000000000180100002020702500000000002020207b1af8ff00000000bda900000000000037010000f8ffffffb702000008000000b70300000700000014090000060000004c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syncfs(r0) 460.975507ms ago: executing program 7 (id=5488): memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/87, 0x57, 0x0, &(0x7f0000000640)=""/230, 0xe6}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x400, 0x0, @empty, 0xaa000}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) listen(r5, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 444.533028ms ago: executing program 2 (id=5489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x65, &(0x7f0000000440)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f00000000c0)=0x104, 0x0) 443.863768ms ago: executing program 0 (id=5490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)={0x8400, 0xd1, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000b00)={0x9c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5e9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4010}, 0x20011) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x445, &(0x7f0000000440)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000080)="aa36d53e730406000000000000004832ba4a33fe", 0xd2, r6}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x66841, 0x0) 381.678318ms ago: executing program 2 (id=5491): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x12000240}, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket$inet(0x2, 0x3, 0x5) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x11, &(0x7f00000004c0)=""/17, 0x0, 0x1, '\x00', 0x0, @fallback=0x5b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780), 0x10, 0x5ee}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)={0xe8, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) write$binfmt_elf64(r8, &(0x7f0000001900)=ANY=[], 0x78) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 281.363639ms ago: executing program 7 (id=5492): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d3ec2f8e", @ANYRES16=0x0, @ANYBLOB="5953f9ffffff01dcdf256b000000"], 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xd0e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd00, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xcec, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "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"}}}}}}, 0x0) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140), 0x0, r1) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0x5000009) r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f0000000240)='.\x00', 0x60000726) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="a183000000000000000005", @ANYRES32=0x0, @ANYBLOB="08010e8004"], 0x124}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 236.373079ms ago: executing program 7 (id=5493): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x12000240}, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$inet(0x2, 0x3, 0x5) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x11, &(0x7f00000004c0)=""/17, 0x0, 0x1, '\x00', 0x0, @fallback=0x5b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x5, 0x9, 0xb}], 0x10, 0x5ee}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)={0xe8, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) write$binfmt_elf64(r7, &(0x7f0000001900)=ANY=[], 0x78) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 226.198889ms ago: executing program 0 (id=5494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 149.490199ms ago: executing program 0 (id=5495): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 13.512341ms ago: executing program 1 (id=5496): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5497): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) epoll_create(0xb213) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r6, 0x0, 0x7f}, 0x18) dup2(r4, r5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x212a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1ff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x3f5, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x6}, 0x4000) kernel console output (not intermixed with test programs): ffffff) [ 264.576353][T17999] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 264.581765][T17999] loop8: p1 start 460800 is beyond EOD, truncated [ 264.588205][T17999] loop8: p2 size 83886080 extends beyond EOD, truncated [ 264.595536][T18011] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 264.601050][T18011] loop2: p1 start 460800 is beyond EOD, truncated [ 264.607501][T18011] loop2: p2 size 83886080 extends beyond EOD, truncated [ 264.621459][T17999] loop8: p5 start 460800 is beyond EOD, truncated [ 264.628060][T17999] loop8: p6 size 83886080 extends beyond EOD, truncated [ 264.636411][T18011] loop2: p5 start 460800 is beyond EOD, truncated [ 264.642920][T18011] loop2: p6 size 83886080 extends beyond EOD, truncated [ 264.653834][T12418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 264.678257][T18031] loop7: detected capacity change from 0 to 512 [ 264.700273][T18031] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.729580][T18031] EXT4-fs (loop7): mount failed [ 264.786612][ T3422] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 264.820360][T18045] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4846'. [ 264.890395][T18049] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4849'. [ 264.926586][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4849'. [ 265.040293][T18062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4855'. [ 265.116537][ T3422] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 265.148868][T18072] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4861'. [ 265.174333][T18075] loop2: detected capacity change from 0 to 512 [ 266.113497][T18075] __quota_error: 269 callbacks suppressed [ 266.113517][T18075] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 266.139339][T18075] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.158367][T18090] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 266.183263][T18075] EXT4-fs (loop2): mount failed [ 266.308256][T18103] ip6gre3: entered allmulticast mode [ 266.425234][T18095] loop7: detected capacity change from 0 to 32768 [ 266.436722][T18122] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 266.459678][T18095] loop7: p1 p2 p3 < > p4 < p5 p6 > [ 266.465419][T18095] loop7: p1 start 460800 is beyond EOD, truncated [ 266.471883][T18095] loop7: p2 size 83886080 extends beyond EOD, truncated [ 266.481123][T18095] loop7: p5 start 460800 is beyond EOD, truncated [ 266.487486][ T3422] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 266.487590][T18095] loop7: p6 size 83886080 extends beyond EOD, truncated [ 266.509383][ T29] audit: type=1401 audit(1762687301.626:13270): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 266.560497][T18136] ip6gre4: entered allmulticast mode [ 266.608138][T18129] tipc: Enabling of bearer rejected, already enabled [ 266.628891][T18129] loop0: detected capacity change from 0 to 2048 [ 266.631652][ T3403] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 266.685600][T18152] usb usb5: usbfs: process 18152 (syz.8.4888) did not claim interface 0 before use [ 266.701914][T18152] FAULT_INJECTION: forcing a failure. [ 266.701914][T18152] name failslab, interval 1, probability 0, space 0, times 0 [ 266.714833][T18152] CPU: 0 UID: 0 PID: 18152 Comm: syz.8.4888 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.714957][T18152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.714972][T18152] Call Trace: [ 266.714979][T18152] [ 266.714989][T18152] __dump_stack+0x1d/0x30 [ 266.715015][T18152] dump_stack_lvl+0xe8/0x140 [ 266.715112][T18152] dump_stack+0x15/0x1b [ 266.715134][T18152] should_fail_ex+0x265/0x280 [ 266.715219][T18152] should_failslab+0x8c/0xb0 [ 266.715287][T18152] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 266.715365][T18152] ? kstrdup_const+0x3e/0x50 [ 266.715393][T18152] kstrdup+0x3e/0xd0 [ 266.715419][T18152] kstrdup_const+0x3e/0x50 [ 266.715448][T18152] __kernfs_new_node+0x3f/0x350 [ 266.715529][T18152] ? __schedule+0x6b9/0xb30 [ 266.715561][T18152] kernfs_new_node+0xd0/0x140 [ 266.715632][T18152] kernfs_create_link+0x70/0x130 [ 266.715659][T18152] sysfs_do_create_link_sd+0x6a/0x100 [ 266.715694][T18152] sysfs_create_link+0x51/0x70 [ 266.715738][T18152] driver_sysfs_add+0x54/0x160 [ 266.715761][T18152] device_bind_driver+0x17/0x60 [ 266.715849][T18152] usb_driver_claim_interface+0x1af/0x280 [ 266.715880][T18152] claimintf+0x113/0x190 [ 266.715924][T18152] parse_usbdevfs_streams+0x4ee/0x610 [ 266.715950][T18152] proc_alloc_streams+0x6b/0x110 [ 266.715983][T18152] usbdev_ioctl+0xc68/0x1700 [ 266.716112][T18152] ? __pfx_usbdev_ioctl+0x10/0x10 [ 266.716201][T18152] __se_sys_ioctl+0xce/0x140 [ 266.716224][T18152] __x64_sys_ioctl+0x43/0x50 [ 266.716247][T18152] x64_sys_call+0x1816/0x3000 [ 266.716271][T18152] do_syscall_64+0xd2/0x200 [ 266.716292][T18152] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.716402][T18152] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 266.716438][T18152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.716461][T18152] RIP: 0033:0x7f923b95f6c9 [ 266.716476][T18152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.716523][T18152] RSP: 002b:00007f923a3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.716586][T18152] RAX: ffffffffffffffda RBX: 00007f923bbb5fa0 RCX: 00007f923b95f6c9 [ 266.716600][T18152] RDX: 0000200000000000 RSI: 000000008008551c RDI: 0000000000000003 [ 266.716612][T18152] RBP: 00007f923a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.716626][T18152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.716638][T18152] R13: 00007f923bbb6038 R14: 00007f923bbb5fa0 R15: 00007ffd7911d5e8 [ 266.716659][T18152] [ 266.718593][T18157] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 266.841333][T18164] loop0: detected capacity change from 0 to 256 [ 266.998890][ T29] audit: type=1326 audit(1762687302.106:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.025190][ T29] audit: type=1326 audit(1762687302.106:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.032002][T18169] ip6gre4: entered allmulticast mode [ 267.048987][ T29] audit: type=1326 audit(1762687302.116:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.077714][ T29] audit: type=1326 audit(1762687302.116:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.102066][ T29] audit: type=1326 audit(1762687302.116:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.126074][ T29] audit: type=1326 audit(1762687302.116:13276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.149716][ T29] audit: type=1326 audit(1762687302.116:13277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.173192][ T29] audit: type=1326 audit(1762687302.116:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18166 comm="syz.1.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 267.228902][T18173] loop7: detected capacity change from 0 to 512 [ 267.229459][T18175] tipc: Started in network mode [ 267.235664][T18173] EXT4-fs: Ignoring removed bh option [ 267.240159][T18175] tipc: Node identity e64b7d46391b, cluster identity 4711 [ 267.252662][T18175] tipc: Enabled bearer , priority 0 [ 267.262526][T18175] FAULT_INJECTION: forcing a failure. [ 267.262526][T18175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.275760][T18175] CPU: 1 UID: 0 PID: 18175 Comm: syz.8.4897 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.275789][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.275802][T18175] Call Trace: [ 267.275808][T18175] [ 267.275896][T18175] __dump_stack+0x1d/0x30 [ 267.275922][T18175] dump_stack_lvl+0xe8/0x140 [ 267.275945][T18175] dump_stack+0x15/0x1b [ 267.275966][T18175] should_fail_ex+0x265/0x280 [ 267.276064][T18175] should_fail+0xb/0x20 [ 267.276082][T18175] should_fail_usercopy+0x1a/0x20 [ 267.276181][T18175] _copy_from_user+0x1c/0xb0 [ 267.276233][T18175] sock_do_ioctl+0xe6/0x220 [ 267.276263][T18175] sock_ioctl+0x41b/0x610 [ 267.276289][T18175] ? __pfx_sock_ioctl+0x10/0x10 [ 267.276312][T18175] __se_sys_ioctl+0xce/0x140 [ 267.276338][T18175] __x64_sys_ioctl+0x43/0x50 [ 267.276398][T18175] x64_sys_call+0x1816/0x3000 [ 267.276423][T18175] do_syscall_64+0xd2/0x200 [ 267.276447][T18175] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 267.276477][T18175] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 267.276585][T18175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.276632][T18175] RIP: 0033:0x7f923b95f6c9 [ 267.276649][T18175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.276669][T18175] RSP: 002b:00007f923a3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.276752][T18175] RAX: ffffffffffffffda RBX: 00007f923bbb5fa0 RCX: 00007f923b95f6c9 [ 267.276767][T18175] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 267.276780][T18175] RBP: 00007f923a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.276794][T18175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.276808][T18175] R13: 00007f923bbb6038 R14: 00007f923bbb5fa0 R15: 00007ffd7911d5e8 [ 267.276829][T18175] [ 267.278434][T18173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 267.306779][ T3403] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 267.309488][T18173] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.446931][T18189] netlink: 'syz.1.4902': attribute type 1 has an invalid length. [ 267.504825][T18174] tipc: Disabling bearer [ 267.512675][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 267.533134][T18187] tipc: Enabling of bearer rejected, already enabled [ 267.548837][T18189] bond2: entered promiscuous mode [ 267.554616][T18189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.567731][T18187] loop2: detected capacity change from 0 to 2048 [ 267.569903][T18191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.582742][T18191] bond2: (slave bond3): making interface the new active one [ 267.590169][T18191] bond3: entered promiscuous mode [ 267.596407][T18191] bond2: (slave bond3): Enslaving as an active interface with an up link [ 267.667269][T18210] loop1: detected capacity change from 0 to 512 [ 267.680299][T18210] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 267.695446][T18210] EXT4-fs (loop1): mount failed [ 267.726449][T18218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.782152][T18218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.833908][T18223] tipc: Enabling of bearer rejected, already enabled [ 267.846438][T18218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.856950][T18223] loop2: detected capacity change from 0 to 2048 [ 267.883058][T18229] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 267.903284][T18218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.955272][T18235] FAULT_INJECTION: forcing a failure. [ 267.955272][T18235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.968591][T18235] CPU: 1 UID: 0 PID: 18235 Comm: syz.8.4917 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.968691][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.968705][T18235] Call Trace: [ 267.968711][T18235] [ 267.968719][T18235] __dump_stack+0x1d/0x30 [ 267.968789][T18235] dump_stack_lvl+0xe8/0x140 [ 267.968815][T18235] dump_stack+0x15/0x1b [ 267.968835][T18235] should_fail_ex+0x265/0x280 [ 267.968857][T18235] should_fail_alloc_page+0xf2/0x100 [ 267.968943][T18235] __alloc_frozen_pages_noprof+0xff/0x360 [ 267.968968][T18235] alloc_pages_mpol+0xb3/0x260 [ 267.968991][T18235] alloc_pages_noprof+0x90/0x130 [ 267.969042][T18235] pte_alloc_one+0x1e/0xd0 [ 267.969069][T18235] __pte_alloc+0x32/0x290 [ 267.969107][T18235] handle_mm_fault+0x1c18/0x2be0 [ 267.969216][T18235] ? vma_start_read+0x141/0x1f0 [ 267.969254][T18235] do_user_addr_fault+0x630/0x1080 [ 267.969286][T18235] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 267.969377][T18235] exc_page_fault+0x62/0xa0 [ 267.969412][T18235] asm_exc_page_fault+0x26/0x30 [ 267.969483][T18235] RIP: 0033:0x7f923b8209d6 [ 267.969499][T18235] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 267.969518][T18235] RSP: 002b:00007f923a3c64a0 EFLAGS: 00010246 [ 267.969534][T18235] RAX: 0000000000000001 RBX: 00007f923a3c6540 RCX: 0000000000000101 [ 267.969548][T18235] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f923a3c65e0 [ 267.969562][T18235] RBP: 0000000000000102 R08: 00007f9231fa7000 R09: 0000000000000000 [ 267.969599][T18235] R10: 0000000000000000 R11: 00007f923a3c6550 R12: 0000000000000001 [ 267.969612][T18235] R13: 00007f923b9fdc40 R14: 0000000000000000 R15: 00007f923a3c65e0 [ 267.969710][T18235] [ 268.145930][ T2600] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.146141][T18235] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 268.156713][ T2600] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.179238][ T2600] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.194094][ T2600] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.205169][T18235] loop8: detected capacity change from 0 to 512 [ 268.228145][T18235] EXT4-fs: inline encryption not supported [ 268.234051][T18235] EXT4-fs: Ignoring removed bh option [ 268.239952][T18235] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 268.307454][T18235] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4917: bg 0: block 255: padding at end of block bitmap is not set [ 268.322330][T18235] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 268.331604][T18235] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4917: invalid indirect mapped block 1 (level 1) [ 268.345240][T18235] EXT4-fs (loop8): 1 truncate cleaned up [ 268.351510][T18235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.404371][T11544] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 268.415334][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.415364][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.415379][T11544] Call Trace: [ 268.415386][T11544] [ 268.415394][T11544] __dump_stack+0x1d/0x30 [ 268.415494][T11544] dump_stack_lvl+0xe8/0x140 [ 268.415547][T11544] dump_stack+0x15/0x1b [ 268.415565][T11544] dump_header+0x81/0x220 [ 268.415590][T11544] oom_kill_process+0x342/0x400 [ 268.415682][T11544] out_of_memory+0x979/0xb80 [ 268.415764][T11544] try_charge_memcg+0x610/0xa10 [ 268.415818][T11544] charge_memcg+0x51/0xc0 [ 268.415841][T11544] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 268.415869][T11544] __read_swap_cache_async+0x17b/0x2d0 [ 268.415900][T11544] swap_cluster_readahead+0x262/0x3c0 [ 268.415934][T11544] swapin_readahead+0xde/0x6f0 [ 268.415960][T11544] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 268.415997][T11544] ? css_rstat_updated+0xb7/0x240 [ 268.416126][T11544] ? __rcu_read_unlock+0x4f/0x70 [ 268.416153][T11544] ? __rcu_read_unlock+0x4f/0x70 [ 268.416180][T11544] ? swap_cache_get_folio+0x277/0x280 [ 268.416205][T11544] do_swap_page+0x2ae/0x2370 [ 268.416239][T11544] ? _raw_spin_unlock+0x26/0x50 [ 268.416280][T11544] ? finish_task_switch+0xad/0x2b0 [ 268.416307][T11544] ? __pfx_default_wake_function+0x10/0x10 [ 268.416338][T11544] handle_mm_fault+0x9a5/0x2be0 [ 268.416386][T11544] ? vma_start_read+0x141/0x1f0 [ 268.416425][T11544] do_user_addr_fault+0x630/0x1080 [ 268.416449][T11544] ? fpregs_restore_userregs+0xe2/0x1d0 [ 268.416482][T11544] ? switch_fpu_return+0xe/0x20 [ 268.416554][T11544] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.416666][T11544] exc_page_fault+0x62/0xa0 [ 268.416699][T11544] asm_exc_page_fault+0x26/0x30 [ 268.416741][T11544] RIP: 0033:0x7f5514a01f45 [ 268.416757][T11544] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 268.416819][T11544] RSP: 002b:00007ffd3f6e45a8 EFLAGS: 00010246 [ 268.416835][T11544] RAX: 0000000000000000 RBX: 000000000000041a RCX: 00007f5514a01f43 [ 268.416848][T11544] RDX: 00007ffd3f6e45c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.416860][T11544] RBP: 00007ffd3f6e462c R08: 0000000015bcaa9a R09: 0000000000000000 [ 268.416873][T11544] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 268.416886][T11544] R13: 00000000000927c0 R14: 00000000000417ab R15: 00007ffd3f6e4680 [ 268.416904][T11544] [ 268.417116][T11544] memory: usage 307200kB, limit 307200kB, failcnt 737 [ 268.438213][T18250] loop7: detected capacity change from 0 to 512 [ 268.440541][T11544] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 268.440558][T11544] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 268.440572][T11544] Memory cgroup stats for /syz2: [ 268.440764][T11544] cache 0 [ 268.470066][T18250] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 268.470402][T11544] rss 28672 [ 268.481509][T18250] EXT4-fs (loop7): mount failed [ 268.485553][T11544] shmem 0 [ 268.485563][T11544] mapped_file 0 [ 268.485571][T11544] dirty 0 [ 268.485578][T11544] writeback 28672 [ 268.485586][T11544] workingset_refault_anon 0 [ 268.560944][ T3377] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 268.562244][T11544] workingset_refault_file 291 [ 268.579641][T18256] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 268.583157][T11544] swap 196608 [ 268.745040][T18261] loop1: detected capacity change from 0 to 1024 [ 268.747758][T11544] swapcached 28672 [ 268.755127][T18261] netlink: 'syz.1.4927': attribute type 32 has an invalid length. [ 268.761238][T11544] pgpgin 307013 [ 268.764630][T18261] __nla_validate_parse: 23 callbacks suppressed [ 268.764645][T18261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4927'. [ 268.770974][T11544] pgpgout 307003 [ 268.804994][T11544] pgfault 359189 [ 268.808562][T11544] pgmajfault 7 [ 268.811959][T11544] inactive_anon 28672 [ 268.815931][T11544] active_anon 0 [ 268.819469][T11544] inactive_file 12288 [ 268.823503][T11544] active_file 0 [ 268.826961][T11544] unevictable 0 [ 268.830413][T11544] hierarchical_memory_limit 314572800 [ 268.835841][T11544] hierarchical_memsw_limit 9223372036854771712 [ 268.841992][T11544] total_cache 0 [ 268.845452][T11544] total_rss 28672 [ 268.849058][T11544] total_shmem 0 [ 268.852517][T11544] total_mapped_file 0 [ 268.856473][T11544] total_dirty 0 [ 268.860002][T11544] total_writeback 28672 [ 268.864211][T11544] total_workingset_refault_anon 0 [ 268.869301][T11544] total_workingset_refault_file 291 [ 268.874549][T11544] total_swap 196608 [ 268.878383][T11544] total_swapcached 28672 [ 268.882628][T11544] total_pgpgin 307013 [ 268.886585][T11544] total_pgpgout 307003 [ 268.890638][T11544] total_pgfault 359189 [ 268.894754][T11544] total_pgmajfault 7 [ 268.898618][T11544] total_inactive_anon 28672 [ 268.903107][T11544] total_active_anon 0 [ 268.907060][T11544] total_inactive_file 12288 [ 268.911549][T11544] total_active_file 0 [ 268.915507][T11544] total_unevictable 0 [ 268.919522][T11544] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4915,pid=18230,uid=0 [ 268.934298][T11544] Memory cgroup out of memory: Killed process 18230 (syz.2.4915) total-vm:98324kB, anon-rss:1264kB, file-rss:26276kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 268.955081][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.960153][T18264] loop1: detected capacity change from 0 to 512 [ 268.970716][T18264] EXT4-fs: Ignoring removed bh option [ 268.990910][T18266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4929'. [ 269.008450][T18264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 269.031777][T18264] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.047746][T18277] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4932'. [ 269.052303][T18279] netlink: 272 bytes leftover after parsing attributes in process `syz.8.4933'. [ 269.087027][ T3423] IPVS: starting estimator thread 0... [ 269.094522][T12418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 269.097292][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4932'. [ 269.189235][T18283] IPVS: using max 2688 ests per chain, 134400 per kthread [ 269.214719][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4935'. [ 269.225162][T18291] tipc: Failed to obtain node identity [ 269.230683][T18291] tipc: Enabling of bearer rejected, failed to enable media [ 269.240272][T18299] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 269.262609][T18302] loop2: detected capacity change from 0 to 512 [ 269.311909][T18302] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.338922][T18302] EXT4-fs (loop2): mount failed [ 269.479251][T18293] loop0: detected capacity change from 0 to 32768 [ 269.510497][T18293] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 269.515840][T18293] loop0: p1 start 460800 is beyond EOD, truncated [ 269.522340][T18293] loop0: p2 size 83886080 extends beyond EOD, truncated [ 269.540865][T18293] loop0: p5 start 460800 is beyond EOD, truncated [ 269.547321][T18293] loop0: p6 size 83886080 extends beyond EOD, truncated [ 269.569958][T18321] loop1: detected capacity change from 0 to 512 [ 269.578578][T18321] EXT4-fs: Ignoring removed bh option [ 269.611164][T18321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 269.655496][T18321] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.696030][T18334] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 269.799180][T18338] loop7: detected capacity change from 0 to 1024 [ 269.806617][T18338] EXT4-fs: Ignoring removed orlov option [ 269.831730][T12418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 269.846628][T18338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.868469][T18338] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4954'. [ 269.921830][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.961271][T18330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=18330 comm=syz.8.4951 [ 269.988812][ T36] hid_parser_main: 200 callbacks suppressed [ 269.988849][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 269.996514][T18349] loop1: detected capacity change from 0 to 512 [ 270.002204][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.015843][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.051430][T18349] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 270.060365][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.066485][T18349] EXT4-fs (loop1): mount failed [ 270.073588][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.085794][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.093234][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.100729][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.108095][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.115479][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 270.123790][ T36] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 270.161501][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4958'. [ 270.402363][T18365] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 270.450198][T18361] loop8: detected capacity change from 0 to 32768 [ 270.473580][T18369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4966'. [ 270.492727][T18361] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 270.502094][T18361] loop8: p1 start 460800 is beyond EOD, truncated [ 270.502456][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4966'. [ 270.508575][T18361] loop8: p2 size 83886080 extends beyond EOD, truncated [ 270.525982][T18361] loop8: p5 start 460800 is beyond EOD, truncated [ 270.532499][T18361] loop8: p6 size 83886080 extends beyond EOD, truncated [ 270.633615][ T36] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 270.648382][T18381] loop7: detected capacity change from 0 to 512 [ 270.670832][T18381] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 270.686519][T18381] EXT4-fs (loop7): mount failed [ 270.841535][T18394] tipc: Failed to obtain node identity [ 270.847036][T18394] tipc: Enabling of bearer rejected, failed to enable media [ 270.871432][T18394] loop7: detected capacity change from 0 to 2048 [ 270.958785][T18400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=18400 comm=syz.2.4971 [ 271.035781][T18404] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 271.065880][T18401] netem: incorrect ge model size [ 271.070916][T18401] netem: change failed [ 271.144383][T18410] Cannot find set identified by id 0 to match [ 271.154758][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 271.154773][ T29] audit: type=1326 audit(1762687306.266:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.226200][ T29] audit: type=1326 audit(1762687306.306:13391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.250640][ T29] audit: type=1326 audit(1762687306.306:13392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.274432][ T29] audit: type=1326 audit(1762687306.306:13393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.297919][ T29] audit: type=1326 audit(1762687306.306:13394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.321604][ T29] audit: type=1326 audit(1762687306.306:13395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.345152][ T29] audit: type=1326 audit(1762687306.306:13396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.368812][ T29] audit: type=1326 audit(1762687306.306:13397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.392423][ T29] audit: type=1326 audit(1762687306.306:13398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.416031][ T29] audit: type=1326 audit(1762687306.306:13399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 271.443441][T18412] loop7: detected capacity change from 0 to 512 [ 271.459404][T18412] EXT4-fs: Ignoring removed bh option [ 271.523497][T18412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 271.577246][T18423] loop8: detected capacity change from 0 to 512 [ 271.583733][T18412] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.635998][T18423] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.667972][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 271.690045][T18423] EXT4-fs (loop8): mount failed [ 271.722072][T18414] loop1: detected capacity change from 0 to 32768 [ 271.752985][T18434] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 271.759547][T18414] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 271.766934][T18414] loop1: p1 start 460800 is beyond EOD, truncated [ 271.773475][T18414] loop1: p2 size 83886080 extends beyond EOD, truncated [ 271.801620][T18414] loop1: p5 start 460800 is beyond EOD, truncated [ 271.808090][T18414] loop1: p6 size 83886080 extends beyond EOD, truncated [ 271.813857][T18436] loop8: detected capacity change from 0 to 512 [ 271.824880][T18436] EXT4-fs: Ignoring removed nobh option [ 271.858231][T18436] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.4988: corrupted inode contents [ 271.879399][T18436] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.4988: mark_inode_dirty error [ 271.905578][T18436] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.4988: corrupted inode contents [ 271.917973][T18436] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.4988: mark_inode_dirty error [ 271.931011][T18456] loop1: detected capacity change from 0 to 512 [ 271.937712][T18456] EXT4-fs: Ignoring removed bh option [ 271.953187][T18436] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.4988: Failed to acquire dquot type 0 [ 271.970769][T18436] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.4988: corrupted inode contents [ 271.987582][T18436] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.4988: mark_inode_dirty error [ 272.000399][T18436] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.4988: corrupted inode contents [ 272.000661][T18456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 272.025612][T18456] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.036287][T18436] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.4988: mark_inode_dirty error [ 272.053066][T18436] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.4988: corrupted inode contents [ 272.140012][T18436] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 272.140111][T18436] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.4988: corrupted inode contents [ 272.140279][T18436] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.4988: mark_inode_dirty error [ 272.140526][T18436] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 272.140869][T18436] EXT4-fs (loop8): 1 truncate cleaned up [ 272.141436][T18436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.141542][T18436] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.211551][T12418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 272.283839][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.372711][T18489] ip6gre5: entered allmulticast mode [ 272.563429][T18478] loop0: detected capacity change from 0 to 32768 [ 272.620697][T18502] netlink: 'gtp': attribute type 10 has an invalid length. [ 272.628314][T18502] ipvlan0: entered allmulticast mode [ 272.633690][T18502] veth0_vlan: entered allmulticast mode [ 272.648561][T18478] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 272.653904][T18478] loop0: p1 start 460800 is beyond EOD, truncated [ 272.660463][T18478] loop0: p2 size 83886080 extends beyond EOD, truncated [ 272.671932][T18478] loop0: p5 start 460800 is beyond EOD, truncated [ 272.678414][T18478] loop0: p6 size 83886080 extends beyond EOD, truncated [ 272.703142][T18502] team0: Device ipvlan0 failed to register rx_handler [ 272.764949][T18504] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 272.884805][T18515] 9pnet_fd: Insufficient options for proto=fd [ 272.941674][T18522] ip6gre8: entered allmulticast mode [ 273.000453][T18521] loop2: detected capacity change from 0 to 2048 [ 273.069364][T18521] loop2: p1 < > p3 p4 < > [ 273.073824][T18521] loop2: partition table partially beyond EOD, truncated [ 273.089203][T18521] loop2: p1 start 8388352 is beyond EOD, truncated [ 273.095768][T18521] loop2: p3 size 50331648 extends beyond EOD, truncated [ 273.156607][T18532] tipc: Enabled bearer , priority 10 [ 273.203135][T18533] netem: incorrect ge model size [ 273.208129][T18533] netem: change failed [ 273.530688][T18538] loop2: detected capacity change from 0 to 512 [ 273.537704][T18538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.575225][T18538] EXT4-fs (loop2): 1 truncate cleaned up [ 273.588804][T18538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.617727][T18540] tipc: Failed to obtain node identity [ 273.623283][T18540] tipc: Enabling of bearer rejected, failed to enable media [ 273.647332][T18540] loop1: detected capacity change from 0 to 2048 [ 273.716715][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.735829][T18554] ip6gre6: entered allmulticast mode [ 273.877456][ T2600] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.885947][T18566] Cannot find set identified by id 0 to match [ 273.980119][T18576] __nla_validate_parse: 13 callbacks suppressed [ 273.980136][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5038'. [ 274.012928][T18576] tipc: Enabling of bearer rejected, already enabled [ 274.033637][T18576] loop8: detected capacity change from 0 to 2048 [ 274.062929][T18587] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 274.091727][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5043'. [ 274.103636][T18590] ip6gre7: entered allmulticast mode [ 274.156596][T18594] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5045'. [ 274.269148][ T3377] tipc: Node number set to 3746594118 [ 274.925319][T18646] Cannot find set identified by id 0 to match [ 275.099235][T18657] geneve2: entered promiscuous mode [ 275.104484][T18657] geneve2: entered allmulticast mode [ 275.210472][T18649] loop1: detected capacity change from 0 to 512 [ 275.217380][T18649] EXT4-fs (loop1): unable to read superblock [ 275.303254][T18663] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 275.761355][T18670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.879123][ T3569] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.063495][T18676] Cannot find set identified by id 0 to match [ 276.143878][T18679] loop1: detected capacity change from 0 to 512 [ 276.289165][T18679] __quota_error: 266 callbacks suppressed [ 276.289182][T18679] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 276.331210][T18679] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 276.346110][T18673] loop8: detected capacity change from 0 to 32768 [ 276.361139][ T29] audit: type=1326 audit(1762687311.476:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.363055][T18679] EXT4-fs (loop1): mount failed [ 276.385099][ T29] audit: type=1326 audit(1762687311.506:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.413212][ T29] audit: type=1326 audit(1762687311.506:13665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.417302][T18691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5081'. [ 276.436831][ T29] audit: type=1326 audit(1762687311.506:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.436928][ T29] audit: type=1326 audit(1762687311.506:13667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.457399][T18673] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 276.470021][ T29] audit: type=1326 audit(1762687311.506:13668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.522397][ T29] audit: type=1326 audit(1762687311.536:13669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.545899][ T29] audit: type=1326 audit(1762687311.536:13670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.546158][T18694] loop0: detected capacity change from 0 to 512 [ 276.569648][ T29] audit: type=1326 audit(1762687311.536:13671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18690 comm="syz.2.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 276.599697][T18694] EXT4-fs: Ignoring removed nobh option [ 276.607238][T18673] loop8: p1 start 460800 is beyond EOD, truncated [ 276.613707][T18673] loop8: p2 size 83886080 extends beyond EOD, truncated [ 276.632939][T18673] loop8: p5 start 460800 is beyond EOD, truncated [ 276.633212][T18698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5082'. [ 276.639564][T18673] loop8: p6 size 83886080 extends beyond EOD, truncated [ 276.664269][T18694] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5080: corrupted inode contents [ 276.697662][T18694] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.5080: mark_inode_dirty error [ 276.731927][T18694] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5080: corrupted inode contents [ 276.749135][T18694] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5080: mark_inode_dirty error [ 276.771456][T18709] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 276.790972][T18694] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5080: Failed to acquire dquot type 0 [ 276.809208][T18694] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5080: corrupted inode contents [ 276.827078][T18716] loop7: detected capacity change from 0 to 164 [ 276.832767][T18694] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.5080: mark_inode_dirty error [ 276.844990][T18694] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5080: corrupted inode contents [ 276.867315][T18694] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5080: mark_inode_dirty error [ 276.869230][T18716] bio_check_eod: 30 callbacks suppressed [ 276.869248][T18716] syz.7.5089: attempt to access beyond end of device [ 276.869248][T18716] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 276.900665][T18694] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5080: corrupted inode contents [ 276.900829][T18713] set match dimension is over the limit! [ 276.922538][T18694] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 276.931417][T18716] syz.7.5089: attempt to access beyond end of device [ 276.931417][T18716] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 276.931549][T18694] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5080: corrupted inode contents [ 276.995626][T18725] loop2: detected capacity change from 0 to 128 [ 277.003018][T18694] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.5080: mark_inode_dirty error [ 277.032337][T18725] syz.2.5092: attempt to access beyond end of device [ 277.032337][T18725] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 277.049519][T18716] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 277.057203][T18694] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 277.058171][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5089'. [ 277.075021][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5089'. [ 277.080015][T18694] EXT4-fs (loop0): 1 truncate cleaned up [ 277.090156][T18725] syz.2.5092: attempt to access beyond end of device [ 277.090156][T18725] loop2: rw=2049, sector=161, nr_sectors = 32 limit=128 [ 277.109941][T18694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.122548][T18694] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.133063][T18716] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 277.153481][T18725] syz.2.5092: attempt to access beyond end of device [ 277.153481][T18725] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 277.194805][T18725] syz.2.5092: attempt to access beyond end of device [ 277.194805][T18725] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 277.209402][T18725] syz.2.5092: attempt to access beyond end of device [ 277.209402][T18725] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 277.238945][T18725] syz.2.5092: attempt to access beyond end of device [ 277.238945][T18725] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 277.273818][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5093'. [ 277.274563][T18725] syz.2.5092: attempt to access beyond end of device [ 277.274563][T18725] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 277.299501][T18725] syz.2.5092: attempt to access beyond end of device [ 277.299501][T18725] loop2: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 277.328040][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.350407][T18732] loop0: detected capacity change from 0 to 512 [ 277.356913][T18728] ip6gre2: entered allmulticast mode [ 277.372790][T18732] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 277.387898][T18732] EXT4-fs (loop0): mount failed [ 277.894813][T18738] loop0: detected capacity change from 0 to 32768 [ 277.949768][T18738] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 277.956178][T18738] loop0: p1 start 460800 is beyond EOD, truncated [ 277.962656][T18738] loop0: p2 size 83886080 extends beyond EOD, truncated [ 278.018350][T18738] loop0: p5 start 460800 is beyond EOD, truncated [ 278.024865][T18738] loop0: p6 size 83886080 extends beyond EOD, truncated [ 278.092401][T18745] loop2: detected capacity change from 0 to 32768 [ 278.159627][T18745] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 278.164995][T18745] loop2: p1 start 460800 is beyond EOD, truncated [ 278.171478][T18745] loop2: p2 size 83886080 extends beyond EOD, truncated [ 278.196475][T18745] loop2: p5 start 460800 is beyond EOD, truncated [ 278.202976][T18745] loop2: p6 size 83886080 extends beyond EOD, truncated [ 278.280857][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5105'. [ 278.345842][T18756] loop8: detected capacity change from 0 to 32768 [ 278.356405][T18761] ip6gre9: entered allmulticast mode [ 278.391108][T18765] loop0: detected capacity change from 0 to 512 [ 278.397738][T18756] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 278.403048][T18756] loop8: p1 start 460800 is beyond EOD, truncated [ 278.409730][T18756] loop8: p2 size 83886080 extends beyond EOD, truncated [ 278.418306][T18756] loop8: p5 start 460800 is beyond EOD, truncated [ 278.424803][T18756] loop8: p6 size 83886080 extends beyond EOD, truncated [ 278.448206][T18765] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 278.464274][T18765] EXT4-fs (loop0): mount failed [ 278.576952][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5107'. [ 278.598289][T18776] ip6gre8: entered allmulticast mode [ 278.705928][T18785] set match dimension is over the limit! [ 278.733975][T18789] ip6gre3: entered allmulticast mode [ 278.753023][T18787] loop8: detected capacity change from 0 to 512 [ 278.769351][T18787] EXT4-fs: Ignoring removed bh option [ 278.796896][T18787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 278.829296][T18787] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.864275][T18795] loop2: detected capacity change from 0 to 1024 [ 278.894341][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 278.903752][T18795] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.923535][T18795] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.5111: iget: bogus i_mode (1) [ 278.938075][T18798] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.954862][T18795] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5111: couldn't read orphan inode 11 (err -117) [ 278.969641][T18795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.000184][T18781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.092240][T18808] __nla_validate_parse: 2 callbacks suppressed [ 279.092258][T18808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5123'. [ 279.192592][T18805] loop8: detected capacity change from 0 to 32768 [ 279.220204][T18815] Cannot find set identified by id 0 to match [ 279.242637][T18817] netlink: 'syz.1.5127': attribute type 1 has an invalid length. [ 279.261469][T18805] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 279.266806][T18805] loop8: p1 start 460800 is beyond EOD, truncated [ 279.273291][T18805] loop8: p2 size 83886080 extends beyond EOD, truncated [ 279.309985][T18805] loop8: p5 start 460800 is beyond EOD, truncated [ 279.316548][T18805] loop8: p6 size 83886080 extends beyond EOD, truncated [ 279.410718][T18825] loop8: detected capacity change from 0 to 512 [ 279.445966][T18825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.484669][T18825] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.518147][T18825] EXT4-fs (loop8): shut down requested (0) [ 279.567240][T18833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18833 comm=syz.1.5130 [ 279.632600][T18833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=18833 comm=syz.1.5130 [ 279.823237][T18839] FAULT_INJECTION: forcing a failure. [ 279.823237][T18839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.836340][T18839] CPU: 1 UID: 0 PID: 18839 Comm: syz.7.5132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.836374][T18839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.836390][T18839] Call Trace: [ 279.836398][T18839] [ 279.836412][T18839] __dump_stack+0x1d/0x30 [ 279.836437][T18839] dump_stack_lvl+0xe8/0x140 [ 279.836480][T18839] dump_stack+0x15/0x1b [ 279.836502][T18839] should_fail_ex+0x265/0x280 [ 279.836526][T18839] should_fail+0xb/0x20 [ 279.836546][T18839] should_fail_usercopy+0x1a/0x20 [ 279.836578][T18839] _copy_to_user+0x20/0xa0 [ 279.836666][T18839] simple_read_from_buffer+0xb5/0x130 [ 279.836696][T18839] proc_fail_nth_read+0x10e/0x150 [ 279.836736][T18839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.836797][T18839] vfs_read+0x1a8/0x770 [ 279.836826][T18839] ? __rcu_read_unlock+0x4f/0x70 [ 279.836858][T18839] ? __fget_files+0x184/0x1c0 [ 279.836894][T18839] ksys_read+0xda/0x1a0 [ 279.836925][T18839] __x64_sys_read+0x40/0x50 [ 279.837010][T18839] x64_sys_call+0x27c0/0x3000 [ 279.837034][T18839] do_syscall_64+0xd2/0x200 [ 279.837056][T18839] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.837155][T18839] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.837194][T18839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.837220][T18839] RIP: 0033:0x7f05782ee0dc [ 279.837239][T18839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 279.837282][T18839] RSP: 002b:00007f0576d4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.837302][T18839] RAX: ffffffffffffffda RBX: 00007f0578545fa0 RCX: 00007f05782ee0dc [ 279.837318][T18839] RDX: 000000000000000f RSI: 00007f0576d4f0a0 RDI: 0000000000000005 [ 279.837335][T18839] RBP: 00007f0576d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 279.837350][T18839] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 279.837366][T18839] R13: 00007f0578546038 R14: 00007f0578545fa0 R15: 00007ffd50f15468 [ 279.837453][T18839] [ 280.097054][T18844] bridge0: entered allmulticast mode [ 280.103313][T18844] bridge_slave_1: left allmulticast mode [ 280.109148][T18844] bridge_slave_1: left promiscuous mode [ 280.114934][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.123346][T18844] bridge_slave_0: left allmulticast mode [ 280.129023][T18844] bridge_slave_0: left promiscuous mode [ 280.134833][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.277810][T18841] loop1: detected capacity change from 0 to 32768 [ 280.303955][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'. [ 280.332631][T18847] loop2: detected capacity change from 0 to 2048 [ 280.348665][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.358011][T18841] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 280.363481][T18841] loop1: p1 start 460800 is beyond EOD, truncated [ 280.369997][T18841] loop1: p2 size 83886080 extends beyond EOD, truncated [ 280.386230][T18841] loop1: p5 start 460800 is beyond EOD, truncated [ 280.392774][T18841] loop1: p6 size 83886080 extends beyond EOD, truncated [ 280.418427][T18855] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5135'. [ 280.544439][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5140'. [ 280.584270][T18862] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5140'. [ 280.617215][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5140'. [ 280.756714][T18866] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5141'. [ 280.855397][T18874] loop8: detected capacity change from 0 to 512 [ 280.873358][T18860] loop1: detected capacity change from 0 to 32768 [ 280.882799][T18874] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 280.898234][T18874] EXT4-fs (loop8): mount failed [ 280.899206][T18883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=18883 comm=syz.2.5136 [ 280.945204][T18885] loop0: detected capacity change from 0 to 2048 [ 280.952040][T18860] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 280.957307][T18860] loop1: p1 start 460800 is beyond EOD, truncated [ 280.963819][T18860] loop1: p2 size 83886080 extends beyond EOD, truncated [ 280.976263][T18860] loop1: p5 start 460800 is beyond EOD, truncated [ 280.982794][T18860] loop1: p6 size 83886080 extends beyond EOD, truncated [ 281.063085][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5152'. [ 281.076363][T18895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5152'. [ 281.097094][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5152'. [ 281.432483][T18902] loop2: detected capacity change from 0 to 32768 [ 281.470088][T18889] loop7: detected capacity change from 0 to 32768 [ 281.485848][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 281.485972][ T29] audit: type=1326 audit(1762687316.596:13931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18905 comm="syz.1.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 281.516566][ T29] audit: type=1326 audit(1762687316.596:13932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18905 comm="syz.1.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 281.543093][T18902] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 281.543340][ T29] audit: type=1326 audit(1762687316.596:13933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18905 comm="syz.1.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520beef6c9 code=0x7ffc0000 [ 281.548608][T18902] loop2: p1 start 460800 is beyond EOD, truncated [ 281.548639][T18902] loop2: p2 size 83886080 extends beyond EOD, truncated [ 281.550313][T18902] loop2: p5 start 460800 is beyond EOD, truncated [ 281.592369][T18902] loop2: p6 size 83886080 extends beyond EOD, truncated [ 281.611489][T18889] loop7: p1 p2 p3 < > p4 < p5 p6 > [ 281.616800][T18889] loop7: p1 start 460800 is beyond EOD, truncated [ 281.623375][T18889] loop7: p2 size 83886080 extends beyond EOD, truncated [ 281.643819][T18889] loop7: p5 start 460800 is beyond EOD, truncated [ 281.650316][T18889] loop7: p6 size 83886080 extends beyond EOD, truncated [ 281.650459][T18913] loop1: detected capacity change from 0 to 512 [ 281.691140][T18914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=18914 comm=syz.0.5164 [ 281.712241][T18913] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 281.732875][T18913] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 281.771056][T18913] EXT4-fs (loop1): mount failed [ 281.818269][ T29] audit: type=1401 audit(1762687316.926:13934): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 281.847724][ T29] audit: type=1326 audit(1762687316.956:13935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05782ef6c9 code=0x7ffc0000 [ 281.856310][T18928] loop1: detected capacity change from 0 to 2048 [ 281.871377][ T29] audit: type=1326 audit(1762687316.956:13936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05782ef6c9 code=0x7ffc0000 [ 281.903927][ T29] audit: type=1326 audit(1762687316.986:13937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f05782ef6c9 code=0x7ffc0000 [ 281.927594][ T29] audit: type=1326 audit(1762687316.986:13938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05782ef6c9 code=0x7ffc0000 [ 281.951432][ T29] audit: type=1326 audit(1762687316.986:13939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.7.5163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05782ef6c9 code=0x7ffc0000 [ 282.062894][T18943] ip6gre10: entered allmulticast mode [ 282.111592][T18949] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 282.222846][T18957] loop1: detected capacity change from 0 to 2048 [ 282.308934][T18965] FAULT_INJECTION: forcing a failure. [ 282.308934][T18965] name failslab, interval 1, probability 0, space 0, times 0 [ 282.321594][T18965] CPU: 1 UID: 0 PID: 18965 Comm: syz.8.5178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.321687][T18965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.321701][T18965] Call Trace: [ 282.321709][T18965] [ 282.321719][T18965] __dump_stack+0x1d/0x30 [ 282.321746][T18965] dump_stack_lvl+0xe8/0x140 [ 282.321770][T18965] dump_stack+0x15/0x1b [ 282.321791][T18965] should_fail_ex+0x265/0x280 [ 282.321815][T18965] ? audit_log_d_path+0x8d/0x150 [ 282.321847][T18965] should_failslab+0x8c/0xb0 [ 282.321882][T18965] __kmalloc_cache_noprof+0x4c/0x4a0 [ 282.321922][T18965] audit_log_d_path+0x8d/0x150 [ 282.321947][T18965] audit_log_d_path_exe+0x42/0x70 [ 282.322019][T18965] audit_log_task+0x1e9/0x250 [ 282.322067][T18965] audit_seccomp+0x61/0x100 [ 282.322169][T18965] ? __seccomp_filter+0x82d/0x1250 [ 282.322201][T18965] __seccomp_filter+0x83e/0x1250 [ 282.322236][T18965] ? bpf_trace_run2+0x124/0x1c0 [ 282.322270][T18965] ? __se_sys_kexec_load+0x13f/0x160 [ 282.322325][T18965] ? __se_sys_kexec_load+0x13f/0x160 [ 282.322358][T18965] __secure_computing+0x82/0x150 [ 282.322398][T18965] syscall_trace_enter+0xcf/0x1e0 [ 282.322447][T18965] do_syscall_64+0xac/0x200 [ 282.322473][T18965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.322554][T18965] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.322594][T18965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.322618][T18965] RIP: 0033:0x7f923b95e0dc [ 282.322636][T18965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.322673][T18965] RSP: 002b:00007f923a3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.322693][T18965] RAX: ffffffffffffffda RBX: 00007f923bbb5fa0 RCX: 00007f923b95e0dc [ 282.322780][T18965] RDX: 000000000000000f RSI: 00007f923a3c70a0 RDI: 0000000000000006 [ 282.322794][T18965] RBP: 00007f923a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.322807][T18965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.322821][T18965] R13: 00007f923bbb6038 R14: 00007f923bbb5fa0 R15: 00007ffd7911d5e8 [ 282.322843][T18965] [ 282.691661][T18985] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 282.838416][T18995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=18995 comm=syz.1.5179 [ 283.241699][T19009] loop7: detected capacity change from 0 to 1024 [ 283.330607][T19017] loop7: detected capacity change from 0 to 512 [ 283.349718][T19017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.362517][T19017] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.375242][T19017] EXT4-fs (loop7): shut down requested (0) [ 283.395897][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.422679][T19023] loop7: detected capacity change from 0 to 512 [ 283.441151][T19023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.455089][T19023] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.469129][T19023] EXT4-fs (loop7): shut down requested (0) [ 283.868939][T19038] loop8: detected capacity change from 0 to 32768 [ 283.910004][T19038] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 283.915681][T19038] loop8: p1 start 460800 is beyond EOD, truncated [ 283.922133][T19038] loop8: p2 size 83886080 extends beyond EOD, truncated [ 283.952959][T19038] loop8: p5 start 460800 is beyond EOD, truncated [ 283.959515][T19038] loop8: p6 size 83886080 extends beyond EOD, truncated [ 284.055063][T19051] ip6gre6: entered allmulticast mode [ 284.265893][T19057] __nla_validate_parse: 12 callbacks suppressed [ 284.265913][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 284.315735][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.359003][T19057] loop1: detected capacity change from 0 to 2048 [ 284.534575][T19069] netlink: 'syz.0.5215': attribute type 10 has an invalid length. [ 284.548796][T19069] bond0: (slave dummy0): Releasing backup interface [ 284.559526][T19069] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 284.568721][T19069] team0: Failed to send options change via netlink (err -105) [ 284.576331][T19069] team0: Port device dummy0 added [ 284.585243][T19076] netlink: 'syz.0.5215': attribute type 10 has an invalid length. [ 284.595020][T19076] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 284.605494][T19076] team0: Failed to send options change via netlink (err -105) [ 284.613107][T19076] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 284.622122][T19076] team0: Port device dummy0 removed [ 284.629858][T19076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 284.714025][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 284.725520][T19085] ip6gre11: entered allmulticast mode [ 285.019639][T19097] loop2: detected capacity change from 0 to 512 [ 285.031576][T19097] EXT4-fs: Ignoring removed nobh option [ 285.066707][T19097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.5223: corrupted inode contents [ 285.111108][T19097] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.5223: mark_inode_dirty error [ 285.141497][T19097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.5223: corrupted inode contents [ 285.175042][T19097] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.5223: mark_inode_dirty error [ 285.215459][T19097] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.5223: Failed to acquire dquot type 0 [ 285.233909][T19097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5223: corrupted inode contents [ 285.269494][T19110] loop1: detected capacity change from 0 to 512 [ 285.279611][T19097] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.5223: mark_inode_dirty error [ 285.321540][T19116] tipc: Enabling of bearer rejected, already enabled [ 285.340319][T19116] loop8: detected capacity change from 0 to 2048 [ 285.421367][T19110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.439834][T19097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5223: corrupted inode contents [ 285.440458][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5229'. [ 285.469246][T19097] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.5223: mark_inode_dirty error [ 285.480822][T19097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5223: corrupted inode contents [ 285.492979][T19097] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 285.495866][T19123] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5229'. [ 285.511186][T19110] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.524952][T19097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5223: corrupted inode contents [ 285.539947][T19097] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.5223: mark_inode_dirty error [ 285.552612][T19097] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 285.561958][T19110] EXT4-fs (loop1): shut down requested (0) [ 285.571415][T19097] EXT4-fs (loop2): 1 truncate cleaned up [ 285.577660][T19097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.590349][T19097] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.643742][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5229'. [ 285.816831][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.947431][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5237'. [ 286.131715][T12418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.143936][T19150] loop2: detected capacity change from 0 to 128 [ 286.164891][T19150] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.200028][T19150] ext4 filesystem being mounted at /471/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.236675][T19155] FAULT_INJECTION: forcing a failure. [ 286.236675][T19155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.250064][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.1.5242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.250148][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.250163][T19155] Call Trace: [ 286.250172][T19155] [ 286.250182][T19155] __dump_stack+0x1d/0x30 [ 286.250209][T19155] dump_stack_lvl+0xe8/0x140 [ 286.250232][T19155] dump_stack+0x15/0x1b [ 286.250253][T19155] should_fail_ex+0x265/0x280 [ 286.250356][T19155] should_fail_alloc_page+0xf2/0x100 [ 286.250403][T19155] __alloc_frozen_pages_noprof+0xff/0x360 [ 286.250432][T19155] alloc_pages_mpol+0xb3/0x260 [ 286.250518][T19155] alloc_pages_noprof+0x90/0x130 [ 286.250540][T19155] pte_alloc_one+0x1e/0xd0 [ 286.250647][T19155] __pte_alloc+0x32/0x290 [ 286.250683][T19155] handle_mm_fault+0x1c18/0x2be0 [ 286.250710][T19155] ? vma_start_read+0x141/0x1f0 [ 286.250753][T19155] do_user_addr_fault+0x630/0x1080 [ 286.250808][T19155] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.250851][T19155] exc_page_fault+0x62/0xa0 [ 286.250956][T19155] asm_exc_page_fault+0x26/0x30 [ 286.250981][T19155] RIP: 0033:0x7f520bdb09d6 [ 286.250999][T19155] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 286.251090][T19155] RSP: 002b:00007f520a94e3f0 EFLAGS: 00010246 [ 286.251108][T19155] RAX: 0000000000000001 RBX: 00007f520a94e490 RCX: 0000000000000101 [ 286.251124][T19155] RDX: 000000000000001f RSI: 0000000000000001 RDI: 00007f520a94e530 [ 286.251139][T19155] RBP: 0000000000000102 R08: 00007f520252f000 R09: 0000000000000000 [ 286.251154][T19155] R10: 0000000000000000 R11: 00007f520a94e4a0 R12: 0000000000000001 [ 286.251169][T19155] R13: 00007f520bf8dc40 R14: 0000000000000000 R15: 00007f520a94e530 [ 286.251245][T19155] [ 286.251256][T19155] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 286.523400][T11544] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.551828][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 286.551845][ T29] audit: type=1326 audit(1762687321.666:14105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.591063][T19155] loop1: detected capacity change from 0 to 2048 [ 286.619850][ T29] audit: type=1326 audit(1762687321.666:14106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.643551][ T29] audit: type=1326 audit(1762687321.696:14107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.667084][ T29] audit: type=1326 audit(1762687321.696:14108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.691579][ T29] audit: type=1326 audit(1762687321.696:14109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.715175][ T29] audit: type=1326 audit(1762687321.696:14110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.738833][ T29] audit: type=1326 audit(1762687321.696:14111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.762439][ T29] audit: type=1326 audit(1762687321.696:14112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.786101][ T29] audit: type=1326 audit(1762687321.696:14113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.809679][ T29] audit: type=1326 audit(1762687321.696:14114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19158 comm="syz.2.5243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55149cf6c9 code=0x7ffc0000 [ 286.901407][T19169] hub 1-0:1.0: USB hub found [ 286.912292][T19169] hub 1-0:1.0: 8 ports detected [ 286.924090][T19155] loop1: p2 p3 p7 [ 286.936243][T19169] netdevsim netdevsim8: Direct firmware load for failed with error -2 [ 286.961603][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5248'. [ 286.998482][T19170] loop2: detected capacity change from 0 to 512 [ 287.006383][T19170] EXT4-fs: Ignoring removed nobh option [ 287.015635][T19169] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.5247'. [ 287.028129][T19170] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.5245: corrupted inode contents [ 287.059141][T19169] netlink: zone id is out of range [ 287.064281][T19169] netlink: zone id is out of range [ 287.069638][T19170] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.5245: mark_inode_dirty error [ 287.089413][T19169] netlink: zone id is out of range [ 287.094555][T19169] netlink: zone id is out of range [ 287.099717][T19169] netlink: zone id is out of range [ 287.104826][T19169] netlink: zone id is out of range [ 287.109975][T19169] netlink: zone id is out of range [ 287.115085][T19169] netlink: zone id is out of range [ 287.120222][T19169] netlink: zone id is out of range [ 287.125382][T19169] netlink: zone id is out of range [ 287.139464][T19170] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.5245: corrupted inode contents [ 287.158170][T19170] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.5245: mark_inode_dirty error [ 287.193987][T19170] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.5245: Failed to acquire dquot type 0 [ 287.206318][T19170] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5245: corrupted inode contents [ 287.229553][T19170] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.5245: mark_inode_dirty error [ 287.242948][T19170] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5245: corrupted inode contents [ 287.255367][T19170] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.5245: mark_inode_dirty error [ 287.267026][T19170] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5245: corrupted inode contents [ 287.286180][T19190] FAULT_INJECTION: forcing a failure. [ 287.286180][T19190] name failslab, interval 1, probability 0, space 0, times 0 [ 287.299167][T19190] CPU: 0 UID: 0 PID: 19190 Comm: syz.0.5252 Not tainted syzkaller #0 PREEMPT(voluntary) [ 287.299233][T19190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.299248][T19190] Call Trace: [ 287.299255][T19190] [ 287.299263][T19190] __dump_stack+0x1d/0x30 [ 287.299295][T19190] dump_stack_lvl+0xe8/0x140 [ 287.299387][T19190] dump_stack+0x15/0x1b [ 287.299406][T19190] should_fail_ex+0x265/0x280 [ 287.299428][T19190] ? nd_alloc_stack+0x50/0xa0 [ 287.299461][T19190] should_failslab+0x8c/0xb0 [ 287.299605][T19170] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 287.299634][T19190] __kmalloc_cache_noprof+0x4c/0x4a0 [ 287.299726][T19190] ? __pfx_shmem_get_link+0x10/0x10 [ 287.299757][T19190] nd_alloc_stack+0x50/0xa0 [ 287.299793][T19190] pick_link+0x78e/0x830 [ 287.299871][T19190] ? __d_lookup_rcu+0x248/0x2a0 [ 287.299945][T19190] step_into+0x790/0x7f0 [ 287.299979][T19190] ? inode_permission+0x106/0x310 [ 287.300016][T19190] link_path_walk+0x571/0x900 [ 287.300127][T19190] path_lookupat+0x63/0x2a0 [ 287.300165][T19190] filename_lookup+0x147/0x340 [ 287.300238][T19190] ? __pfx_shmem_put_link+0x10/0x10 [ 287.300322][T19190] ? __pfx_shmem_put_link+0x10/0x10 [ 287.300356][T19190] user_path_at+0x3e/0x130 [ 287.300378][T19190] __se_sys_mount+0x25b/0x2e0 [ 287.300408][T19190] ? fput+0x8f/0xc0 [ 287.300429][T19190] __x64_sys_mount+0x67/0x80 [ 287.300533][T19190] x64_sys_call+0x2b51/0x3000 [ 287.300560][T19190] do_syscall_64+0xd2/0x200 [ 287.300584][T19190] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 287.300681][T19190] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 287.300719][T19190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.300744][T19190] RIP: 0033:0x7f109d6bf6c9 [ 287.300761][T19190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.300782][T19190] RSP: 002b:00007f109c11f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.300874][T19190] RAX: ffffffffffffffda RBX: 00007f109d915fa0 RCX: 00007f109d6bf6c9 [ 287.300888][T19190] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 287.300903][T19190] RBP: 00007f109c11f090 R08: 0000000000000000 R09: 0000000000000000 [ 287.300917][T19190] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 287.300931][T19190] R13: 00007f109d916038 R14: 00007f109d915fa0 R15: 00007ffcb3905268 [ 287.300951][T19190] [ 287.551064][T19170] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5245: corrupted inode contents [ 287.563323][T19170] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.5245: mark_inode_dirty error [ 287.575795][T19170] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 287.585251][T19170] EXT4-fs (loop2): 1 truncate cleaned up [ 287.591601][T19170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.604588][T19170] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.772640][T19205] netlink: 'syz.8.5259': attribute type 10 has an invalid length. [ 287.803185][T19205] team0: Port device dummy0 added [ 287.824721][T19205] netlink: 'syz.8.5259': attribute type 10 has an invalid length. [ 287.854116][T19205] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 287.890581][T19205] team0: Failed to send options change via netlink (err -105) [ 287.898605][T19205] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 287.907729][T19205] team0: Port device dummy0 removed [ 287.926431][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.938772][T19205] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 288.079346][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5266'. [ 288.091086][T19227] tipc: Enabling of bearer rejected, already enabled [ 288.110776][T19227] loop8: detected capacity change from 0 to 2048 [ 288.306926][T19239] loop1: detected capacity change from 0 to 128 [ 288.318329][T19239] bio_check_eod: 41 callbacks suppressed [ 288.318343][T19239] syz.1.5271: attempt to access beyond end of device [ 288.318343][T19239] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 288.349459][T19239] syz.1.5271: attempt to access beyond end of device [ 288.349459][T19239] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 288.362908][T19239] buffer_io_error: 18 callbacks suppressed [ 288.362924][T19239] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 288.377749][T19239] syz.1.5271: attempt to access beyond end of device [ 288.377749][T19239] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 288.391251][T19239] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 288.409414][T19239] syz.1.5271: attempt to access beyond end of device [ 288.409414][T19239] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 288.433799][T19239] syz.1.5271: attempt to access beyond end of device [ 288.433799][T19239] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 288.447258][T19239] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 288.470279][T19239] syz.1.5271: attempt to access beyond end of device [ 288.470279][T19239] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 288.483845][T19239] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 288.492830][T19239] syz.1.5271: attempt to access beyond end of device [ 288.492830][T19239] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 288.506707][T19239] syz.1.5271: attempt to access beyond end of device [ 288.506707][T19239] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 288.520338][T19239] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 288.529023][T19239] syz.1.5271: attempt to access beyond end of device [ 288.529023][T19239] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 288.542466][T19239] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 288.550531][T19250] loop8: detected capacity change from 0 to 512 [ 288.551272][T19239] syz.1.5271: attempt to access beyond end of device [ 288.551272][T19239] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 288.565386][T19250] EXT4-fs: Ignoring removed nobh option [ 288.573078][T19239] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 288.584666][T19239] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 288.615838][T19250] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5275: corrupted inode contents [ 288.625865][T19239] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 288.636164][T19239] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 288.643478][T19250] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.5275: mark_inode_dirty error [ 288.661215][T19250] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5275: corrupted inode contents [ 288.673461][T19250] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.5275: mark_inode_dirty error [ 288.686560][T19250] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5275: Failed to acquire dquot type 0 [ 288.698607][T19250] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5275: corrupted inode contents [ 288.711145][T19250] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.5275: mark_inode_dirty error [ 288.724491][T19250] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5275: corrupted inode contents [ 288.736604][T19250] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5275: mark_inode_dirty error [ 288.748121][T19250] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5275: corrupted inode contents [ 288.760903][T19250] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 288.769809][T19250] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5275: corrupted inode contents [ 288.781808][T19250] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5275: mark_inode_dirty error [ 288.800397][T19250] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 288.809978][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 288.832525][T19263] tipc: Enabling of bearer rejected, already enabled [ 288.843071][T19250] EXT4-fs (loop8): 1 truncate cleaned up [ 288.853094][T19250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.873976][T19263] loop0: detected capacity change from 0 to 2048 [ 288.883967][T19250] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.027901][T19273] netlink: 'syz.7.5277': attribute type 10 has an invalid length. [ 289.037004][T19273] team0: Port device dummy0 added [ 289.043895][T19273] netlink: 'syz.7.5277': attribute type 10 has an invalid length. [ 289.052202][T19273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 289.061759][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.074307][T19273] team0: Failed to send options change via netlink (err -105) [ 289.081878][T19273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 289.090860][T19273] team0: Port device dummy0 removed [ 289.097731][T19273] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 289.226498][T19272] loop1: detected capacity change from 0 to 32768 [ 289.293199][T19270] loop2: detected capacity change from 0 to 32768 [ 289.300435][T19272] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 289.305686][T19272] loop1: p1 start 460800 is beyond EOD, truncated [ 289.312249][T19272] loop1: p2 size 83886080 extends beyond EOD, truncated [ 289.321675][T19272] loop1: p5 start 460800 is beyond EOD, truncated [ 289.328169][T19272] loop1: p6 size 83886080 extends beyond EOD, truncated [ 289.462820][T19270] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 289.478382][T19270] loop2: p1 start 460800 is beyond EOD, truncated [ 289.485604][T19270] loop2: p2 size 83886080 extends beyond EOD, truncated [ 289.534160][T19270] loop2: p5 start 460800 is beyond EOD, truncated [ 289.540713][T19270] loop2: p6 size 83886080 extends beyond EOD, truncated [ 289.619856][T19303] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5292'. [ 289.993777][T19330] loop0: detected capacity change from 0 to 512 [ 290.000601][T19330] EXT4-fs: Ignoring removed nobh option [ 290.070777][T19330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5295: corrupted inode contents [ 290.103339][T19330] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.5295: mark_inode_dirty error [ 290.115265][T19330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5295: corrupted inode contents [ 290.127392][T19330] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5295: mark_inode_dirty error [ 290.139049][T19338] FAULT_INJECTION: forcing a failure. [ 290.139049][T19338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.152200][T19338] CPU: 1 UID: 0 PID: 19338 Comm: syz.7.5300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 290.152228][T19338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.152242][T19338] Call Trace: [ 290.152250][T19338] [ 290.152259][T19338] __dump_stack+0x1d/0x30 [ 290.152337][T19338] dump_stack_lvl+0xe8/0x140 [ 290.152359][T19338] dump_stack+0x15/0x1b [ 290.152377][T19338] should_fail_ex+0x265/0x280 [ 290.152446][T19338] ? __pfx_ppp_ioctl+0x10/0x10 [ 290.152546][T19338] should_fail+0xb/0x20 [ 290.152563][T19338] should_fail_usercopy+0x1a/0x20 [ 290.152585][T19338] _copy_from_user+0x1c/0xb0 [ 290.152655][T19338] memdup_user+0x5e/0xd0 [ 290.152735][T19338] ppp_get_filter+0xdb/0x160 [ 290.152838][T19338] ppp_ioctl+0xb93/0x11c0 [ 290.152867][T19338] ? __fget_files+0x184/0x1c0 [ 290.152900][T19338] ? __pfx_ppp_ioctl+0x10/0x10 [ 290.152938][T19338] __se_sys_ioctl+0xce/0x140 [ 290.152963][T19338] __x64_sys_ioctl+0x43/0x50 [ 290.152987][T19338] x64_sys_call+0x1816/0x3000 [ 290.153013][T19338] do_syscall_64+0xd2/0x200 [ 290.153101][T19338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.153133][T19338] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 290.153218][T19338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.153242][T19338] RIP: 0033:0x7f05782ef6c9 [ 290.153257][T19338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.153327][T19338] RSP: 002b:00007f0576d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.153422][T19338] RAX: ffffffffffffffda RBX: 00007f0578545fa0 RCX: 00007f05782ef6c9 [ 290.153435][T19338] RDX: 0000200000000040 RSI: 0000000040107446 RDI: 0000000000000005 [ 290.153448][T19338] RBP: 00007f0576d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.153462][T19338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.153476][T19338] R13: 00007f0578546038 R14: 00007f0578545fa0 R15: 00007ffd50f15468 [ 290.153500][T19338] [ 290.153897][T19322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19322 comm=syz.2.5298 [ 290.232610][T19330] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5295: Failed to acquire dquot type 0 [ 290.379932][T19340] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 290.389662][T19330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5295: corrupted inode contents [ 290.402022][T19330] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.5295: mark_inode_dirty error [ 290.413842][T19330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5295: corrupted inode contents [ 290.426309][T19330] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5295: mark_inode_dirty error [ 290.438208][T19330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5295: corrupted inode contents [ 290.461065][T19330] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 290.480365][T19330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5295: corrupted inode contents [ 290.492505][T19330] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.5295: mark_inode_dirty error [ 290.495386][T19347] netlink: 272 bytes leftover after parsing attributes in process `syz.8.5304'. [ 290.514203][T19330] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 290.553490][T19330] EXT4-fs (loop0): 1 truncate cleaned up [ 290.569716][T19330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.597738][T19330] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.612893][T19359] loop7: detected capacity change from 0 to 512 [ 290.721210][T19367] loop8: detected capacity change from 0 to 512 [ 290.731611][T19367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.749415][T19345] loop1: detected capacity change from 0 to 32768 [ 290.756157][T19367] ext4 filesystem being mounted at /237/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.837972][T19345] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 290.845600][T19345] loop1: p1 start 460800 is beyond EOD, truncated [ 290.852097][T19345] loop1: p2 size 83886080 extends beyond EOD, truncated [ 290.860555][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.923964][T19345] loop1: p5 start 460800 is beyond EOD, truncated [ 290.930534][T19345] loop1: p6 size 83886080 extends beyond EOD, truncated [ 291.050249][T19366] loop2: detected capacity change from 0 to 32768 [ 291.099597][T19366] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 291.104883][T19366] loop2: p1 start 460800 is beyond EOD, truncated [ 291.111328][T19366] loop2: p2 size 83886080 extends beyond EOD, truncated [ 291.127013][T19366] loop2: p5 start 460800 is beyond EOD, truncated [ 291.133562][T19366] loop2: p6 size 83886080 extends beyond EOD, truncated [ 291.142860][T19380] FAULT_INJECTION: forcing a failure. [ 291.142860][T19380] name failslab, interval 1, probability 0, space 0, times 0 [ 291.155611][T19380] CPU: 0 UID: 0 PID: 19380 Comm: syz.0.5314 Not tainted syzkaller #0 PREEMPT(voluntary) [ 291.155641][T19380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.155732][T19380] Call Trace: [ 291.155740][T19380] [ 291.155750][T19380] __dump_stack+0x1d/0x30 [ 291.155773][T19380] dump_stack_lvl+0xe8/0x140 [ 291.155794][T19380] dump_stack+0x15/0x1b [ 291.155814][T19380] should_fail_ex+0x265/0x280 [ 291.155835][T19380] should_failslab+0x8c/0xb0 [ 291.155933][T19380] __kvmalloc_node_noprof+0x12e/0x670 [ 291.155969][T19380] ? page_pool_create_percpu+0x22d/0x630 [ 291.156005][T19380] page_pool_create_percpu+0x22d/0x630 [ 291.156101][T19380] page_pool_create+0x1a/0x30 [ 291.156121][T19380] bpf_test_run_xdp_live+0x133/0x11c0 [ 291.156158][T19380] ? __pfx_autoremove_wake_function+0x10/0x10 [ 291.156173][T19380] ? 0xffffffffa02054c0 [ 291.156182][T19380] ? synchronize_rcu+0x45/0x320 [ 291.156195][T19380] ? 0xffffffffa02054c0 [ 291.156256][T19380] ? 0xffffffffa02054c0 [ 291.156357][T19380] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 291.156375][T19380] ? 0xffffffffa02054c0 [ 291.156390][T19380] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 291.156461][T19380] bpf_prog_test_run_xdp+0x525/0x970 [ 291.156481][T19380] ? kstrtouint+0x71/0xc0 [ 291.156575][T19380] ? __rcu_read_unlock+0x4f/0x70 [ 291.156593][T19380] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.156612][T19380] bpf_prog_test_run+0x22a/0x390 [ 291.156696][T19380] __sys_bpf+0x4c0/0x7c0 [ 291.156712][T19380] __x64_sys_bpf+0x41/0x50 [ 291.156791][T19380] x64_sys_call+0x2aee/0x3000 [ 291.156806][T19380] do_syscall_64+0xd2/0x200 [ 291.156856][T19380] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 291.156886][T19380] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 291.156927][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.156948][T19380] RIP: 0033:0x7f109d6bf6c9 [ 291.156964][T19380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.156981][T19380] RSP: 002b:00007f109c11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.157000][T19380] RAX: ffffffffffffffda RBX: 00007f109d915fa0 RCX: 00007f109d6bf6c9 [ 291.157109][T19380] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 291.157122][T19380] RBP: 00007f109c11f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.157137][T19380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.157151][T19380] R13: 00007f109d916038 R14: 00007f109d915fa0 R15: 00007ffcb3905268 [ 291.157246][T19380] [ 291.157255][T19380] page_pool_create_percpu() gave up with errno -12 [ 291.440644][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.606641][T19397] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5319'. [ 291.797749][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 291.797764][ T29] audit: type=1326 audit(1762687326.906:14319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 291.849951][T19410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19410 comm=syz.8.5318 [ 291.881199][ T29] audit: type=1326 audit(1762687326.946:14320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 291.905312][ T29] audit: type=1326 audit(1762687326.946:14321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 291.928922][ T29] audit: type=1326 audit(1762687326.946:14322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 291.952510][ T29] audit: type=1326 audit(1762687326.946:14323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 291.976044][ T29] audit: type=1326 audit(1762687326.946:14324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 291.990213][T19414] loop0: detected capacity change from 0 to 512 [ 291.999674][ T29] audit: type=1326 audit(1762687326.946:14325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 292.028277][T19414] EXT4-fs: Ignoring removed nobh option [ 292.029474][ T29] audit: type=1326 audit(1762687326.946:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 292.058707][ T29] audit: type=1326 audit(1762687326.946:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 292.082306][ T29] audit: type=1326 audit(1762687326.946:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.0.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 292.169771][T19414] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5322: corrupted inode contents [ 292.182121][T19414] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.5322: mark_inode_dirty error [ 292.194540][T19414] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.5322: corrupted inode contents [ 292.244562][T19414] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.5322: mark_inode_dirty error [ 292.265003][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.272278][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.289182][T19414] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5322: Failed to acquire dquot type 0 [ 292.309175][T19426] bridge0: entered allmulticast mode [ 292.318551][T19414] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5322: corrupted inode contents [ 292.331134][T19426] bridge_slave_1: left allmulticast mode [ 292.336787][T19426] bridge_slave_1: left promiscuous mode [ 292.342503][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.360734][T19414] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.5322: mark_inode_dirty error [ 292.379659][T19414] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5322: corrupted inode contents [ 292.391712][T19426] bridge_slave_0: left allmulticast mode [ 292.397364][T19426] bridge_slave_0: left promiscuous mode [ 292.403126][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.419740][T19414] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5322: mark_inode_dirty error [ 292.439514][T19414] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5322: corrupted inode contents [ 292.471710][T19414] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 292.492557][T19414] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5322: corrupted inode contents [ 292.511544][T19414] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.5322: mark_inode_dirty error [ 292.529839][T19414] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 292.541007][T19414] EXT4-fs (loop0): 1 truncate cleaned up [ 292.547093][T19414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.560098][T19414] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.774302][T19446] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5332'. [ 292.829586][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.853112][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5334'. [ 292.866034][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5334'. [ 293.005587][T19440] loop2: detected capacity change from 0 to 32768 [ 293.049589][T19440] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 293.054882][T19440] loop2: p1 start 460800 is beyond EOD, truncated [ 293.061375][T19440] loop2: p2 size 83886080 extends beyond EOD, truncated [ 293.069862][T19440] loop2: p5 start 460800 is beyond EOD, truncated [ 293.076319][T19440] loop2: p6 size 83886080 extends beyond EOD, truncated [ 293.132660][T19464] bridge0: entered allmulticast mode [ 293.279590][T19454] loop0: detected capacity change from 0 to 32768 [ 293.309892][T19454] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 293.316589][T19454] loop0: p1 start 460800 is beyond EOD, truncated [ 293.323072][T19454] loop0: p2 size 83886080 extends beyond EOD, truncated [ 293.369436][T19454] loop0: p5 start 460800 is beyond EOD, truncated [ 293.375897][T19454] loop0: p6 size 83886080 extends beyond EOD, truncated [ 293.388796][T19480] loop1: detected capacity change from 0 to 512 [ 293.415704][T19480] EXT4-fs: Ignoring removed nobh option [ 293.452129][T19480] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.5343: corrupted inode contents [ 293.479542][T19480] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.5343: mark_inode_dirty error [ 293.530079][T19480] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.5343: corrupted inode contents [ 293.607158][T19480] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.5343: mark_inode_dirty error [ 293.608475][T19488] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5344'. [ 293.673181][T19480] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.5343: Failed to acquire dquot type 0 [ 293.764273][T19474] loop8: detected capacity change from 0 to 32768 [ 293.790268][T19480] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5343: corrupted inode contents [ 293.849266][T19480] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.5343: mark_inode_dirty error [ 293.869920][T19474] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 293.875194][T19474] loop8: p1 start 460800 is beyond EOD, truncated [ 293.881785][T19474] loop8: p2 size 83886080 extends beyond EOD, truncated [ 293.909758][T19480] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5343: corrupted inode contents [ 293.929643][T19474] loop8: p5 start 460800 is beyond EOD, truncated [ 293.936131][T19474] loop8: p6 size 83886080 extends beyond EOD, truncated [ 293.960009][T19480] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5343: mark_inode_dirty error [ 293.989308][T19480] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5343: corrupted inode contents [ 294.046667][T19480] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 294.089760][T19480] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.5343: corrupted inode contents [ 294.129305][T19480] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.5343: mark_inode_dirty error [ 294.171237][T19480] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 294.191032][T19480] EXT4-fs (loop1): 1 truncate cleaned up [ 294.197223][T19480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.237503][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5346'. [ 294.259176][T19480] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.298196][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5346'. [ 294.442969][T12418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.655861][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 294.690969][T19504] tipc: Failed to obtain node identity [ 294.696493][T19504] tipc: Enabling of bearer rejected, failed to enable media [ 294.731595][T19504] loop1: detected capacity change from 0 to 2048 [ 294.772676][T19512] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.779924][T19512] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.798466][T19512] bridge0: entered allmulticast mode [ 294.811506][T19512] bridge_slave_1: left allmulticast mode [ 294.817190][T19512] bridge_slave_1: left promiscuous mode [ 294.822871][T19512] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.831712][T19512] bridge_slave_0: left allmulticast mode [ 294.837380][T19512] bridge_slave_0: left promiscuous mode [ 294.843206][T19512] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.005795][T19527] loop8: detected capacity change from 0 to 512 [ 295.013060][T19527] EXT4-fs: Ignoring removed nobh option [ 295.031346][T19527] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5357: corrupted inode contents [ 295.044214][T19527] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.5357: mark_inode_dirty error [ 295.056581][T19527] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5357: corrupted inode contents [ 295.068792][T19527] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.5357: mark_inode_dirty error [ 295.081268][T19527] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5357: Failed to acquire dquot type 0 [ 295.093592][T19527] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5357: corrupted inode contents [ 295.105922][T19527] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.5357: mark_inode_dirty error [ 295.117660][T19527] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5357: corrupted inode contents [ 295.117773][T19525] loop2: detected capacity change from 0 to 32768 [ 295.136999][T19527] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5357: mark_inode_dirty error [ 295.148476][T19527] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5357: corrupted inode contents [ 295.160697][T19527] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 295.169977][T19527] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5357: corrupted inode contents [ 295.182063][T19527] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5357: mark_inode_dirty error [ 295.189521][T19525] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 295.193278][T19527] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 295.198496][T19525] loop2: p1 start 460800 is beyond EOD, truncated [ 295.209628][T19527] EXT4-fs (loop8): 1 truncate cleaned up [ 295.213731][T19525] loop2: p2 size 83886080 extends beyond EOD, truncated [ 295.219978][T19527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.227686][T19525] loop2: p5 start 460800 is beyond EOD, truncated [ 295.238931][T19527] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.245221][T19525] loop2: p6 size 83886080 extends beyond EOD, truncated [ 295.324980][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5359'. [ 295.338148][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5359'. [ 295.348508][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.745969][T19568] loop1: detected capacity change from 0 to 512 [ 295.842984][T19571] loop7: detected capacity change from 0 to 512 [ 295.901316][T19571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.914378][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5372'. [ 295.919229][T19571] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.950571][T19571] EXT4-fs (loop7): shut down requested (0) [ 296.161046][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.405505][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5383'. [ 296.512325][T19612] loop2: detected capacity change from 0 to 512 [ 296.554836][T19612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.567510][T19616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19616 comm=syz.0.5382 [ 296.590388][T19612] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.650932][T19612] EXT4-fs (loop2): shut down requested (0) [ 296.756345][T19631] loop8: detected capacity change from 0 to 512 [ 296.782883][T19631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.796118][T19631] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.818022][T19639] geneve2: entered promiscuous mode [ 296.823672][T19639] geneve2: entered allmulticast mode [ 296.828222][T11544] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.832377][T19631] EXT4-fs (loop8): shut down requested (0) [ 296.848118][T19635] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5392'. [ 296.870385][T19642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5394'. [ 296.927445][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 296.927463][ T29] audit: type=1326 audit(1762687332.026:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19652 comm="syz.0.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 296.952145][T19660] FAULT_INJECTION: forcing a failure. [ 296.952145][T19660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.970520][T19660] CPU: 1 UID: 0 PID: 19660 Comm: syz.0.5400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 296.970552][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.970608][T19660] Call Trace: [ 296.970616][T19660] [ 296.970625][T19660] __dump_stack+0x1d/0x30 [ 296.970652][T19660] dump_stack_lvl+0xe8/0x140 [ 296.970684][T19660] dump_stack+0x15/0x1b [ 296.970703][T19660] should_fail_ex+0x265/0x280 [ 296.970740][T19660] should_fail_alloc_page+0xf2/0x100 [ 296.970797][T19660] __alloc_frozen_pages_noprof+0xff/0x360 [ 296.970852][T19660] alloc_pages_mpol+0xb3/0x260 [ 296.970877][T19660] alloc_pages_noprof+0x90/0x130 [ 296.970902][T19660] __pmd_alloc+0x47/0x420 [ 296.970931][T19660] handle_mm_fault+0x19d4/0x2be0 [ 296.971014][T19660] ? check_vma_flags+0x26e/0x340 [ 296.971046][T19660] __get_user_pages+0x102a/0x1ed0 [ 296.971083][T19660] get_user_pages_remote+0x1d5/0x6c0 [ 296.971112][T19660] ? down_read+0x77/0xe0 [ 296.971190][T19660] get_arg_page+0x8e/0x1e0 [ 296.971216][T19660] copy_string_kernel+0x12c/0x1f0 [ 296.971255][T19660] do_execveat_common+0x5ad/0x750 [ 296.971285][T19660] ? getname_flags+0x154/0x3b0 [ 296.971320][T19660] __x64_sys_execveat+0x73/0x90 [ 296.971349][T19660] x64_sys_call+0x1fec/0x3000 [ 296.971436][T19660] do_syscall_64+0xd2/0x200 [ 296.971464][T19660] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 296.971502][T19660] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 296.971572][T19660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.971597][T19660] RIP: 0033:0x7f109d6bf6c9 [ 296.971613][T19660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.971635][T19660] RSP: 002b:00007f109c11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 296.971656][T19660] RAX: ffffffffffffffda RBX: 00007f109d915fa0 RCX: 00007f109d6bf6c9 [ 296.971740][T19660] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 296.971754][T19660] RBP: 00007f109c11f090 R08: 0000000000001000 R09: 0000000000000000 [ 296.971769][T19660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.971784][T19660] R13: 00007f109d916038 R14: 00007f109d915fa0 R15: 00007ffcb3905268 [ 296.971864][T19660] [ 297.038217][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5398'. [ 297.040065][ T29] audit: type=1326 audit(1762687332.026:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19652 comm="syz.0.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.049855][T19664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5398'. [ 297.050082][ T29] audit: type=1326 audit(1762687332.026:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19652 comm="syz.0.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.167678][T19674] loop0: detected capacity change from 0 to 2048 [ 297.287752][T19674] EXT4-fs: Mount option(s) incompatible with ext2 [ 297.428418][T19684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5405'. [ 297.471847][ T29] audit: type=1326 audit(1762687332.586:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.496215][ T29] audit: type=1326 audit(1762687332.586:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.520398][ T29] audit: type=1326 audit(1762687332.586:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.544432][ T29] audit: type=1326 audit(1762687332.586:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.568834][ T29] audit: type=1326 audit(1762687332.586:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.593090][ T29] audit: type=1326 audit(1762687332.586:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.617196][ T29] audit: type=1326 audit(1762687332.586:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19686 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 297.720104][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.735159][T19689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19689 comm=syz.7.5404 [ 297.799205][T19704] loop1: detected capacity change from 0 to 128 [ 297.808690][T19704] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.827970][T19704] ext4 filesystem being mounted at /493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.861785][T12418] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.073167][T19716] tipc: Enabling of bearer rejected, already enabled [ 298.108678][T19716] loop0: detected capacity change from 0 to 2048 [ 298.743552][T19747] loop2: detected capacity change from 0 to 32768 [ 298.789740][T19747] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 298.804925][T19747] loop2: p1 start 460800 is beyond EOD, truncated [ 298.811521][T19747] loop2: p2 size 83886080 extends beyond EOD, truncated [ 298.822642][T19756] tipc: Failed to obtain node identity [ 298.828141][T19756] tipc: Enabling of bearer rejected, failed to enable media [ 298.838154][T19747] loop2: p5 start 460800 is beyond EOD, truncated [ 298.844669][T19747] loop2: p6 size 83886080 extends beyond EOD, truncated [ 298.868736][T19756] loop1: detected capacity change from 0 to 2048 [ 298.937805][T19759] loop8: detected capacity change from 0 to 512 [ 298.952052][T19759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.969585][T19759] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.008448][T19759] EXT4-fs (loop8): shut down requested (0) [ 299.182497][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.247077][T19772] loop8: detected capacity change from 0 to 512 [ 299.254218][T19772] EXT4-fs: Ignoring removed nobh option [ 299.270567][T19772] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5435: corrupted inode contents [ 299.297630][T19772] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.5435: mark_inode_dirty error [ 299.343519][T19772] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.5435: corrupted inode contents [ 299.365869][T19772] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.5435: mark_inode_dirty error [ 299.386758][T19789] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.394184][T19789] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.401803][T19789] bridge0: entered allmulticast mode [ 299.407346][T19772] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.5435: Failed to acquire dquot type 0 [ 299.421892][T19772] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5435: corrupted inode contents [ 299.443276][T19772] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.5435: mark_inode_dirty error [ 299.457090][T19772] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5435: corrupted inode contents [ 299.494184][T19772] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5435: mark_inode_dirty error [ 299.518779][T19772] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5435: corrupted inode contents [ 299.539390][T19772] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 299.548664][T19772] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.5435: corrupted inode contents [ 299.573153][T19772] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5435: mark_inode_dirty error [ 299.604245][T19772] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 299.635671][T19772] EXT4-fs (loop8): 1 truncate cleaned up [ 299.652367][T19772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.678665][T19772] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.787573][T19808] loop0: detected capacity change from 0 to 1024 [ 299.809306][T19808] ext4: Unknown parameter 'nouser_xattr' [ 299.850240][T16651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.864369][T19817] tipc: Failed to obtain node identity [ 299.869897][T19817] tipc: Enabling of bearer rejected, failed to enable media [ 299.895901][T19817] loop7: detected capacity change from 0 to 2048 [ 299.905686][T19821] netlink: 'syz.2.5451': attribute type 13 has an invalid length. [ 299.977270][T19830] __nla_validate_parse: 9 callbacks suppressed [ 299.977359][T19830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5451'. [ 300.031079][T19835] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.282178][T19821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.295630][T19821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.347735][T19821] tipc: Resetting bearer [ 300.359890][T19845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19845 comm=syz.8.5458 [ 300.425795][ T6922] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.446148][ T6922] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.463892][ T6922] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.474705][ T6922] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.640899][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 300.650008][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 300.658953][T19854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5463'. [ 300.840309][T19869] loop7: detected capacity change from 0 to 512 [ 300.850677][T19869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.856293][T19867] netlink: 272 bytes leftover after parsing attributes in process `syz.8.5469'. [ 300.863357][T19869] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.922188][T19869] EXT4-fs (loop7): shut down requested (0) [ 301.081541][T16817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.254747][T19902] netlink: 272 bytes leftover after parsing attributes in process `syz.7.5480'. [ 301.296776][T19907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19907 comm=syz.2.5475 [ 301.619245][T19918] tipc: Enabling of bearer rejected, already enabled [ 301.654841][T19918] loop0: detected capacity change from 0 to 2048 [ 301.731162][T19932] loop0: detected capacity change from 0 to 512 [ 301.748349][T19932] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.778300][T19932] EXT4-fs (loop0): 1 truncate cleaned up [ 301.798163][T19932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.827193][T19932] random: crng reseeded on system resumption [ 301.869005][T19938] netlink: 272 bytes leftover after parsing attributes in process `syz.7.5492'. [ 301.918939][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.945032][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 301.945049][ T29] audit: type=1326 audit(1762687337.056:14521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19946 comm="syz.0.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 302.006485][ T29] audit: type=1326 audit(1762687337.056:14522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19946 comm="syz.0.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 302.030423][ T29] audit: type=1326 audit(1762687337.086:14523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19946 comm="syz.0.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 302.054150][ T29] audit: type=1326 audit(1762687337.086:14524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19946 comm="syz.0.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 302.077883][ T29] audit: type=1326 audit(1762687337.086:14525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19946 comm="syz.0.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109d6bf6c9 code=0x7ffc0000 [ 302.194887][T19954] ================================================================== [ 302.203087][T19954] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 302.210157][T19954] [ 302.212912][T19954] write to 0xffff888237d1b2a0 of 8 bytes by interrupt on cpu 1: [ 302.220557][T19954] hrtimer_interrupt+0x193/0x460 [ 302.225503][T19954] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 302.231420][T19954] sysvec_apic_timer_interrupt+0x6f/0x80 [ 302.237085][T19954] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.243076][T19954] _raw_spin_unlock_irq+0x2f/0x50 [ 302.248125][T19954] get_signal+0xc21/0xf70 [ 302.252478][T19954] arch_do_signal_or_restart+0x96/0x440 [ 302.258134][T19954] exit_to_user_mode_loop+0x77/0x110 [ 302.263629][T19954] do_syscall_64+0x1d6/0x200 [ 302.268318][T19954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.274238][T19954] [ 302.276559][T19954] read to 0xffff888237d1b2a0 of 8 bytes by task 19954 on cpu 0: [ 302.284216][T19954] print_cpu+0x2ea/0x660 [ 302.288461][T19954] timer_list_show+0x107/0x170 [ 302.293230][T19954] seq_read_iter+0x31e/0x950 [ 302.297825][T19954] proc_reg_read_iter+0x110/0x180 [ 302.302944][T19954] copy_splice_read+0x442/0x660 [ 302.307923][T19954] splice_direct_to_actor+0x26f/0x680 [ 302.313749][T19954] do_splice_direct+0xda/0x150 [ 302.318523][T19954] do_sendfile+0x380/0x650 [ 302.322991][T19954] __x64_sys_sendfile64+0x105/0x150 [ 302.328204][T19954] x64_sys_call+0x2bb4/0x3000 [ 302.332882][T19954] do_syscall_64+0xd2/0x200 [ 302.337388][T19954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.343280][T19954] [ 302.345625][T19954] value changed: 0x000000465b1392ee -> 0x000000465b140dfe [ 302.352728][T19954] [ 302.355055][T19954] Reported by Kernel Concurrency Sanitizer on: [ 302.361282][T19954] CPU: 0 UID: 0 PID: 19954 Comm: syz.0.5497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.371083][T19954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.381133][T19954] ================================================================== [ 302.455427][ T29] audit: type=1401 audit(1762687337.566:14526): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 302.499553][T19957] tipc: Failed to obtain node identity [ 302.505067][T19957] tipc: Enabling of bearer rejected, failed to enable media [ 302.526612][T19957] loop1: detected capacity change from 0 to 2048 [ 302.789542][T19958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=19958 comm=syz.0.5497