last executing test programs: 16m28.393661668s ago: executing program 3 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xd, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m28.352877359s ago: executing program 3 (id=761): r0 = syz_io_uring_setup(0xef, &(0x7f0000000300)={0x0, 0xdeef, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000080) 16m28.331508879s ago: executing program 3 (id=763): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380), 0x4) 16m28.29886049s ago: executing program 3 (id=765): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89d0ae3e, 0x0, 0x1, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000500)='./file0\x00') 16m28.218349991s ago: executing program 3 (id=769): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000380)={0x0, 0x80000000, 0xfffffffffffffe83}, 0x0) 16m27.984879386s ago: executing program 3 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x85}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 16m27.931764136s ago: executing program 32 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x85}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 5m50.587639487s ago: executing program 5 (id=7731): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x10}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private=0xa010102, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x122}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800400080039503230"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5m50.572287827s ago: executing program 5 (id=7732): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) lstat(&(0x7f0000000200)='./file0\x00', 0x0) unshare(0x22020600) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x0, 0x4) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010001000000000002000700", @ANYRES32, @ANYBLOB="040000000000000008ed0700", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000400000000002000060000000000"], 0x3c, 0x2) 5m50.525580668s ago: executing program 5 (id=7733): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@remote, 0x0, 0x57, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@local, 0x3507, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x10000000}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x20) 5m49.269471941s ago: executing program 5 (id=7748): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x800000000008, 0x6) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x40008, &(0x7f00000001c0)={[{@grpid}, {@dioread_nolock}]}, 0x4, 0x4f7, &(0x7f0000000f80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xc8, 0x10001, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0xe}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@nouid32}, {@grpid}, {@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 5m48.80911594s ago: executing program 5 (id=7751): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0xcc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff801}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0xca, 0x5a, 0xeb, 0x0, 0x2cb7, 0x106, 0x5861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x30, 0x0, [{{0x9, 0x4, 0xa3, 0x5, 0x0, 0xff, 0x2a, 0x4c, 0x6}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x80085502, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000300)={0x1ff, 0x2, {0xffffffffffffffff, 0x0, 0x3, 0x3, 0xffff}, 0x7}) 5m46.778406858s ago: executing program 5 (id=7782): socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000001800000002000000000000040000000d020000000e00000000000005001800000000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x28) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x4) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080011400000000005001500020000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fchmod(r8, 0x148) 5m46.727453689s ago: executing program 33 (id=7782): socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000001800000002000000000000040000000d020000000e00000000000005001800000000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x28) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x4) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080011400000000005001500020000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fchmod(r8, 0x148) 1m10.448044525s ago: executing program 1 (id=12633): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) get_robust_list(0x0, 0x0, &(0x7f0000000580)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000140), 0x31f9, r1}, 0x38) fsopen(&(0x7f0000000240)='befs\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_fc_cleanup\x00'}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(r2, 0x4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6401000019000100fcffffff00000000e0000002000000000000000000000000fe8000000000000000000000000000aa0000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/279, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000001000000000000003500000000000000090000000000000009000000000000000c0b000000000000010000000000000007000000000000007ffffffffffffffffaffffffffffffff07000000"], 0x164}}, 0x0) eventfd2(0x9, 0x100001) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) 1m10.259849578s ago: executing program 1 (id=12645): mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000130a030009e8bfffde00"/24], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x204c1, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) 1m10.010799253s ago: executing program 1 (id=12636): unshare(0x22020600) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x80, 0x400, 0x2de}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030000000000000008000100"], 0x20}}, 0x0) 1m9.877306644s ago: executing program 1 (id=12639): mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x1, 0x246, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = open(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', 0x26041, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x4008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400e315c2ad72b7b42c30ffcb0200130a0300000400008000ecd2de041c00005e6700000000000000ea396c38ad46ad5ea9d2c9858f14737d7d"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0xc) socket(0x3, 0x3, 0xfffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x1, 0x4, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4ea2, 0x5}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffff"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f00000002c0)=0x1, 0x4) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x44b, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m9.680222808s ago: executing program 1 (id=12644): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x3, 0x20a}, &(0x7f0000000540)=0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_io_uring_setup(0x66d4, &(0x7f0000000740)={0x0, 0xc151, 0x1000, 0x1, 0x1c, 0x0, r1}, &(0x7f00000007c0), &(0x7f0000000800)=0x0) syz_io_uring_submit(r2, r11, &(0x7f0000000840)=@IORING_OP_NOP={0x0, 0x8}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x2d) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) close_range(r6, r7, 0x0) connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() 1m8.9686299s ago: executing program 1 (id=12653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) truncate(0x0, 0x5e02) 1m8.96828139s ago: executing program 34 (id=12653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) truncate(0x0, 0x5e02) 4.105190041s ago: executing program 4 (id=13797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008802) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1dfd3614b4f337dc70014ca3b9cb342b158ebcabd07276e834ab59a0796828630f69cb9be443c2697cf24d40b886dd6956ae7db190e1b14fdc3efa1c19600ebc6ecbd013699197bf8b6809b2f1e54c68568c522e762159e46c71dca992b97b3d79fc9402c78b3da0614c2e53f065b7e08d06328c4591f5b612151f1a2eb1c78814fbdc088437739fe04d3ac870383c90cd53ea76bc12912bdd5040c194b72865b64745b2a4c0ceb4f1a0f6d6cccc4bae278b9d2d674657e63b963357253c853bcc63cfd6e0bf1aab60bb1c4e911c5b5624d046dc42f0d5c11f05059bf0eece3518c8c6bd5a5c7b5f32af09b8bfd258d5f3bdc77eeefbd505e9a9159ace296290c", 0x102}], 0x1, &(0x7f0000000140)=[@hopopts={{0x28, 0x29, 0x36, {0x73, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x10, 0x2}}]}}}], 0x28}}], 0x2, 0x4000840) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = io_uring_setup(0x1ec1, &(0x7f0000000040)={0x0, 0xcba1, 0x8, 0x3, 0x2c0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000004e80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.923758654s ago: executing program 4 (id=13807): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x82) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000073000000004710000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='rxrpc_rtt_tx\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=tcp']) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') lseek(r5, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f00000004c0)="9b15e40602a491d9b223a06b7c7515a244cc9806b767233ba0588fd93f4be1e1175c39c9e17215b7b6a25b93f41d915fa2f15fcf0873a75c39b920cc28a97cfd6b91b43e86012ae453864dde625865ca3c7f6fec3ee0f5c8231b7b477d2d9cf711e218c868a4d8cda76350ea49d9d8c3a3a0e37cb93d74f326ad40b6dd4f0d16cde475545518c9729c56b0256c236af8518dbb78a9943092d9a5f8d3d871734c18d6fd0d80bc687a8f4ff7bec8ddcadf", 0xb0}, {&(0x7f0000000580)="ed781345800e05198afe028fc3a815010f2488df79ca7d84f947dbb046fee1e898c54eb87bf33ec5f8ab04121cf5202bebbf43ab9823815ac860dc2fe310b1f8b1c981fa4fbc1393963d93e5f5afdbca30976c150bbead8d78b4652bd36e03ac6ab5bfceceb6fedb505b1219879a8cdf6b9c8d8917bf69544ee1bcb8c931e26bd3f00f9923d335", 0x87}, {&(0x7f0000000680)="7df73583eb856014cca763c38f69264143e8e86a828d729515ad1f19192ea14b1fd4d0ca9b3cfb609224c7a5764287b7e947c4557ac1dc15a1c94532cc1a9b09cd07000bb18a4e2a8c5da3992a46e2706bcf33ccf6f1815ea19224daf9ebc126aec33a22f42e407b36e6d5f2c835851e2dc4bee7e0a6b5b6f41ef8", 0x7b}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/432], 0x1b0}, 0x0) r7 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r7, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.494491171s ago: executing program 4 (id=13826): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 3.437710292s ago: executing program 4 (id=13829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f00000000c0)="92b062356627", 0x6}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x6) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@private0}, &(0x7f0000000080)=0x14) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000640)=0x4) fsopen(0x0, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0xd4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) r8 = socket$inet6(0xa, 0x80000, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4000080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r10, &(0x7f0000000140)='./file0\x00', r10, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@private2, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x2, 0x39a, 0x500, 0x9, 0x200000, r11}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) 1.676015312s ago: executing program 2 (id=13863): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a1e1f7, 0x0, @perf_config_ext={0x0, 0x1}, 0x14658, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="fa65021006d5c5706da6a9793ed81985842717c37fad7cc10146c50f4cf17ec694a373ae8d9157116ff93103fbdc28a35e9908ed739f2f1996f394940a2dc1b04c1f9137507a1ba98e2953282413d75f7ab6cb40ae6d7a5b4d9827936e03b445d8878a1f1057223c6d4e11c33dc348adbc0b809d608f25586a308e848537dfe26ee1164b0b834d1df721d4852dc5e80b7ce0a1acc2aab68b5152c526c214d15d96b9e6c7dd5931014806b4ac5e92a492"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0xd, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x15e81, 0x1}, 0x50) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="68ed9003c0c299eba4ed2acb0f38b7bdcd8fc81659c985ea857b904c661bc7183ed4a2e7307b9886207e4e6cf486ab68c104b5ba50eb6fbaadc4872ca072cdda28415d7fb5"], 0x1c}}, 0x0) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r5) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) write$cgroup_pid(r5, &(0x7f0000000040)=r11, 0x12) 1.558199004s ago: executing program 6 (id=13868): r0 = creat(&(0x7f0000000940)='./file0\x00', 0x24c) close(r0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000080000000000400000001"], 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') exit(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) openat(r5, &(0x7f0000000400)='./file0\x00', 0x80000, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x401}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000008c0)={0x1ff, 0xa, 0x40, 0x400, r9}, &(0x7f0000000900)=0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc000000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0000000000000000000000ecffffff000000000000000000080000000000000200000000000000000000000000000000000000000000f5ff0000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000004000500"], 0xbc}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fgetxattr(r4, &(0x7f0000000380)=ANY=[@ANYBLOB='u\x00er.\x00'], &(0x7f00000003c0)=""/35, 0x23) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x3}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200000, 0x30046, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 803.834937ms ago: executing program 2 (id=13892): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b45, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 767.502657ms ago: executing program 7 (id=13894): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffee6, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000700)={0x25c0, 0x800, 0xa, 0x80}) socket(0x9, 0xa, 0x3e8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = geteuid() quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r3, &(0x7f0000000000)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_open_procfs(0x0, &(0x7f0000000280)='net/ptype\x00') readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "1578d97081e8b32c00007701f09c1fb8624dc19f22ab0000001908e1d7bd2c5490af604cd351000000001000", 0x4024}, 0x48, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r4, &(0x7f00000003c0)=""/45, 0x2d, 0x40000040, 0x0, 0x0) 767.097787ms ago: executing program 2 (id=13895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000640)='net/icmp6\x00') 738.602558ms ago: executing program 2 (id=13896): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet(0x2, 0x80001, 0x84) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r11}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 719.271348ms ago: executing program 7 (id=13897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008802) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1dfd3614b4f337dc70014ca3b9cb342b158ebcabd07276e834ab59a0796828630f69cb9be443c2697cf24d40b886dd6956ae7db190e1b14fdc3efa1c19600ebc6ecbd013699197bf8b6809b2f1e54c68568c522e762159e46c71dca992b97b3d79fc9402c78b3da0614c2e53f065b7e08d06328c4591f5b612151f1a2eb1c78814fbdc088437739fe04d3ac870383c90cd53ea76bc12912bdd5040c194b72865b64745b2a4c0ceb4f1a0f6d6cccc4bae278b9d2d674657e63b963357253c853bcc63cfd6e0bf1aab60bb1c4e911c5b5624d046dc42f0d5c11f05059bf0eece3518c8c6bd5a5c7b5f32af09b8bfd258d5f3bdc77eeefbd505e9a9159ace296290c", 0x102}], 0x1, &(0x7f0000000140)=[@hopopts={{0x48, 0x29, 0x36, {0x73, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x10, 0x2, [0x0, 0x1, 0x0, 0x4]}}]}}}], 0x48}}], 0x2, 0x4000840) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980", 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = io_uring_setup(0x1ec1, &(0x7f0000000040)={0x0, 0xcba1, 0x8, 0x3, 0x2c0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000004e80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 690.350678ms ago: executing program 6 (id=13898): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x3, &(0x7f0000000280)=""/166, 0xa6) 623.487479ms ago: executing program 0 (id=13899): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x4820) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02080000000100000080002000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c060000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r3, @ANYBLOB="000000920000000000b70800030000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000d00"/28], 0x50) unshare(0x2c020400) unshare(0xc000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0xc000) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x2000c410) faccessat(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) 619.54942ms ago: executing program 7 (id=13900): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 577.50814ms ago: executing program 7 (id=13901): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x82) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000073000000004710000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='rxrpc_rtt_tx\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=tcp']) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') lseek(r5, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f00000004c0)="9b15e40602a491d9b223a06b7c7515a244cc9806b767233ba0588fd93f4be1e1175c39c9e17215b7b6a25b93f41d915fa2f15fcf0873a75c39b920cc28a97cfd6b91b43e86012ae453864dde625865ca3c7f6fec3ee0f5c8231b7b477d2d9cf711e218c868a4d8cda76350ea49d9d8c3a3a0e37cb93d74f326ad40b6dd4f0d16cde475545518c9729c56b0256c236af8518dbb78a9943092d9a5f8d3d871734c18d6fd0d80bc687a8f4ff7bec8ddcadf", 0xb0}, {&(0x7f0000000580)="ed781345800e05198afe028fc3a815010f2488df79ca7d84f947dbb046fee1e898c54eb87bf33ec5f8ab04121cf5202bebbf43ab9823815ac860dc2fe310b1f8b1c981fa4fbc1393963d93e5f5afdbca30976c150bbead8d78b4652bd36e03ac6ab5bfceceb6fedb505b1219879a8cdf6b9c8d8917bf69544ee1bcb8c931e26bd3f00f9923d335", 0x87}, {&(0x7f0000000680)="7df73583eb856014cca763c38f69264143e8e86a828d729515ad1f19192ea14b1fd4d0ca9b3cfb609224c7a5764287b7e947c4557ac1dc15a1c94532cc1a9b09cd07000bb18a4e2a8c5da3992a46e2706bcf33ccf6f1815ea19224daf9ebc126aec33a22f42e407b36e6d5f2c835851e2dc4bee7e0a6b5b6f41ef8", 0x7b}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/432], 0x1b0}, 0x0) r7 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r7, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 557.242781ms ago: executing program 0 (id=13902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x4820) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02080000000100000080002000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000030007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c5fecb4896b303e923cb53d82883f9efe0c0a9471dc4d770755927a574c3c6efb638cf98862fda9e87fac800f7018763bbc8de877326e0f8fc8f0672a6735d5d193d3cd99b7fa991dced2f0807ac45282f6a5cabed0079ba9330388388e1099d14d0bc24124230235e23ec786cb597a549c51ccfe490416edccc4fa350f08af8ee1b96d0f993e2925fa0f76a587116aea545f5d1b67297255917e6cfc6bf9c4af29b3a4543a0ae87d28d165ed9e8ee6d554c8b387f54b946487650be12f765407be474e9043c6c2d1c03a7adef38cbb36e3b1832e9d66b4ed57478fd1cb3f7ed7bf85c4ee57317ce0e4e281145721619851e938ec9b017c5b3211a3b2844daf948bff862881a328ffc72a3199e010000003ddb062b9a9612870ab4b71125ce837a65f14c37f39baff0763a630bfbf138568cb4d554a44b88357362bd72ea8dd175041e6dae6c6ad927fc86d27b325a4aa470b3e79a431c91435a0bcc1b76155f990072ecb44d30b632a890913479429095e2ab5c7d4133716d27f56a391326fd33e8fef71f42190850a3089303d49466d2ca47168052676bea43820d57ca8d4ad2", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c060000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000920000000000b70800030000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="b45478037246f9552ee40a98738926fcdff504a55f63d20d5b56a6f96249a51763c2149616640000000000", @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000010000000200000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000d00"/28], 0x50) unshare(0x2c020400) unshare(0xc000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0xc000) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x2000c410) faccessat(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) 517.963592ms ago: executing program 6 (id=13903): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syslog(0x3, &(0x7f0000000280)=""/166, 0xa6) 404.864043ms ago: executing program 0 (id=13904): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffee6, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 404.017823ms ago: executing program 4 (id=13905): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffee6, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000700)={0x25c0, 0x800, 0xa, 0x80}) socket(0x9, 0xa, 0x3e8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = geteuid() quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r3, &(0x7f0000000000)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_open_procfs(0x0, &(0x7f0000000280)='net/ptype\x00') readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "1578d97081e8b32c00007701f09c1fb8624dc19f22ab0000001908e1d7bd2c5490af604cd351000000001000", 0x4024}, 0x48, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d, 0x40000040, 0x0, 0x0) 375.435254ms ago: executing program 2 (id=13906): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x48) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x3, 0x5, 0x10, 0x0, 0x7, 0x89008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc47, 0x0, @perf_config_ext={0x400000000000, 0xfffffffffffffffc}, 0x2000, 0x8, 0x7fff7efc, 0x3, 0x2, 0x0, 0x4010, 0x0, 0xfb, 0x0, 0x1}, 0x0, 0x100000000008, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETSF2(r2, 0x5432, 0x0) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) execve(0x0, 0x0, 0x0) 359.721824ms ago: executing program 7 (id=13907): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) io_setup(0x1fc, &(0x7f0000000140)=0x0) io_submit(r0, 0x1, &(0x7f0000001780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xc, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f00000000c0)={[{@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0xff, 0x248, &(0x7f0000000d80)="$eJzs3T9oJFUcB/DvzO7embtFTm0E8Q+IiAbC2Qk2Z+PBgRyHiKDCiYiNciecF+wSKxsLrY2ksgliZ7SUNMFGEayipoiNoMHCYKHFyuxsJCYr0WzckcznA/MveW9+b5j5vt1m2ACtdS7JhSSdJLNJekmKvQ3uq5dzo8PlmfWryWDw1M/FsF19XNvtdzbJYpJHk6yVRV7pJvOrz239unHxwbdv9h74YPXZmale5Mj21uaTO+9ffuvjS4/Mf/n1j5eLXEj/L9d1/Ioxf+sWye3/RbH/iaLb9Aj4J6688dE3Ve7vSHL/MP+9lKlv3js3Tq318vDS3/V996ev7prmWIHjNxj0qs/AxQHQOmWSfopyLkm9X5Zzc/V3+G87Z8pXr994ffbl6zevvdT0TAUcl36y+cSnpz85uy//P3Tq/AMnV5X/p6+sfFft73SaHg0wFXfXmyr/sy8sPBT5h9aRf2gv+Yf2kn9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9or735BwDaZXD6kBeEly6OGgInTdPzDwAAAAAAAAAAAAAAAAAAcNDyzPrV3WVaNT9/L9l+PEl3XP3O8PeIk1uG6zO/FFWzPxV1t4k8f++EJzi6U9Xqw4bfvr71+2brf3FPs/UXriWLbyY53+0efP6K0fN3dLcd8v/eixMW+JeKfcePPTPd+vv9vtJs/UsbyWfV/HN+3PxT5s7hdvz806/u34T1X/ttwhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNX8EAAD//7dQZjg=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x48a, &(0x7f0000000540)={[{}, {@usrjquota, 0x22}, {@errors_continue}, {@inlinecrypt}, {@data_err_abort}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {}, {@init_itable}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) r2 = semget$private(0x0, 0x5, 0x0) semtimedop(r2, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0) semop(r2, &(0x7f00000007c0)=[{0x4, 0x81}, {0x0, 0xfffd, 0x1000}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg2\x00'}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20000000) close(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000500)={[{@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0xff, 0x247, &(0x7f0000000ac0)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7722}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 338.574244ms ago: executing program 0 (id=13908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0)) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xfc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') close_range(r4, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) clock_gettime(0x0, &(0x7f0000000340)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='sys_enter\x00', r9, 0x0, 0xfffffffffffff07b}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 338.060895ms ago: executing program 6 (id=13909): futex(0x0, 0x88, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) 81.709649ms ago: executing program 6 (id=13910): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) syz_clone3(&(0x7f0000000280)={0x4000, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000100)=""/173, 0xad, &(0x7f00000001c0)=""/98, &(0x7f0000000240)}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x3a8, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x10}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private=0xa010102, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'gretap0\x00'}, 0x0, 0x150, 0x178, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0xffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffff00, 0xff000000, 0x7efa5b05c8af2437], @ipv6=@rand_addr=' \x01\x00', [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x7a, 0x2, 0x2c, 0x4e23, 0x4e21, 0x4e23, 0x4e22, 0x4, 0x2018}, 0x80, 0x80}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) setregid(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX]) 81.009779ms ago: executing program 0 (id=13911): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 72.939169ms ago: executing program 2 (id=13912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008802) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="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", 0x102}], 0x1, &(0x7f0000000140)=[@hopopts={{0x48, 0x29, 0x36, {0x73, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x10, 0x2, [0x0, 0x1, 0x0, 0x4]}}]}}}], 0x48}}], 0x2, 0x4000840) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980", 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = io_uring_setup(0x1ec1, &(0x7f0000000040)={0x0, 0xcba1, 0x8, 0x3, 0x2c0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000004e80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 55.121729ms ago: executing program 4 (id=13913): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 19.68101ms ago: executing program 7 (id=13914): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x48) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sched_setscheduler(0x0, 0x3, &(0x7f0000000500)=0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x3, 0x5, 0x10, 0x0, 0x7, 0x89008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc47, 0x0, @perf_config_ext={0x400000000000, 0xfffffffffffffffc}, 0x2000, 0x8, 0x7fff7efc, 0x3, 0x2, 0x0, 0x4010, 0x0, 0xfb, 0x0, 0x1}, 0x0, 0x100000000008, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETSF2(r2, 0x5432, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) execve(0x0, 0x0, 0x0) 671.57µs ago: executing program 0 (id=13915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x3, &(0x7f0000000280)=""/166, 0xa6) 0s ago: executing program 6 (id=13916): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) syz_clone3(&(0x7f0000000280)={0x4000, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000100)=""/173, 0xad, &(0x7f00000001c0)=""/98, &(0x7f0000000240)}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x3a8, 0xffffffff, 0x0, 0x0, 0x220, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x88000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x10}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@private=0xa010102, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'gretap0\x00'}, 0x0, 0x150, 0x178, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0xffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffff00, 0xff000000, 0x7efa5b05c8af2437], @ipv6=@rand_addr=' \x01\x00', [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x7a, 0x2, 0x2c, 0x4e23, 0x4e21, 0x4e23, 0x4e22, 0x4, 0x2018}, 0x80, 0x80}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) setregid(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) kernel console output (not intermixed with test programs): [ 1024.004111][T11179] IPv6: Can't replace route, no match found [ 1024.143873][T11192] bridge: RTM_NEWNEIGH with invalid ether address [ 1024.204043][T11194] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1024.223650][T11198] loop4: detected capacity change from 0 to 512 [ 1024.240796][T11198] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1024.262227][T11198] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13100: bg 0: block 248: padding at end of block bitmap is not set [ 1024.288692][T11202] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1024.300415][T11198] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13100: Failed to acquire dquot type 1 [ 1024.332367][T11198] EXT4-fs (loop4): 1 truncate cleaned up [ 1024.367222][T11198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.408109][T11206] blktrace: Concurrent blktraces are not allowed on loop5 [ 1024.424958][T11198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.998961][T11235] loop4: detected capacity change from 0 to 1024 [ 1025.024551][T11235] EXT4-fs: Ignoring removed nobh option [ 1025.036796][T11235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.068773][T11235] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.13111: Allocating blocks 385-513 which overlap fs metadata [ 1025.100834][T11235] EXT4-fs (loop4): pa ffff8881069e07e0: logic 16, phys. 129, len 24 [ 1025.109141][T11235] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1025.187884][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.248078][T11243] blktrace: Concurrent blktraces are not allowed on loop9 [ 1025.316592][T11247] __nla_validate_parse: 7 callbacks suppressed [ 1025.316632][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13116'. [ 1025.367941][T11250] syz2: rxe_newlink: already configured on veth0_to_bond [ 1025.390259][T11254] loop4: detected capacity change from 0 to 512 [ 1025.410841][T11254] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1025.426854][T11254] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13118: bg 0: block 248: padding at end of block bitmap is not set [ 1025.430120][T11253] netlink: 172 bytes leftover after parsing attributes in process `syz.7.13119'. [ 1025.456073][T11254] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13118: Failed to acquire dquot type 1 [ 1025.468304][T11254] EXT4-fs (loop4): 1 truncate cleaned up [ 1025.478217][T11254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1025.504999][T11254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.550125][T11263] loop2: detected capacity change from 0 to 1024 [ 1025.567250][T11263] EXT4-fs: Ignoring removed nobh option [ 1025.596184][T11263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.623163][T11263] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.13122: Allocating blocks 385-513 which overlap fs metadata [ 1025.659884][T11263] EXT4-fs (loop2): pa ffff888106a4cd90: logic 16, phys. 129, len 24 [ 1025.668062][T11263] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1025.725908][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.939718][T11282] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1025.955496][T11282] wg2: left promiscuous mode [ 1025.960186][T11282] wg2: left allmulticast mode [ 1025.972477][T11282] wg2: entered promiscuous mode [ 1025.977476][T11282] wg2: entered allmulticast mode [ 1025.988053][T11284] blktrace: Concurrent blktraces are not allowed on loop5 [ 1026.091761][T11287] blktrace: Concurrent blktraces are not allowed on loop9 [ 1026.373942][T11304] blktrace: Concurrent blktraces are not allowed on loop9 [ 1026.690582][T11315] loop4: detected capacity change from 0 to 1024 [ 1026.713579][T11315] EXT4-fs: Ignoring removed nobh option [ 1026.748894][T11315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.767099][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 1026.767117][ T29] audit: type=1400 audit(1751805264.056:187714): avc: denied { mount } for pid=11314 comm="syz.4.13139" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1026.804575][ T29] audit: type=1400 audit(1751805264.086:187715): avc: denied { add_name } for pid=11314 comm="syz.4.13139" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1026.823388][T11320] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1026.825789][ T29] audit: type=1400 audit(1751805264.096:187716): avc: denied { create } for pid=11314 comm="syz.4.13139" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1026.854058][ T29] audit: type=1400 audit(1751805264.116:187717): avc: denied { read write } for pid=11314 comm="syz.4.13139" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1026.877094][ T29] audit: type=1400 audit(1751805264.116:187718): avc: denied { open } for pid=11314 comm="syz.4.13139" path="/50/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1026.878597][T11315] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.13139: Allocating blocks 385-513 which overlap fs metadata [ 1026.921671][T11320] wg2: left promiscuous mode [ 1026.926859][T11320] wg2: left allmulticast mode [ 1026.934277][T11320] wg2: entered promiscuous mode [ 1026.939247][T11320] wg2: entered allmulticast mode [ 1026.947282][T11324] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.967940][T11314] EXT4-fs (loop4): pa ffff888106a4cd20: logic 16, phys. 129, len 24 [ 1026.976063][T11314] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1027.025496][ T29] audit: type=1400 audit(1751805264.306:187719): avc: denied { unmount } for pid=10668 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1027.048054][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.076274][T11324] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.097515][ T29] audit: type=1326 audit(1751805264.386:187720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.4.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1027.121454][ T29] audit: type=1326 audit(1751805264.386:187721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.4.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1027.164970][T11328] SET target dimension over the limit! [ 1027.192233][T11324] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.228543][ T29] audit: type=1326 audit(1751805264.436:187722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.4.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1027.252501][ T29] audit: type=1326 audit(1751805264.436:187723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.4.13142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1027.327741][T11324] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.344893][T11341] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13148'. [ 1027.375567][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13148'. [ 1027.424068][T11344] blktrace: Concurrent blktraces are not allowed on loop5 [ 1027.464620][T11346] wg2: left promiscuous mode [ 1027.469380][T11346] wg2: left allmulticast mode [ 1027.482848][T11324] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.511233][T11324] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.538121][T11346] wg2: entered promiscuous mode [ 1027.543071][T11346] wg2: entered allmulticast mode [ 1027.556259][T11350] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.13152'. [ 1027.597952][T11324] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.619530][T11324] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.803179][T11367] SET target dimension over the limit! [ 1027.977537][T11380] x_tables: duplicate underflow at hook 3 [ 1028.100767][T11382] blktrace: Concurrent blktraces are not allowed on loop5 [ 1028.510932][T11388] blktrace: Concurrent blktraces are not allowed on loop13 [ 1028.569363][T11390] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.13165'. [ 1028.927119][T11404] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1029.400117][T11414] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13173'. [ 1029.542452][T11421] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13176'. [ 1029.668056][T11427] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1029.762956][T11432] blktrace: Concurrent blktraces are not allowed on loop13 [ 1029.878985][T11436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13182'. [ 1029.903731][T11436] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13182'. [ 1030.002286][T11439] blktrace: Concurrent blktraces are not allowed on loop5 [ 1030.244218][T11448] blktrace: Concurrent blktraces are not allowed on loop15 [ 1030.305970][T11452] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1030.326104][T11452] wg2: left promiscuous mode [ 1030.330774][T11452] wg2: left allmulticast mode [ 1030.358400][T11452] wg2: entered promiscuous mode [ 1030.363337][T11452] wg2: entered allmulticast mode [ 1030.635483][T11465] blktrace: Concurrent blktraces are not allowed on loop13 [ 1030.720212][T11467] FAULT_INJECTION: forcing a failure. [ 1030.720212][T11467] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.733092][T11467] CPU: 1 UID: 0 PID: 11467 Comm: syz.7.13194 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1030.733130][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1030.733196][T11467] Call Trace: [ 1030.733261][T11467] [ 1030.733271][T11467] __dump_stack+0x1d/0x30 [ 1030.733298][T11467] dump_stack_lvl+0xe8/0x140 [ 1030.733324][T11467] dump_stack+0x15/0x1b [ 1030.733408][T11467] should_fail_ex+0x265/0x280 [ 1030.733451][T11467] should_failslab+0x8c/0xb0 [ 1030.733503][T11467] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1030.733534][T11467] ? __alloc_skb+0x101/0x320 [ 1030.733567][T11467] __alloc_skb+0x101/0x320 [ 1030.733653][T11467] ? audit_log_start+0x365/0x6c0 [ 1030.733689][T11467] audit_log_start+0x380/0x6c0 [ 1030.733774][T11467] audit_seccomp+0x48/0x100 [ 1030.733802][T11467] ? __seccomp_filter+0x68c/0x10d0 [ 1030.733827][T11467] __seccomp_filter+0x69d/0x10d0 [ 1030.733889][T11467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1030.733969][T11467] ? vfs_write+0x75e/0x8e0 [ 1030.734002][T11467] ? __rcu_read_unlock+0x4f/0x70 [ 1030.734025][T11467] ? __fget_files+0x184/0x1c0 [ 1030.734050][T11467] __secure_computing+0x82/0x150 [ 1030.734139][T11467] syscall_trace_enter+0xcf/0x1e0 [ 1030.734165][T11467] do_syscall_64+0xac/0x200 [ 1030.734184][T11467] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1030.734250][T11467] ? clear_bhb_loop+0x40/0x90 [ 1030.734352][T11467] ? clear_bhb_loop+0x40/0x90 [ 1030.734377][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.734400][T11467] RIP: 0033:0x7fa71fa1e929 [ 1030.734416][T11467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.734434][T11467] RSP: 002b:00007fa71e087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1030.734489][T11467] RAX: ffffffffffffffda RBX: 00007fa71fc45fa0 RCX: 00007fa71fa1e929 [ 1030.734502][T11467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1030.734515][T11467] RBP: 00007fa71e087090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.734527][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.734543][T11467] R13: 0000000000000000 R14: 00007fa71fc45fa0 R15: 00007ffc99a72f88 [ 1030.734563][T11467] [ 1031.007207][T11474] SET target dimension over the limit! [ 1031.127317][T11491] blktrace: Concurrent blktraces are not allowed on loop15 [ 1031.203294][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.210690][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.273204][T11489] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.281684][T11489] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.290141][T11489] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.298598][T11489] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.310273][T11489] dummy0: left allmulticast mode [ 1031.463735][T11504] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.565751][T11504] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.626181][T11504] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.666227][T11504] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.741758][T11504] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.753912][T11504] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.767868][T11504] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.780278][T11504] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.826807][T11506] blktrace: Concurrent blktraces are not allowed on loop9 [ 1031.897695][T11509] blktrace: Concurrent blktraces are not allowed on loop13 [ 1031.946640][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 1031.946708][ T29] audit: type=1400 audit(1751805269.236:188244): avc: denied { create } for pid=11514 comm="syz.4.13212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1031.976057][T11515] __nla_validate_parse: 1 callbacks suppressed [ 1031.976071][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13212'. [ 1032.003069][T11515] team_slave_0: entered promiscuous mode [ 1032.008831][T11515] team_slave_1: entered promiscuous mode [ 1032.019006][T11515] macvtap2: entered promiscuous mode [ 1032.024512][T11515] team0: entered promiscuous mode [ 1032.030095][T11515] macvtap2: entered allmulticast mode [ 1032.035714][T11515] team0: entered allmulticast mode [ 1032.041060][T11515] team_slave_0: entered allmulticast mode [ 1032.047098][T11515] team_slave_1: entered allmulticast mode [ 1032.054153][T11515] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1032.110398][ T29] audit: type=1326 audit(1751805269.396:188245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b85e929 code=0x7ffc0000 [ 1032.134612][T11526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13213'. [ 1032.174247][T11525] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1032.174265][ T29] audit: type=1326 audit(1751805269.396:188246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b85e929 code=0x7ffc0000 [ 1032.204869][ T29] audit: type=1326 audit(1751805269.396:188247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.228775][ T29] audit: type=1326 audit(1751805269.396:188248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.252645][ T29] audit: type=1326 audit(1751805269.396:188249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.276686][ T29] audit: type=1326 audit(1751805269.396:188250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.300624][ T29] audit: type=1326 audit(1751805269.396:188251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.324515][ T29] audit: type=1326 audit(1751805269.396:188252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.348529][ T29] audit: type=1326 audit(1751805269.396:188253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.13215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1032.457627][T11537] loop4: detected capacity change from 0 to 512 [ 1032.482249][T11537] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1032.504975][T11537] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13218: bg 0: block 248: padding at end of block bitmap is not set [ 1032.555563][T11537] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13218: Failed to acquire dquot type 1 [ 1032.585405][T11537] EXT4-fs (loop4): 1 truncate cleaned up [ 1032.591899][T11537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1032.606861][T11537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.756966][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13216'. [ 1032.766212][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13216'. [ 1032.807659][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13216'. [ 1032.816945][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13216'. [ 1032.867665][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13216'. [ 1032.876906][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13216'. [ 1032.938993][T11562] 9pnet_fd: Insufficient options for proto=fd [ 1033.121324][T11572] blktrace: Concurrent blktraces are not allowed on loop9 [ 1033.175160][T11575] syz2: rxe_newlink: already configured on veth0_to_bond [ 1033.256337][T11578] syz2: rxe_newlink: already configured on veth0_to_bond [ 1033.302236][T11582] loop4: detected capacity change from 0 to 1024 [ 1033.311974][T11582] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1033.335615][T11582] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.13230: Invalid block bitmap block 0 in block_group 0 [ 1033.360392][T11582] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13230: Failed to acquire dquot type 0 [ 1033.373758][T11582] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.13230: Freeing blocks not in datazone - block = 0, count = 4096 [ 1033.414051][T11582] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.13230: Invalid inode bitmap blk 0 in block_group 0 [ 1033.428812][T11582] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 1033.434555][ T268] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 1033.437640][T11582] EXT4-fs (loop4): 1 orphan inode deleted [ 1033.457912][T11582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.507338][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.692494][T11601] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13237'. [ 1033.724985][T11603] SET target dimension over the limit! [ 1033.796369][T11605] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1033.839555][T11607] blktrace: Concurrent blktraces are not allowed on loop9 [ 1033.848498][T11609] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1033.949162][T11618] netlink: 172 bytes leftover after parsing attributes in process `syz.2.13245'. [ 1033.973994][T11618] loop2: detected capacity change from 0 to 1024 [ 1033.996834][T11618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.011359][T11618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.021485][T11629] FAULT_INJECTION: forcing a failure. [ 1034.021485][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.034863][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.6.13248 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1034.034899][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1034.034916][T11629] Call Trace: [ 1034.034925][T11629] [ 1034.034935][T11629] __dump_stack+0x1d/0x30 [ 1034.035023][T11629] dump_stack_lvl+0xe8/0x140 [ 1034.035042][T11629] dump_stack+0x15/0x1b [ 1034.035064][T11629] should_fail_ex+0x265/0x280 [ 1034.035159][T11629] should_fail+0xb/0x20 [ 1034.035271][T11629] should_fail_usercopy+0x1a/0x20 [ 1034.035380][T11629] _copy_from_user+0x1c/0xb0 [ 1034.035417][T11629] __sys_bind+0x106/0x2a0 [ 1034.035453][T11629] __x64_sys_bind+0x3f/0x50 [ 1034.035503][T11629] x64_sys_call+0x2086/0x2fb0 [ 1034.035532][T11629] do_syscall_64+0xd2/0x200 [ 1034.035557][T11629] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1034.035608][T11629] ? clear_bhb_loop+0x40/0x90 [ 1034.035674][T11629] ? clear_bhb_loop+0x40/0x90 [ 1034.035701][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.035729][T11629] RIP: 0033:0x7fb47b85e929 [ 1034.035748][T11629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.035772][T11629] RSP: 002b:00007fb479ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1034.035796][T11629] RAX: ffffffffffffffda RBX: 00007fb47ba85fa0 RCX: 00007fb47b85e929 [ 1034.035812][T11629] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000003 [ 1034.035825][T11629] RBP: 00007fb479ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.035860][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.035876][T11629] R13: 0000000000000000 R14: 00007fb47ba85fa0 R15: 00007fff67b91cb8 [ 1034.035901][T11629] [ 1034.330046][T11638] macvtap2: entered promiscuous mode [ 1034.335547][T11638] team0: entered promiscuous mode [ 1034.341971][T11638] C: entered promiscuous mode [ 1034.346941][T11638] team_slave_1: entered promiscuous mode [ 1034.352780][T11638] macvtap2: entered allmulticast mode [ 1034.358249][T11638] team0: entered allmulticast mode [ 1034.365051][T11638] C: entered allmulticast mode [ 1034.369968][T11638] team_slave_1: entered allmulticast mode [ 1034.376408][T11638] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1034.389236][T11639] team_slave_0: entered promiscuous mode [ 1034.394988][T11639] team_slave_1: entered promiscuous mode [ 1034.401379][T11639] macvtap2: entered promiscuous mode [ 1034.406764][T11639] team0: entered promiscuous mode [ 1034.414973][T11639] macvtap2: entered allmulticast mode [ 1034.420433][T11639] team0: entered allmulticast mode [ 1034.430376][T11641] SET target dimension over the limit! [ 1034.440130][T11639] team_slave_0: entered allmulticast mode [ 1034.446703][T11639] team_slave_1: entered allmulticast mode [ 1034.453658][T11639] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1034.460946][T11641] 9pnet: Could not find request transport: fd0x000000000000000a [ 1034.547302][T11646] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1034.595175][T11656] netlink: 'syz.7.13259': attribute type 20 has an invalid length. [ 1034.620727][T11656] 9pnet_fd: Insufficient options for proto=fd [ 1034.694100][T11664] blktrace: Concurrent blktraces are not allowed on loop15 [ 1034.779095][T11674] blktrace: Concurrent blktraces are not allowed on loop5 [ 1034.794209][T11678] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.834200][T11677] loop4: detected capacity change from 0 to 1024 [ 1034.842729][T11677] EXT4-fs: Ignoring removed bh option [ 1034.855891][T11677] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1034.856655][T11678] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.896034][T11677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.919864][T11677] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.13262: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 1034.934881][T11691] SET target dimension over the limit! [ 1034.955983][T11677] EXT4-fs (loop4): Remounting filesystem read-only [ 1035.005872][T11678] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.095879][T11678] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.131848][T11699] blktrace: Concurrent blktraces are not allowed on loop15 [ 1035.184280][T11678] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.205325][T11703] blktrace: Concurrent blktraces are not allowed on loop15 [ 1035.213257][T11678] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.241991][T11678] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.272269][T11678] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.337852][T11711] blktrace: Concurrent blktraces are not allowed on loop15 [ 1035.456762][T11721] syz2: rxe_newlink: already configured on veth0_to_bond [ 1036.131988][T11759] blktrace: Concurrent blktraces are not allowed on loop1 [ 1036.255635][T11762] loop2: detected capacity change from 0 to 128 [ 1036.268560][T11762] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1036.270590][T11765] FAULT_INJECTION: forcing a failure. [ 1036.270590][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.293349][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.6.13296 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1036.293383][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1036.293446][T11765] Call Trace: [ 1036.293453][T11765] [ 1036.293461][T11765] __dump_stack+0x1d/0x30 [ 1036.293487][T11765] dump_stack_lvl+0xe8/0x140 [ 1036.293508][T11765] dump_stack+0x15/0x1b [ 1036.293586][T11765] should_fail_ex+0x265/0x280 [ 1036.293627][T11765] should_failslab+0x8c/0xb0 [ 1036.293655][T11765] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1036.293749][T11765] ? __alloc_skb+0x101/0x320 [ 1036.293829][T11765] __alloc_skb+0x101/0x320 [ 1036.293913][T11765] netlink_alloc_large_skb+0xba/0xf0 [ 1036.294002][T11765] netlink_sendmsg+0x3cf/0x6b0 [ 1036.294032][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.294053][T11765] __sock_sendmsg+0x145/0x180 [ 1036.294094][T11765] ____sys_sendmsg+0x31e/0x4e0 [ 1036.294138][T11765] ___sys_sendmsg+0x17b/0x1d0 [ 1036.294197][T11765] __x64_sys_sendmsg+0xd4/0x160 [ 1036.294227][T11765] x64_sys_call+0x2999/0x2fb0 [ 1036.294307][T11765] do_syscall_64+0xd2/0x200 [ 1036.294407][T11765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1036.294516][T11765] ? clear_bhb_loop+0x40/0x90 [ 1036.294538][T11765] ? clear_bhb_loop+0x40/0x90 [ 1036.294560][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.294644][T11765] RIP: 0033:0x7fb47b85e929 [ 1036.294716][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.294790][T11765] RSP: 002b:00007fb479ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.294814][T11765] RAX: ffffffffffffffda RBX: 00007fb47ba85fa0 RCX: 00007fb47b85e929 [ 1036.294829][T11765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1036.294841][T11765] RBP: 00007fb479ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.294853][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.294884][T11765] R13: 0000000000000000 R14: 00007fb47ba85fa0 R15: 00007fff67b91cb8 [ 1036.294915][T11765] [ 1036.504422][T11762] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.534562][T11762] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1036.617786][T11773] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1036.656712][ T5732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1036.747773][T11789] netlink: 'syz.2.13305': attribute type 1 has an invalid length. [ 1036.777959][T11782] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1036.786511][T11782] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1036.794893][T11782] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1036.803189][T11782] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1036.853955][T11782] bond1: (slave geneve2): making interface the new active one [ 1036.869052][T11782] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1036.883599][T11789] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1036.914996][T11793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.981001][T11797] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1037.085369][T11801] __nla_validate_parse: 6 callbacks suppressed [ 1037.085416][T11801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13310'. [ 1037.215195][ T29] kauditd_printk_skb: 715 callbacks suppressed [ 1037.215228][ T29] audit: type=1326 audit(1751805275.504:188964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.292953][ T29] audit: type=1326 audit(1751805275.544:188965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71fa1d290 code=0x7ffc0000 [ 1037.316951][ T29] audit: type=1326 audit(1751805275.544:188966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71fa1d290 code=0x7ffc0000 [ 1037.340818][ T29] audit: type=1326 audit(1751805275.544:188967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.364651][ T29] audit: type=1326 audit(1751805275.544:188968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.388434][ T29] audit: type=1326 audit(1751805275.544:188969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.412290][ T29] audit: type=1326 audit(1751805275.544:188970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.436152][ T29] audit: type=1326 audit(1751805275.544:188971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71fa1d290 code=0x7ffc0000 [ 1037.460069][ T29] audit: type=1326 audit(1751805275.544:188972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.484099][ T29] audit: type=1326 audit(1751805275.544:188973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.13308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1037.514036][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13308'. [ 1037.523093][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13308'. [ 1037.553201][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13308'. [ 1037.583835][T11811] 9pnet: Could not find request transport: rdmaÿÿ [ 1037.592953][T11817] SET target dimension over the limit! [ 1037.594284][T11818] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 1037.604463][T11817] 9pnet_fd: Insufficient options for proto=fd [ 1037.655685][T11811] loop2: detected capacity change from 0 to 128 [ 1037.692673][T11811] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1037.743799][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.788973][T11811] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.931910][ T5732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1038.234411][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13323'. [ 1038.359272][T11853] loop2: detected capacity change from 0 to 512 [ 1038.388037][T11853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1038.419486][T11853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.445797][T11853] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.471356][T11853] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13325: corrupted xattr block 19: overlapping e_value [ 1038.475229][T11860] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1038.507703][T11853] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1038.531089][T11853] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13325: corrupted xattr block 19: overlapping e_value [ 1038.546234][T11863] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13325: corrupted xattr block 19: overlapping e_value [ 1038.568687][T11860] wg2: left promiscuous mode [ 1038.573442][T11860] wg2: left allmulticast mode [ 1038.584773][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1038.593855][T11866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1038.613938][T11853] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1038.624694][T11863] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1038.632375][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1038.643038][T11860] wg2: entered promiscuous mode [ 1038.648016][T11860] wg2: entered allmulticast mode [ 1038.667543][T11853] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13325: corrupted xattr block 19: overlapping e_value [ 1038.730385][T11853] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1038.813463][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.840283][T11875] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.903764][T11877] loop2: detected capacity change from 0 to 1024 [ 1038.925876][T11875] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.937901][T11877] ext4: Unknown parameter 'smackfstransmute' [ 1038.947755][T11879] blktrace: Concurrent blktraces are not allowed on loop13 [ 1038.986618][T11875] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.036833][T11875] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.113332][T11875] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.136712][T11875] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.173986][T11875] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.206109][T11875] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.246759][T11895] SET target dimension over the limit! [ 1039.267957][T11895] 9pnet_fd: Insufficient options for proto=fd [ 1039.576302][T11914] FAULT_INJECTION: forcing a failure. [ 1039.576302][T11914] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.589184][T11914] CPU: 0 UID: 0 PID: 11914 Comm: syz.2.13345 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1039.589221][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1039.589235][T11914] Call Trace: [ 1039.589242][T11914] [ 1039.589253][T11914] __dump_stack+0x1d/0x30 [ 1039.589280][T11914] dump_stack_lvl+0xe8/0x140 [ 1039.589320][T11914] dump_stack+0x15/0x1b [ 1039.589337][T11914] should_fail_ex+0x265/0x280 [ 1039.589368][T11914] should_failslab+0x8c/0xb0 [ 1039.589394][T11914] __kmalloc_noprof+0xa5/0x3e0 [ 1039.589477][T11914] ? io_cache_alloc_new+0x2a/0xb0 [ 1039.589506][T11914] io_cache_alloc_new+0x2a/0xb0 [ 1039.589534][T11914] io_sqe_buffer_register+0xf2/0x1430 [ 1039.589600][T11914] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 1039.589645][T11914] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 1039.589672][T11914] ? io_sqe_buffers_register+0xc2/0x530 [ 1039.589705][T11914] io_sqe_buffers_register+0x2ac/0x530 [ 1039.589762][T11914] __se_sys_io_uring_register+0xa9f/0xeb0 [ 1039.589789][T11914] ? fput+0x8f/0xc0 [ 1039.589821][T11914] ? ksys_write+0x192/0x1a0 [ 1039.589880][T11914] __x64_sys_io_uring_register+0x55/0x70 [ 1039.589924][T11914] x64_sys_call+0xc91/0x2fb0 [ 1039.589992][T11914] do_syscall_64+0xd2/0x200 [ 1039.590010][T11914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1039.590064][T11914] ? clear_bhb_loop+0x40/0x90 [ 1039.590156][T11914] ? clear_bhb_loop+0x40/0x90 [ 1039.590185][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.590225][T11914] RIP: 0033:0x7fe51775e929 [ 1039.590244][T11914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.590267][T11914] RSP: 002b:00007fe515dc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1039.590308][T11914] RAX: ffffffffffffffda RBX: 00007fe517985fa0 RCX: 00007fe51775e929 [ 1039.590320][T11914] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1039.590410][T11914] RBP: 00007fe515dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.590424][T11914] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 1039.590436][T11914] R13: 0000000000000000 R14: 00007fe517985fa0 R15: 00007fff870c0bf8 [ 1039.590455][T11914] [ 1039.592856][T11916] blktrace: Concurrent blktraces are not allowed on loop13 [ 1039.787537][T11896] loop4: detected capacity change from 0 to 512 [ 1039.916175][T11896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1039.961708][T11896] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.13338: corrupted xattr entries [ 1039.976842][T11896] EXT4-fs (loop4): Remounting filesystem read-only [ 1039.984347][T11896] EXT4-fs (loop4): 1 truncate cleaned up [ 1040.035823][T11896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.073836][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1040.102056][T11927] macvtap2: entered promiscuous mode [ 1040.107489][T11927] team0: entered promiscuous mode [ 1040.113623][T11927] team_slave_0: entered promiscuous mode [ 1040.119789][T11927] team_slave_1: entered promiscuous mode [ 1040.125637][T11927] macvtap2: entered allmulticast mode [ 1040.131177][T11927] team0: entered allmulticast mode [ 1040.136658][T11927] team_slave_0: entered allmulticast mode [ 1040.142423][T11927] team_slave_1: entered allmulticast mode [ 1040.148466][T11927] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1040.150502][T11931] SET target dimension over the limit! [ 1040.213482][T11931] 9pnet_fd: Insufficient options for proto=fd [ 1040.291597][T11940] SET target dimension over the limit! [ 1040.580382][T11959] netlink: 172 bytes leftover after parsing attributes in process `syz.7.13362'. [ 1040.630342][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.647817][T11964] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1040.689040][T11967] loop4: detected capacity change from 0 to 512 [ 1040.691570][T11970] macvtap3: entered promiscuous mode [ 1040.700894][T11970] macvtap3: entered allmulticast mode [ 1040.707896][T11970] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1040.726557][T11967] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1040.745311][T11967] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13365: bg 0: block 248: padding at end of block bitmap is not set [ 1040.776150][T11967] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13365: Failed to acquire dquot type 1 [ 1040.803493][T11967] EXT4-fs (loop4): 1 truncate cleaned up [ 1040.814585][T11967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1040.858052][T11967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.930674][T11981] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1041.048726][T11986] loop2: detected capacity change from 0 to 1024 [ 1041.078157][T11986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.117054][T11986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.186480][T11997] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1041.251600][T12002] loop4: detected capacity change from 0 to 1024 [ 1041.267132][T12002] EXT4-fs: Ignoring removed nobh option [ 1041.287489][T12002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.318694][T12002] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.13378: Allocating blocks 385-513 which overlap fs metadata [ 1041.346964][T12001] EXT4-fs (loop4): pa ffff8881069e0850: logic 16, phys. 129, len 24 [ 1041.355074][T12001] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1041.374381][T12007] macvtap3: entered promiscuous mode [ 1041.379855][T12007] macvtap3: entered allmulticast mode [ 1041.392233][T12007] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1041.411784][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.513975][T12013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12013 comm=syz.6.13382 [ 1041.674617][T12029] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1041.810278][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.817909][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.825365][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.832770][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.840209][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.847698][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.855221][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862709][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862778][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862805][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862886][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862912][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862938][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862964][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.862991][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863035][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863112][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863138][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863229][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863255][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863281][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863308][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863332][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863352][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863422][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863446][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863466][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863487][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863568][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863595][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863692][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863713][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863740][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863767][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863794][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863818][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863867][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863894][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863958][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863978][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.863998][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.864019][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.864045][T16251] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1041.865857][T16251] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1041.876081][T12040] FAULT_INJECTION: forcing a failure. [ 1041.876081][T12040] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.876114][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.7.13392 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1041.876141][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1041.876156][T12040] Call Trace: [ 1041.876163][T12040] [ 1041.876173][T12040] __dump_stack+0x1d/0x30 [ 1041.876194][T12040] dump_stack_lvl+0xe8/0x140 [ 1041.876213][T12040] dump_stack+0x15/0x1b [ 1041.876272][T12040] should_fail_ex+0x265/0x280 [ 1041.876309][T12040] ? kobject_uevent_env+0x1c0/0x570 [ 1041.876335][T12040] should_failslab+0x8c/0xb0 [ 1041.876422][T12040] __kmalloc_cache_noprof+0x4c/0x320 [ 1041.876477][T12040] kobject_uevent_env+0x1c0/0x570 [ 1041.876509][T12040] ? device_pm_check_callbacks+0x683/0x6a0 [ 1041.876549][T12040] kobject_uevent+0x1d/0x30 [ 1041.876637][T12040] device_del+0x710/0x790 [ 1041.876699][T12040] device_destroy+0x66/0xa0 [ 1041.876723][T12040] drop_ref+0xbf/0x1a0 [ 1041.876747][T12040] hidraw_disconnect+0x39/0x50 [ 1041.876769][T12040] hid_device_remove+0x158/0x210 [ 1041.876810][T12040] ? __pfx_hid_device_remove+0x10/0x10 [ 1041.876846][T12040] device_release_driver_internal+0x2be/0x4c0 [ 1041.876907][T12040] device_release_driver+0x19/0x20 [ 1041.876937][T12040] bus_remove_device+0x26d/0x290 [ 1041.877055][T12040] device_del+0x36a/0x790 [ 1041.877086][T12040] hid_destroy_device+0x54/0x120 [ 1041.877165][T12040] uhid_dev_destroy+0x6a/0xb0 [ 1041.877192][T12040] uhid_char_write+0x3aa/0x650 [ 1041.877218][T12040] ? __pfx_uhid_char_write+0x10/0x10 [ 1041.877244][T12040] vfs_write+0x269/0x8e0 [ 1041.877285][T12040] ? __rcu_read_unlock+0x4f/0x70 [ 1041.877312][T12040] ? __fget_files+0x184/0x1c0 [ 1041.877336][T12040] ksys_write+0xda/0x1a0 [ 1041.877396][T12040] __x64_sys_write+0x40/0x50 [ 1041.877429][T12040] x64_sys_call+0x2cdd/0x2fb0 [ 1041.877514][T12040] do_syscall_64+0xd2/0x200 [ 1041.877602][T12040] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1041.877629][T12040] ? clear_bhb_loop+0x40/0x90 [ 1041.877651][T12040] ? clear_bhb_loop+0x40/0x90 [ 1041.877684][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.877706][T12040] RIP: 0033:0x7fa71fa1e929 [ 1041.877721][T12040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.877740][T12040] RSP: 002b:00007fa71e087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.877759][T12040] RAX: ffffffffffffffda RBX: 00007fa71fc45fa0 RCX: 00007fa71fa1e929 [ 1041.877790][T12040] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 1041.877809][T12040] RBP: 00007fa71e087090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.877821][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.877833][T12040] R13: 0000000000000000 R14: 00007fa71fc45fa0 R15: 00007ffc99a72f88 [ 1041.877853][T12040] [ 1041.885546][T12043] macvtap4: entered promiscuous mode [ 1041.885611][T12043] macvtap4: entered allmulticast mode [ 1041.885751][T12043] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1042.108590][T12051] loop4: detected capacity change from 0 to 1024 [ 1042.109012][T12051] EXT4-fs: Ignoring removed bh option [ 1042.109357][T12051] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1042.118431][T12051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.120060][T12051] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.13394: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 1042.120187][T12051] EXT4-fs (loop4): Remounting filesystem read-only [ 1042.722305][ T29] kauditd_printk_skb: 952 callbacks suppressed [ 1042.722320][ T29] audit: type=1326 audit(1751805281.004:189924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1042.722353][ T29] audit: type=1326 audit(1751805281.004:189925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1042.858356][T12072] blktrace: Concurrent blktraces are not allowed on loop5 [ 1043.002778][ T29] audit: type=1326 audit(1751805281.014:189926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1043.026795][ T29] audit: type=1326 audit(1751805281.014:189927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1043.050818][ T29] audit: type=1326 audit(1751805281.014:189928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1043.074804][ T29] audit: type=1326 audit(1751805281.014:189929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1043.098621][ T29] audit: type=1326 audit(1751805281.014:189930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1043.122484][ T29] audit: type=1326 audit(1751805281.014:189931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.0.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1043.146420][ T29] audit: type=1326 audit(1751805281.044:189932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12067 comm="syz.2.13399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51775e929 code=0x7ffc0000 [ 1043.170232][ T29] audit: type=1326 audit(1751805281.044:189933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12067 comm="syz.2.13399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51775e929 code=0x7ffc0000 [ 1043.267332][T12080] __nla_validate_parse: 9 callbacks suppressed [ 1043.267347][T12080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13402'. [ 1043.304545][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13403'. [ 1043.313594][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13403'. [ 1043.353287][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13405'. [ 1043.368058][T12079] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.376329][T12079] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.384702][T12079] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.392889][T12079] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.402691][T12079] geneve3: entered promiscuous mode [ 1043.408001][T12079] geneve3: entered allmulticast mode [ 1043.420195][T12083] macvtap5: entered promiscuous mode [ 1043.424105][T12085] SET target dimension over the limit! [ 1043.425635][T12083] macvtap5: entered allmulticast mode [ 1043.427178][T12083] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1043.472764][T12087] loop2: detected capacity change from 0 to 1024 [ 1043.481583][T12087] EXT4-fs: Ignoring removed nobh option [ 1043.508045][T12087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.548404][T12090] netlink: 172 bytes leftover after parsing attributes in process `syz.6.13408'. [ 1043.569713][T12087] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.13407: Allocating blocks 385-513 which overlap fs metadata [ 1043.597259][T12087] EXT4-fs (loop2): pa ffff888106a4ce00: logic 16, phys. 129, len 24 [ 1043.605468][T12087] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1043.642455][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.646155][T12097] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1043.715998][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13413'. [ 1043.773779][T12111] blktrace: Concurrent blktraces are not allowed on loop5 [ 1043.945439][T12115] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13415'. [ 1044.056582][T12118] loop2: detected capacity change from 0 to 1024 [ 1044.100261][T12118] EXT4-fs: Ignoring removed nobh option [ 1044.118725][T12118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.134932][T12118] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.13416: Allocating blocks 385-513 which overlap fs metadata [ 1044.150781][T12116] EXT4-fs (loop2): pa ffff8881069e0850: logic 16, phys. 129, len 24 [ 1044.158910][T12116] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1044.182116][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.228815][T12132] SET target dimension over the limit! [ 1044.401443][T12142] netlink: 'syz.7.13424': attribute type 13 has an invalid length. [ 1044.419859][T12139] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1044.552652][T12153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1044.563624][T12153] netlink: 148 bytes leftover after parsing attributes in process `syz.7.13424'. [ 1044.563934][T12155] syz2: rxe_newlink: already configured on veth0_to_bond [ 1044.583676][T12153] program syz.7.13424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.595770][T12142] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.604530][T12142] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.612924][T12142] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.621354][T12142] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.634432][T12142] dummy0: left allmulticast mode [ 1044.646080][T12142] team0: left allmulticast mode [ 1044.651105][T12142] team_slave_0: left allmulticast mode [ 1044.656710][T12142] team_slave_1: left allmulticast mode [ 1044.662279][T12142] team0: left promiscuous mode [ 1044.667319][T12142] team_slave_0: left promiscuous mode [ 1044.672825][T12142] team_slave_1: left promiscuous mode [ 1044.713944][T12144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1044.724082][T12144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1044.748499][T12164] blktrace: Concurrent blktraces are not allowed on loop1 [ 1044.751269][T12162] SET target dimension over the limit! [ 1044.786151][T12144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1044.796109][T12144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1044.868106][T12170] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1044.887824][T12144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1044.897867][T12144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1044.913609][T12170] wg2: left promiscuous mode [ 1044.918417][T12170] wg2: left allmulticast mode [ 1044.940758][T12170] wg2: entered promiscuous mode [ 1044.945848][T12170] wg2: entered allmulticast mode [ 1044.961737][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.975496][T12173] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13435'. [ 1044.994250][T12144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1045.004621][T12144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1045.070868][T12179] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1045.156339][T12144] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.164735][T12144] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.192672][T12144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.201053][T12144] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.213128][T12144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.221464][T12144] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.233853][T12144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.242279][T12144] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.273907][T12191] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.285782][T12193] blktrace: Concurrent blktraces are not allowed on loop1 [ 1045.366277][T12191] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.430374][T12191] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.466281][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13445'. [ 1045.476095][T12207] blktrace: Concurrent blktraces are not allowed on loop13 [ 1045.537017][T12191] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.554784][T12205] loop2: detected capacity change from 0 to 1024 [ 1045.571516][T12205] EXT4-fs: Ignoring removed bh option [ 1045.579336][T12205] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1045.602417][T12191] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.619546][T12205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.647366][T12205] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.13446: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 1045.669785][T12191] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.691006][T12191] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.703752][T12205] EXT4-fs (loop2): Remounting filesystem read-only [ 1045.725710][T12191] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.828046][T12227] blktrace: Concurrent blktraces are not allowed on loop9 [ 1046.179584][T12247] macvtap3: entered promiscuous mode [ 1046.185240][T12247] macvtap3: entered allmulticast mode [ 1046.198200][T12247] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1046.239190][T12251] loop4: detected capacity change from 0 to 1024 [ 1046.256669][T12251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.269917][T12251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.308637][T12258] SET target dimension over the limit! [ 1046.346901][T12264] blktrace: Concurrent blktraces are not allowed on loop15 [ 1047.110429][T12293] loop4: detected capacity change from 0 to 512 [ 1047.119008][T12293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1047.136823][T12293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.149817][T12293] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.164333][T12293] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.13480: corrupted xattr block 19: overlapping e_value [ 1047.179376][T12293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 1047.194691][T12293] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.13480: corrupted xattr block 19: overlapping e_value [ 1047.212927][T12293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 1047.222490][T12293] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.13480: corrupted xattr block 19: overlapping e_value [ 1047.237594][T12293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 1047.262833][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.315320][T12305] macvtap6: entered promiscuous mode [ 1047.320802][T12305] macvtap6: entered allmulticast mode [ 1047.328954][T12305] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1047.338704][T12307] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1047.356537][T12307] wg2: left promiscuous mode [ 1047.361340][T12307] wg2: left allmulticast mode [ 1047.381382][T12307] wg2: entered promiscuous mode [ 1047.386465][T12307] wg2: entered allmulticast mode [ 1047.536172][T12321] netlink: 'syz.0.13490': attribute type 1 has an invalid length. [ 1047.667803][T12332] SET target dimension over the limit! [ 1047.725780][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 1047.725843][ T29] audit: type=1326 audit(1751805286.014:190767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.4.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1047.860104][T12347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.967289][T12347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.026367][T12347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.087774][T12347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.102985][T12357] FAULT_INJECTION: forcing a failure. [ 1048.102985][T12357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.116257][T12357] CPU: 1 UID: 0 PID: 12357 Comm: syz.7.13506 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1048.116355][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1048.116370][T12357] Call Trace: [ 1048.116378][T12357] [ 1048.116387][T12357] __dump_stack+0x1d/0x30 [ 1048.116470][T12357] dump_stack_lvl+0xe8/0x140 [ 1048.116522][T12357] dump_stack+0x15/0x1b [ 1048.116545][T12357] should_fail_ex+0x265/0x280 [ 1048.116578][T12357] should_fail+0xb/0x20 [ 1048.116613][T12357] should_fail_usercopy+0x1a/0x20 [ 1048.116671][T12357] _copy_from_iter+0xcf/0xe40 [ 1048.116712][T12357] ? __build_skb_around+0x1a0/0x200 [ 1048.116754][T12357] ? __alloc_skb+0x223/0x320 [ 1048.116785][T12357] netlink_sendmsg+0x471/0x6b0 [ 1048.116808][T12357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.116866][T12357] __sock_sendmsg+0x145/0x180 [ 1048.116900][T12357] ____sys_sendmsg+0x31e/0x4e0 [ 1048.116948][T12357] ___sys_sendmsg+0x17b/0x1d0 [ 1048.117059][T12357] __x64_sys_sendmsg+0xd4/0x160 [ 1048.117179][T12357] x64_sys_call+0x2999/0x2fb0 [ 1048.117215][T12357] do_syscall_64+0xd2/0x200 [ 1048.117238][T12357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1048.117271][T12357] ? clear_bhb_loop+0x40/0x90 [ 1048.117382][T12357] ? clear_bhb_loop+0x40/0x90 [ 1048.117408][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.117431][T12357] RIP: 0033:0x7fa71fa1e929 [ 1048.117446][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.117518][T12357] RSP: 002b:00007fa71e087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.117537][T12357] RAX: ffffffffffffffda RBX: 00007fa71fc45fa0 RCX: 00007fa71fa1e929 [ 1048.117550][T12357] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1048.117564][T12357] RBP: 00007fa71e087090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.117579][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.117594][T12357] R13: 0000000000000000 R14: 00007fa71fc45fa0 R15: 00007ffc99a72f88 [ 1048.117619][T12357] [ 1048.331424][T12354] __nla_validate_parse: 11 callbacks suppressed [ 1048.331442][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13504'. [ 1048.390190][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.416311][ T29] audit: type=1326 audit(1751805286.704:190768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.419226][T12361] SET target dimension over the limit! [ 1048.473760][ T29] audit: type=1326 audit(1751805286.704:190769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.497751][ T29] audit: type=1326 audit(1751805286.704:190770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.521536][ T29] audit: type=1326 audit(1751805286.704:190771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.545433][ T29] audit: type=1326 audit(1751805286.704:190772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.569333][ T29] audit: type=1326 audit(1751805286.704:190773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.593103][ T29] audit: type=1326 audit(1751805286.704:190774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.616901][ T29] audit: type=1326 audit(1751805286.704:190775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.640620][ T29] audit: type=1326 audit(1751805286.734:190776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.7.13508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1048.667953][T12367] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1048.751148][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13513'. [ 1048.779484][T12375] macvtap4: entered promiscuous mode [ 1048.785005][T12375] macvtap4: entered allmulticast mode [ 1048.791656][T12375] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1049.092399][T12401] SET target dimension over the limit! [ 1049.235670][T12407] loop2: detected capacity change from 0 to 512 [ 1049.269233][T12407] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1049.280055][T12407] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.13524: bg 0: block 248: padding at end of block bitmap is not set [ 1049.316788][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13527'. [ 1049.331233][T12407] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.13524: Failed to acquire dquot type 1 [ 1049.347670][T12416] bond_slave_0: entered promiscuous mode [ 1049.353412][T12416] bond_slave_1: entered promiscuous mode [ 1049.360717][T12407] EXT4-fs (loop2): 1 truncate cleaned up [ 1049.366674][T12416] macvtap4: entered promiscuous mode [ 1049.372014][T12416] bond0: entered promiscuous mode [ 1049.377470][T12416] macvtap4: entered allmulticast mode [ 1049.382935][T12416] bond0: entered allmulticast mode [ 1049.388108][T12416] bond_slave_0: entered allmulticast mode [ 1049.393875][T12416] bond_slave_1: entered allmulticast mode [ 1049.403255][T12407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1049.417514][T12407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.433756][T12416] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1049.672851][T12432] SET target dimension over the limit! [ 1049.770086][T12347] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.783631][T12347] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.795564][T12347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.814104][T12347] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.827340][T12436] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1049.846612][T12436] wg2: left promiscuous mode [ 1049.851350][T12436] wg2: left allmulticast mode [ 1049.876282][T12436] wg2: entered promiscuous mode [ 1049.881211][T12436] wg2: entered allmulticast mode [ 1049.969204][T12449] blktrace: Concurrent blktraces are not allowed on loop5 [ 1050.122598][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13544'. [ 1050.301120][T12463] netlink: 172 bytes leftover after parsing attributes in process `syz.4.13547'. [ 1050.343575][T12463] loop4: detected capacity change from 0 to 1024 [ 1050.401338][T12463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.435979][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.469266][T12481] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1050.480578][T12481] wg2: left promiscuous mode [ 1050.485318][T12481] wg2: left allmulticast mode [ 1050.502462][T12481] wg2: entered promiscuous mode [ 1050.507429][T12481] wg2: entered allmulticast mode [ 1051.437130][T12507] blktrace: Concurrent blktraces are not allowed on loop5 [ 1051.730040][T12520] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1051.753849][T12520] wg2: left promiscuous mode [ 1051.758575][T12520] wg2: left allmulticast mode [ 1051.775064][T12520] wg2: entered promiscuous mode [ 1051.779996][T12520] wg2: entered allmulticast mode [ 1051.838445][T12522] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13570'. [ 1051.878838][T12524] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.936215][T12524] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.967066][T12528] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1051.996638][T12524] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.031016][T12538] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13575'. [ 1052.056281][T12524] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.067247][T12542] blktrace: Concurrent blktraces are not allowed on loop9 [ 1052.102643][T12548] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13580'. [ 1052.111917][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13580'. [ 1052.124942][T12548] vlan0: entered allmulticast mode [ 1052.130120][T12548] syz_tun: entered allmulticast mode [ 1052.154565][T12524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.167809][T12524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.179964][T12524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.194394][T12524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.388786][T12569] loop4: detected capacity change from 0 to 1024 [ 1052.406957][T12569] EXT4-fs: Ignoring removed bh option [ 1052.417363][T12569] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1052.458734][T12569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.503545][T12569] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.13582: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 1052.504048][T12579] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.13590'. [ 1052.575354][T12569] EXT4-fs (loop4): Remounting filesystem read-only [ 1052.658033][T12583] wg2: left promiscuous mode [ 1052.662715][T12583] wg2: left allmulticast mode [ 1052.682978][T12585] blktrace: Concurrent blktraces are not allowed on loop5 [ 1052.691449][T12583] wg2: entered promiscuous mode [ 1052.696407][T12583] wg2: entered allmulticast mode [ 1052.837512][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 1052.837529][ T29] audit: type=1400 audit(1751805291.124:191253): avc: denied { bind } for pid=12591 comm="syz.7.13595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1052.904360][ T29] audit: type=1400 audit(1751805291.154:191254): avc: denied { listen } for pid=12591 comm="syz.7.13595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1052.925145][ T29] audit: type=1400 audit(1751805291.154:191255): avc: denied { write } for pid=12591 comm="syz.7.13595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1052.945020][ T29] audit: type=1400 audit(1751805291.164:191256): avc: denied { accept } for pid=12591 comm="syz.7.13595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1053.004463][T12601] FAULT_INJECTION: forcing a failure. [ 1053.004463][T12601] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.017470][T12601] CPU: 0 UID: 0 PID: 12601 Comm: syz.2.13599 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1053.017542][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.017558][T12601] Call Trace: [ 1053.017566][T12601] [ 1053.017576][T12601] __dump_stack+0x1d/0x30 [ 1053.017603][T12601] dump_stack_lvl+0xe8/0x140 [ 1053.017679][T12601] dump_stack+0x15/0x1b [ 1053.017699][T12601] should_fail_ex+0x265/0x280 [ 1053.017739][T12601] should_failslab+0x8c/0xb0 [ 1053.017769][T12601] __kmalloc_node_noprof+0xa9/0x410 [ 1053.017808][T12601] ? __kmalloc_noprof+0x1dd/0x3e0 [ 1053.017844][T12601] ? get_callchain_buffers+0x19c/0x2f0 [ 1053.017918][T12601] get_callchain_buffers+0x19c/0x2f0 [ 1053.017947][T12601] stack_map_alloc+0x247/0x2b0 [ 1053.017980][T12601] map_create+0x840/0xb90 [ 1053.018060][T12601] ? security_bpf+0x2b/0x90 [ 1053.018083][T12601] __sys_bpf+0x5ab/0x790 [ 1053.018133][T12601] __x64_sys_bpf+0x41/0x50 [ 1053.018215][T12601] x64_sys_call+0x2478/0x2fb0 [ 1053.018272][T12601] do_syscall_64+0xd2/0x200 [ 1053.018294][T12601] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1053.018423][T12601] ? clear_bhb_loop+0x40/0x90 [ 1053.018451][T12601] ? clear_bhb_loop+0x40/0x90 [ 1053.018477][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.018499][T12601] RIP: 0033:0x7fe51775e929 [ 1053.018516][T12601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.018608][T12601] RSP: 002b:00007fe515dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1053.018663][T12601] RAX: ffffffffffffffda RBX: 00007fe517985fa0 RCX: 00007fe51775e929 [ 1053.018676][T12601] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 1053.018688][T12601] RBP: 00007fe515dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.018700][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.018715][T12601] R13: 0000000000000000 R14: 00007fe517985fa0 R15: 00007fff870c0bf8 [ 1053.018758][T12601] [ 1053.264898][ T29] audit: type=1326 audit(1751805291.544:191257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.7.13601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1053.289707][ T29] audit: type=1326 audit(1751805291.544:191258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.7.13601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1053.313716][ T29] audit: type=1326 audit(1751805291.544:191259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.7.13601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1053.338499][ T29] audit: type=1326 audit(1751805291.544:191260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.7.13601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1053.362407][ T29] audit: type=1326 audit(1751805291.544:191261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.7.13601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1053.387042][ T29] audit: type=1326 audit(1751805291.544:191262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.7.13601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fa1e929 code=0x7ffc0000 [ 1053.466640][T12614] blktrace: Concurrent blktraces are not allowed on loop15 [ 1053.561036][T12622] pim6reg: entered allmulticast mode [ 1053.577470][T12622] pim6reg: left allmulticast mode [ 1053.749356][T12635] 9pnet_fd: Insufficient options for proto=fd [ 1053.787062][T12641] __nla_validate_parse: 1 callbacks suppressed [ 1053.787077][T12641] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13613'. [ 1053.888058][T12643] smc: net device bond0 applied user defined pnetid SYZ2 [ 1053.895944][T12643] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 1053.926692][T12646] SELinux: Context Ü is not valid (left unmapped). [ 1054.245755][T12656] blktrace: Concurrent blktraces are not allowed on loop13 [ 1054.282268][T12659] loop2: detected capacity change from 0 to 1024 [ 1054.289770][T12659] EXT4-fs: Ignoring removed nobh option [ 1054.313275][T12659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.340518][T12659] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.13622: Allocating blocks 385-513 which overlap fs metadata [ 1054.363976][T12659] EXT4-fs (loop2): pa ffff8881069e07e0: logic 16, phys. 129, len 24 [ 1054.372230][T12659] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1054.399444][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.604467][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13630'. [ 1054.634642][T12681] macvtap5: entered promiscuous mode [ 1054.640206][T12681] macvtap5: entered allmulticast mode [ 1054.664900][T12681] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1054.697754][T12687] blktrace: Concurrent blktraces are not allowed on loop13 [ 1054.727356][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13635'. [ 1054.899165][T12709] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13641'. [ 1054.996591][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13645'. [ 1055.017217][T12718] macvtap3: entered promiscuous mode [ 1055.022613][T12718] team0: entered promiscuous mode [ 1055.028362][T12718] team_slave_0: entered promiscuous mode [ 1055.034111][T12718] team_slave_1: entered promiscuous mode [ 1055.040889][T12718] macvtap3: entered allmulticast mode [ 1055.046425][T12718] team0: entered allmulticast mode [ 1055.054994][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13647'. [ 1055.072680][T12718] team_slave_0: entered allmulticast mode [ 1055.078559][T12718] team_slave_1: entered allmulticast mode [ 1055.097121][T12718] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1055.116059][T12726] blktrace: Concurrent blktraces are not allowed on loop13 [ 1055.221072][T12738] loop2: detected capacity change from 0 to 1024 [ 1055.246392][T12738] EXT4-fs: Ignoring removed nobh option [ 1055.254706][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.294008][T12738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.443814][T12738] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.13653: Allocating blocks 385-513 which overlap fs metadata [ 1055.477199][T12738] EXT4-fs (loop2): pa ffff8881069e08c0: logic 16, phys. 129, len 24 [ 1055.485461][T12738] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 1055.509329][ T5732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.590086][T12758] SET target dimension over the limit! [ 1055.633501][T12760] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1055.705826][T12770] blktrace: Concurrent blktraces are not allowed on loop5 [ 1055.983665][T12799] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1056.004579][T12801] SET target dimension over the limit! [ 1056.028531][T12799] wg2: left promiscuous mode [ 1056.033252][T12799] wg2: left allmulticast mode [ 1056.046309][T12799] wg2: entered promiscuous mode [ 1056.051362][T12799] wg2: entered allmulticast mode [ 1056.068690][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13678'. [ 1056.179154][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.186685][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.202019][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.210277][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.217765][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.225299][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.232781][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.240897][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.248417][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.255966][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.263387][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.271518][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.295748][T12813] blktrace: Concurrent blktraces are not allowed on loop1 [ 1056.355435][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.363014][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.370501][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.377977][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.386059][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.393472][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.400937][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.408382][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.416446][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.423894][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.431373][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.438875][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.447065][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.454530][ T3505] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1056.578262][ T3505] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1056.605205][T12837] SET target dimension over the limit! [ 1056.662055][T12839] syz2: rxe_newlink: already configured on veth0_to_bond [ 1056.724265][T12816] chnl_net:caif_netlink_parms(): no params data found [ 1056.767117][T12853] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1056.799600][ T268] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.809480][ T268] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1056.847750][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13698'. [ 1056.857370][T12853] wg2: left promiscuous mode [ 1056.862005][T12853] wg2: left allmulticast mode [ 1056.870269][T12853] wg2: entered promiscuous mode [ 1056.875217][T12853] wg2: entered allmulticast mode [ 1056.893002][ T268] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.903002][ T268] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1056.925738][T12816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.932849][T12816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.940285][T12816] bridge_slave_0: entered allmulticast mode [ 1056.947034][T12816] bridge_slave_0: entered promiscuous mode [ 1056.965173][T12816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.972416][T12816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.974551][T12864] netlink: 172 bytes leftover after parsing attributes in process `syz.4.13700'. [ 1056.996530][T12816] bridge_slave_1: entered allmulticast mode [ 1057.005625][T12816] bridge_slave_1: entered promiscuous mode [ 1057.006656][T12868] SET target dimension over the limit! [ 1057.019809][T12864] loop4: detected capacity change from 0 to 1024 [ 1057.047025][T12864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.060245][ T268] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.060575][T12864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.070143][ T268] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1057.094464][T12816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.121972][T12816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.163113][ T268] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.172959][ T268] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1057.213372][T12816] team0: Port device team_slave_0 added [ 1057.220310][T12816] team0: Port device team_slave_1 added [ 1057.256114][T12816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.263148][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.289969][T12816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.302830][T12816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.309859][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.336665][T12816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.368817][T12816] hsr_slave_0: entered promiscuous mode [ 1057.375135][T12816] hsr_slave_1: entered promiscuous mode [ 1057.381129][T12816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.390261][T12816] Cannot create hsr debugfs directory [ 1057.443135][ T268] bridge_slave_1: left allmulticast mode [ 1057.448927][ T268] bridge_slave_1: left promiscuous mode [ 1057.454848][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.470629][ T268] bridge_slave_0: left allmulticast mode [ 1057.476397][ T268] bridge_slave_0: left promiscuous mode [ 1057.482126][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.502982][ T268] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1057.550043][ T268] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1057.607404][ T268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.617556][ T268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.627734][ T268] bond0 (unregistering): Released all slaves [ 1057.637824][ T268] bond1 (unregistering): Released all slaves [ 1057.730459][ T268] hsr_slave_0: left promiscuous mode [ 1057.736338][ T268] hsr_slave_1: left promiscuous mode [ 1057.742432][ T268] team0: left allmulticast mode [ 1057.747398][ T268] team_slave_0: left allmulticast mode [ 1057.752917][ T268] team_slave_1: left allmulticast mode [ 1057.759178][ T268] team0: left promiscuous mode [ 1057.763993][ T268] team_slave_0: left promiscuous mode [ 1057.769613][ T268] team_slave_1: left promiscuous mode [ 1057.826091][ T268] team0 (unregistering): Port device team_slave_1 removed [ 1057.837039][ T268] team0 (unregistering): Port device team_slave_0 removed [ 1057.936600][T12893] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1057.946969][T12893] wg2: left promiscuous mode [ 1057.951676][T12893] wg2: left allmulticast mode [ 1057.960214][T12893] wg2: entered promiscuous mode [ 1057.965815][T12893] wg2: entered allmulticast mode [ 1058.250729][T12816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1058.279720][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13709'. [ 1058.286428][T12816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1058.304070][T12816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1058.321066][T12816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1058.347397][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 1058.347417][ T29] audit: type=1326 audit(1751805296.634:191997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.351153][T12908] SET target dimension over the limit! [ 1058.353657][ T29] audit: type=1326 audit(1751805296.634:191998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.408478][ T29] audit: type=1326 audit(1751805296.634:191999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.432381][ T29] audit: type=1326 audit(1751805296.634:192000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.456930][ T29] audit: type=1326 audit(1751805296.634:192001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.461163][T12816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.480727][ T29] audit: type=1326 audit(1751805296.634:192002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.480766][ T29] audit: type=1326 audit(1751805296.634:192003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.480840][ T29] audit: type=1326 audit(1751805296.634:192004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.556376][T12816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.560113][ T29] audit: type=1326 audit(1751805296.634:192005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.591465][ T29] audit: type=1326 audit(1751805296.634:192006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.4.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f7816e929 code=0x7ffc0000 [ 1058.623831][T15111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.630943][T15111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.644001][T15111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.651198][T15111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.672991][T12816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.683583][T12816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.813910][T12816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.888774][T12936] SET target dimension over the limit! [ 1058.911245][T12941] loop4: detected capacity change from 0 to 512 [ 1058.940131][T12941] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1058.947639][T12941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13724: bg 0: block 248: padding at end of block bitmap is not set [ 1058.971976][T12816] veth0_vlan: entered promiscuous mode [ 1058.982052][T12941] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13724: Failed to acquire dquot type 1 [ 1058.995519][T12941] EXT4-fs (loop4): 1 truncate cleaned up [ 1059.003468][T12941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1059.021457][T12816] veth1_vlan: entered promiscuous mode [ 1059.030982][T12941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.031287][T12954] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1059.069313][T12816] veth0_macvtap: entered promiscuous mode [ 1059.094300][T12816] veth1_macvtap: entered promiscuous mode [ 1059.128193][T12816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.157356][T12816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.176958][T12816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.185943][T12816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.194700][T12816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.203496][T12816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.437247][T12981] SET target dimension over the limit! [ 1059.616130][T12992] netlink: 172 bytes leftover after parsing attributes in process `syz.2.13738'. [ 1059.651101][T12996] loop4: detected capacity change from 0 to 764 [ 1059.683871][T12996] rock: directory entry would overflow storage [ 1059.690178][T12996] rock: sig=0x4654, size=5, remaining=4 [ 1059.805624][T13005] loop4: detected capacity change from 0 to 512 [ 1059.826646][T13005] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1059.861380][T13005] EXT4-fs (loop4): 1 truncate cleaned up [ 1059.878921][T13010] SET target dimension over the limit! [ 1059.888591][T13005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.005062][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13751'. [ 1060.014332][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13751'. [ 1060.044549][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13751'. [ 1060.067395][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.138235][T13027] loop2: detected capacity change from 0 to 512 [ 1060.171953][T13027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1060.181274][T13027] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.13754: bg 0: block 248: padding at end of block bitmap is not set [ 1060.192252][T13030] SET target dimension over the limit! [ 1060.210342][T13027] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.13754: Failed to acquire dquot type 1 [ 1060.223450][T13027] EXT4-fs (loop2): 1 truncate cleaned up [ 1060.231475][T13027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1060.246826][T13027] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.293527][T13032] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1060.397841][T13043] SET target dimension over the limit! [ 1060.698005][T13066] SET target dimension over the limit! [ 1060.749341][T13074] FAULT_INJECTION: forcing a failure. [ 1060.749341][T13074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.762495][T13074] CPU: 0 UID: 0 PID: 13074 Comm: syz.2.13774 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1060.762563][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.762577][T13074] Call Trace: [ 1060.762584][T13074] [ 1060.762592][T13074] __dump_stack+0x1d/0x30 [ 1060.762614][T13074] dump_stack_lvl+0xe8/0x140 [ 1060.762644][T13074] dump_stack+0x15/0x1b [ 1060.762665][T13074] should_fail_ex+0x265/0x280 [ 1060.762705][T13074] should_fail+0xb/0x20 [ 1060.762762][T13074] should_fail_usercopy+0x1a/0x20 [ 1060.762805][T13074] _copy_from_user+0x1c/0xb0 [ 1060.762831][T13074] io_submit_one+0x52/0x11d0 [ 1060.762860][T13074] __se_sys_io_submit+0xfb/0x280 [ 1060.762961][T13074] __x64_sys_io_submit+0x43/0x50 [ 1060.762996][T13074] x64_sys_call+0xfc4/0x2fb0 [ 1060.763127][T13074] do_syscall_64+0xd2/0x200 [ 1060.763149][T13074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1060.763183][T13074] ? clear_bhb_loop+0x40/0x90 [ 1060.763208][T13074] ? clear_bhb_loop+0x40/0x90 [ 1060.763309][T13074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.763331][T13074] RIP: 0033:0x7f6b64c3e929 [ 1060.763347][T13074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.763418][T13074] RSP: 002b:00007f6b632a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1060.763441][T13074] RAX: ffffffffffffffda RBX: 00007f6b64e65fa0 RCX: 00007f6b64c3e929 [ 1060.763457][T13074] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007f6b659a3000 [ 1060.763472][T13074] RBP: 00007f6b632a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.763486][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.763561][T13074] R13: 0000000000000000 R14: 00007f6b64e65fa0 R15: 00007ffe6d953008 [ 1060.763584][T13074] [ 1061.256955][T13102] netem: change failed [ 1061.289358][T13106] loop2: detected capacity change from 0 to 512 [ 1061.300876][T13106] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1061.307923][T13106] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.13789: bg 0: block 248: padding at end of block bitmap is not set [ 1061.322746][T13106] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.13789: Failed to acquire dquot type 1 [ 1061.337254][T13106] EXT4-fs (loop2): 1 truncate cleaned up [ 1061.345110][T13106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1061.359619][T13106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.376285][T13111] SET target dimension over the limit! [ 1061.382309][T13113] FAULT_INJECTION: forcing a failure. [ 1061.382309][T13113] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.395692][T13113] CPU: 1 UID: 0 PID: 13113 Comm: syz.7.13792 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1061.395726][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.395757][T13113] Call Trace: [ 1061.395764][T13113] [ 1061.395774][T13113] __dump_stack+0x1d/0x30 [ 1061.395801][T13113] dump_stack_lvl+0xe8/0x140 [ 1061.395848][T13113] dump_stack+0x15/0x1b [ 1061.395870][T13113] should_fail_ex+0x265/0x280 [ 1061.395954][T13113] should_failslab+0x8c/0xb0 [ 1061.395985][T13113] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1061.396016][T13113] ? __alloc_skb+0x101/0x320 [ 1061.396049][T13113] __alloc_skb+0x101/0x320 [ 1061.396120][T13113] alloc_skb_with_frags+0x7d/0x470 [ 1061.396159][T13113] ? perf_tp_event+0x9b3/0x9f0 [ 1061.396183][T13113] ? __rcu_read_unlock+0x4f/0x70 [ 1061.396211][T13113] sock_alloc_send_pskb+0x43a/0x4f0 [ 1061.396334][T13113] tun_get_user+0x8d3/0x2500 [ 1061.396366][T13113] ? avc_has_perm+0xd3/0x150 [ 1061.396396][T13113] ? ref_tracker_alloc+0x1f2/0x2f0 [ 1061.396432][T13113] ? selinux_file_permission+0x2f0/0x320 [ 1061.396499][T13113] tun_chr_write_iter+0x15e/0x210 [ 1061.396529][T13113] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1061.396571][T13113] vfs_write+0x4a0/0x8e0 [ 1061.396610][T13113] ksys_write+0xda/0x1a0 [ 1061.396726][T13113] __x64_sys_write+0x40/0x50 [ 1061.396833][T13113] x64_sys_call+0x2cdd/0x2fb0 [ 1061.396857][T13113] do_syscall_64+0xd2/0x200 [ 1061.396876][T13113] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1061.396948][T13113] ? clear_bhb_loop+0x40/0x90 [ 1061.396971][T13113] ? clear_bhb_loop+0x40/0x90 [ 1061.396994][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.397067][T13113] RIP: 0033:0x7fa71fa1d3df [ 1061.397156][T13113] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1061.397174][T13113] RSP: 002b:00007fa71e087000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1061.397209][T13113] RAX: ffffffffffffffda RBX: 00007fa71fc45fa0 RCX: 00007fa71fa1d3df [ 1061.397222][T13113] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 1061.397288][T13113] RBP: 00007fa71e087090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.397300][T13113] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 1061.397312][T13113] R13: 0000000000000000 R14: 00007fa71fc45fa0 R15: 00007ffc99a72f88 [ 1061.397332][T13113] [ 1061.759296][T13128] SET target dimension over the limit! [ 1061.886412][T13141] syz2: rxe_newlink: already configured on veth0_to_bond [ 1061.937455][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13802'. [ 1061.946543][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13802'. [ 1061.958454][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13802'. [ 1061.994408][T13146] loop4: detected capacity change from 0 to 512 [ 1062.011782][T13146] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1062.019635][T13146] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13807: bg 0: block 248: padding at end of block bitmap is not set [ 1062.041851][T13146] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13807: Failed to acquire dquot type 1 [ 1062.064729][T13163] SET target dimension over the limit! [ 1062.077233][T13146] EXT4-fs (loop4): 1 truncate cleaned up [ 1062.084312][T13146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1062.102577][T13146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.143538][T13173] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1062.155742][T13173] wg2: left promiscuous mode [ 1062.160475][T13173] wg2: left allmulticast mode [ 1062.171544][T13173] wg2: entered promiscuous mode [ 1062.176864][T13173] wg2: entered allmulticast mode [ 1062.216633][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13820'. [ 1062.243618][T13178] macvtap4: entered promiscuous mode [ 1062.249152][T13178] macvtap4: entered allmulticast mode [ 1062.266921][T13178] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1062.355219][T13185] loop2: detected capacity change from 0 to 512 [ 1062.364156][T13185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1062.411235][T13185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.434764][T13185] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.437718][T13201] SET target dimension over the limit! [ 1062.459435][T13205] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 1062.483194][T13185] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13823: corrupted xattr block 19: overlapping e_value [ 1062.507152][T13185] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1062.522424][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13823'. [ 1062.531519][T13211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13823'. [ 1062.536175][T13185] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13823: corrupted xattr block 19: overlapping e_value [ 1062.566569][T13185] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1062.580733][T13185] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.13823: corrupted xattr block 19: overlapping e_value [ 1062.598864][T13185] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1062.615358][T13213] blktrace: Concurrent blktraces are not allowed on loop13 [ 1062.643953][T13214] loop4: detected capacity change from 0 to 1024 [ 1062.657883][T13214] EXT4-fs: Ignoring removed bh option [ 1062.665825][T13214] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1062.688764][T13214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.703303][T13214] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.13829: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 1062.725584][T13214] EXT4-fs (loop4): Remounting filesystem read-only [ 1062.783249][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.868035][T13241] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1062.879010][T13239] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1062.881929][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.893260][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.903290][T13241] wg2: left promiscuous mode [ 1062.907012][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.908050][T13241] wg2: left allmulticast mode [ 1062.915438][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.927605][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.935048][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.942609][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.950048][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.957560][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.965119][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.972530][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.980109][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.988049][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1062.995521][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.003013][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.010585][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.018209][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.025631][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.033089][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.040510][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.047998][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.055629][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.063259][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.070783][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.078227][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.085855][ T1045] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1063.093716][T13241] wg2: entered promiscuous mode [ 1063.098665][T13241] wg2: entered allmulticast mode [ 1063.114419][ T1045] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1063.137260][T13253] FAULT_INJECTION: forcing a failure. [ 1063.137260][T13253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.150616][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.6.13848 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1063.150654][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.150671][T13253] Call Trace: [ 1063.150678][T13253] [ 1063.150686][T13253] __dump_stack+0x1d/0x30 [ 1063.150791][T13253] dump_stack_lvl+0xe8/0x140 [ 1063.150817][T13253] dump_stack+0x15/0x1b [ 1063.150839][T13253] should_fail_ex+0x265/0x280 [ 1063.150908][T13253] should_fail+0xb/0x20 [ 1063.150942][T13253] should_fail_usercopy+0x1a/0x20 [ 1063.150975][T13253] _copy_from_iter+0xcf/0xe40 [ 1063.151079][T13253] ? __rcu_read_unlock+0x4f/0x70 [ 1063.151102][T13253] ? mntput_no_expire+0x6f/0x3c0 [ 1063.151142][T13253] copy_page_from_iter+0x178/0x2a0 [ 1063.151169][T13253] tun_get_user+0x5f0/0x2500 [ 1063.151248][T13253] ? ref_tracker_alloc+0x1f2/0x2f0 [ 1063.151288][T13253] tun_chr_write_iter+0x15e/0x210 [ 1063.151324][T13253] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1063.151391][T13253] vfs_write+0x4a0/0x8e0 [ 1063.151438][T13253] ksys_write+0xda/0x1a0 [ 1063.151481][T13253] __x64_sys_write+0x40/0x50 [ 1063.151522][T13253] x64_sys_call+0x2cdd/0x2fb0 [ 1063.151580][T13253] do_syscall_64+0xd2/0x200 [ 1063.151603][T13253] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1063.151638][T13253] ? clear_bhb_loop+0x40/0x90 [ 1063.151717][T13253] ? clear_bhb_loop+0x40/0x90 [ 1063.151762][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.151789][T13253] RIP: 0033:0x7fb47b85d3df [ 1063.151808][T13253] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1063.151831][T13253] RSP: 002b:00007fb479ec7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1063.151916][T13253] RAX: ffffffffffffffda RBX: 00007fb47ba85fa0 RCX: 00007fb47b85d3df [ 1063.151931][T13253] RDX: 000000000000006a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1063.152029][T13253] RBP: 00007fb479ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.152044][T13253] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000001 [ 1063.152118][T13253] R13: 0000000000000000 R14: 00007fb47ba85fa0 R15: 00007fff67b91cb8 [ 1063.152140][T13253] [ 1063.379334][T13255] wg2: left promiscuous mode [ 1063.384025][T13255] wg2: left allmulticast mode [ 1063.410507][T13255] wg2: entered promiscuous mode [ 1063.415458][T13255] wg2: entered allmulticast mode [ 1063.451608][ T29] kauditd_printk_skb: 1190 callbacks suppressed [ 1063.451661][ T29] audit: type=1326 audit(1751805301.734:193189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.489828][ T29] audit: type=1326 audit(1751805301.774:193190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.491069][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.514601][ T29] audit: type=1326 audit(1751805301.774:193191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.521376][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.545709][ T29] audit: type=1326 audit(1751805301.774:193192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.545756][ T29] audit: type=1326 audit(1751805301.774:193193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.545852][ T29] audit: type=1326 audit(1751805301.774:193194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.545886][ T29] audit: type=1326 audit(1751805301.774:193195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.545918][ T29] audit: type=1326 audit(1751805301.774:193196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.625471][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625503][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625527][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625665][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625764][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625792][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625820][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625848][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625869][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625896][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625936][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.625993][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626015][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626041][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626066][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626140][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626165][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626192][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626220][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.626243][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.650128][ T29] audit: type=1326 audit(1751805301.774:193197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.650190][ T29] audit: type=1326 audit(1751805301.774:193198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.0.13856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a18bde929 code=0x7ffc0000 [ 1063.673933][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.673964][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.673992][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.674080][ T1045] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1063.726049][T13275] syz2: rxe_newlink: already configured on veth0_to_bond [ 1063.934586][ T1045] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1064.122263][T13288] SET target dimension over the limit! [ 1064.176998][T13290] random: crng reseeded on system resumption [ 1064.303338][T13303] syz2: rxe_newlink: already configured on veth0_to_bond [ 1064.358935][T13308] SET target dimension over the limit! [ 1064.589987][T13316] syz2: rxe_newlink: already configured on veth0_to_bond [ 1064.635914][T13324] __nla_validate_parse: 3 callbacks suppressed [ 1064.635931][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13879'. [ 1064.704093][T13330] wg2: left promiscuous mode [ 1064.708817][T13330] wg2: left allmulticast mode [ 1064.717293][T13330] wg2: entered promiscuous mode [ 1064.722292][T13330] wg2: entered allmulticast mode [ 1064.857887][T13341] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13886'. [ 1064.869627][T13341] netlink: 'syz.0.13886': attribute type 4 has an invalid length. [ 1064.999844][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13890'. [ 1065.112790][T13363] loop2: detected capacity change from 0 to 512 [ 1065.122505][T13363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1065.152028][T13363] EXT4-fs (loop2): 1 truncate cleaned up [ 1065.158634][T13363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.240539][T13372] syz2: rxe_newlink: already configured on veth0_to_bond [ 1065.304077][T13379] syz2: rxe_newlink: already configured on veth0_to_bond [ 1065.444021][T10668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.466461][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.518983][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.526649][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.534161][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.542346][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.549779][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.557228][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.565412][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.572948][T13394] loop4: detected capacity change from 0 to 764 [ 1065.572985][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.586666][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.586690][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.602236][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.609694][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.609905][T13394] rock: directory entry would overflow storage [ 1065.622040][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.623415][T13394] rock: sig=0x4654, size=5, remaining=4 [ 1065.637383][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.644866][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.652260][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.660385][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.667870][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.675323][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.682722][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.691062][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.698585][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.706021][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.713500][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.713531][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.713559][ T3505] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1065.722490][ T3505] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1065.774217][T13403] SET target dimension over the limit! [ 1065.795057][T13403] 9pnet_fd: Insufficient options for proto=fd [ 1065.833188][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.841535][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.849258][T13416] SET target dimension over the limit! [ 1065.876266][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.883843][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.891303][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.899488][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.906950][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.914427][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.914560][T13413] ================================================================== [ 1065.921868][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.929960][T13413] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1065.930017][T13413] [ 1065.930024][T13413] write to 0xffffffff868f2318 of 88 bytes by task 3505 on cpu 1: [ 1065.930043][T13413] prb_reserve+0x696/0xaf0 [ 1065.930077][T13413] vprintk_store+0x56d/0x860 [ 1065.930098][T13413] vprintk_emit+0x178/0x650 [ 1065.930119][T13413] dev_vprintk_emit+0x242/0x2a0 [ 1065.930146][T13413] dev_printk_emit+0x84/0xb0 [ 1065.930172][T13413] __dev_printk+0xf3/0x110 [ 1065.930199][T13413] _dev_warn+0x9b/0xd0 [ 1065.930224][T13413] hid_parser_main+0x6ff/0x750 [ 1065.930252][T13413] hid_open_report+0x48b/0x7a0 [ 1065.930279][T13413] hid_generic_probe+0x33/0x70 [ 1065.930307][T13413] hid_device_probe+0x2c8/0x490 [ 1065.930339][T13413] really_probe+0x1bf/0x5a0 [ 1065.930370][T13413] __driver_probe_device+0x121/0x190 [ 1065.930401][T13413] driver_probe_device+0x37/0x2f0 [ 1065.930432][T13413] __device_attach_driver+0x205/0x310 [ 1065.930459][T13413] bus_for_each_drv+0x1bd/0x230 [ 1065.930509][T13413] __device_attach+0x1c7/0x290 [ 1065.930535][T13413] device_initial_probe+0x1a/0x30 [ 1065.930565][T13413] bus_probe_device+0x143/0x1d0 [ 1065.930599][T13413] device_add+0x5c9/0x770 [ 1065.930623][T13413] hid_add_device+0x273/0x2f0 [ 1065.930652][T13413] uhid_device_add_worker+0x2b/0xa0 [ 1065.930678][T13413] process_scheduled_works+0x4cb/0x9d0 [ 1065.938115][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.945059][T13413] worker_thread+0x582/0x770 [ 1065.947480][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1065.955106][T13413] kthread+0x489/0x510 [ 1065.955131][T13413] ret_from_fork+0xda/0x150 [ 1065.955156][T13413] ret_from_fork_asm+0x1a/0x30 [ 1065.955184][T13413] [ 1065.955191][T13413] read to 0xffffffff868f2318 of 8 bytes by task 13413 on cpu 0: [ 1065.955207][T13413] _prb_read_valid+0x383/0x920 [ 1065.955244][T13413] prb_read_valid_info+0x66/0x90 [ 1065.955283][T13413] find_first_fitting_seq+0x1b1/0x320 [ 1065.955314][T13413] syslog_print_all+0x111/0x3a0 [ 1065.955355][T13413] do_syslog+0x2fd/0x7e0 [ 1065.955389][T13413] __x64_sys_syslog+0x41/0x50 [ 1065.955408][T13413] x64_sys_call+0x2ea0/0x2fb0 [ 1065.955433][T13413] do_syscall_64+0xd2/0x200 [ 1065.955455][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.955480][T13413] [ 1065.955491][T13413] value changed: 0x000000000000302d -> 0x000000000000502d [ 1065.955503][T13413] [ 1065.955508][T13413] Reported by Kernel Concurrency Sanitizer on: [ 1065.955523][T13413] CPU: 0 UID: 0 PID: 13413 Comm: syz.0.13915 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 1065.955554][T13413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.955570][T13413] ================================================================== [ 1066.207638][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.217457][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.225560][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.233039][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.240495][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.247921][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.255860][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.263284][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.270903][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.278312][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.286392][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.293848][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.301322][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.308732][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.316825][ T3505] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1066.324682][ T3505] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1